Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
File: HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft (raw, json)
Hash identifier: vBUyBASS4GCXLbj4opUMsxbrCefw4cbXyZ+fBRoRGeE=
Subject key identifier: F4:E7:19:9D:8F:4A:8E:E9:8E:6F:65:B4:4C:72:2E:5B:68:6E:67:65
Authority key identifier: 1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
Certificate issuer: /CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Certificate serial: 0194BBCE180D5D08FA6BEF1D9DD98BB509AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
Manifest number: 04A4
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl (hash: /8VTWiS7JZlDkUR05XMn2c2pqy4ksC3LnpMoz8qFZis=)
2: bIBmhUC2WLWBXyi5VaCHLFuHkDs.roa (hash: F54YraMKL44U0jhJwgmaruTpnrxsP2uQrqeXw7OujLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:0d:5d:08:fa:6b:ef:1d:9d:d9:8b:b5:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63a47ecbfcfaa9f6cfece2614c70e8b5adb83e
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=f4e7199d8f4a8ee98e6f65b44c722e5b686e6765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:5b:a8:0f:2d:96:bd:1b:4e:0a:32:2f:e9:
15:10:b6:a8:60:39:77:07:11:5e:aa:5a:4e:51:f0:
82:db:ce:1a:7d:ef:33:d7:6d:d6:4f:e3:f9:57:3f:
f5:0e:fb:32:84:ed:0a:bb:8a:14:36:6c:4a:5f:1f:
eb:27:38:68:bf:83:45:09:4d:0d:5c:16:1c:db:87:
c1:66:8a:85:ef:23:1f:ad:17:3b:8c:58:73:1b:82:
3b:a9:6d:00:f0:2d:c3:4f:a5:20:57:f2:3a:eb:f5:
4e:1e:ee:30:97:4e:49:9b:3a:ad:06:11:15:e2:9f:
b5:ee:9c:76:86:fc:66:57:e1:79:cb:b8:b7:b0:03:
87:93:fd:4f:46:56:9c:ac:cc:d9:5e:93:e5:6d:a1:
a4:6f:f1:5d:e7:e7:15:a5:3c:56:ef:44:a9:11:42:
be:73:ca:6d:aa:66:bc:5a:61:1e:e4:05:60:c7:44:
0a:5a:a2:ec:94:a5:7b:5f:cd:92:05:b8:17:80:1d:
02:37:a2:e4:d8:c3:8d:8f:4f:61:e7:dc:c7:37:ec:
a5:4d:b3:7f:e5:5b:46:e3:f8:79:18:a6:17:02:c1:
80:4f:d5:05:55:23:ac:ed:9e:3f:64:b5:e0:db:63:
e0:ff:33:a0:9e:af:18:e2:97:14:13:2b:36:fb:a2:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E7:19:9D:8F:4A:8E:E9:8E:6F:65:B4:4C:72:2E:5B:68:6E:67:65
X509v3 Authority Key Identifier:
keyid:1E:63:A4:7E:CB:FC:FA:A9:F6:CF:EC:E2:61:4C:70:E8:B5:AD:B8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmOkfsv8-qn2z-ziYUxw6LWtuD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4a96be-fbeb-4580-8baa-355b5cd5d971/1/HmOkfsv8-qn2z-ziYUxw6LWtuD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:35:06:7e:1e:79:ff:8b:7b:e3:69:02:51:1a:36:5b:43:c7:
73:cc:44:16:f6:4a:35:a0:0f:b2:dc:3e:3d:f0:d0:1f:62:7f:
cf:66:aa:cf:cd:11:89:62:17:29:4d:c8:41:ac:af:b8:0a:5f:
62:bd:02:c3:0e:dc:9a:c5:28:aa:ce:72:11:22:4f:6f:33:ad:
ee:5b:d5:d9:f2:0a:84:78:4c:ff:3b:e0:35:56:6e:e3:27:8d:
3a:ed:7d:81:4f:1f:40:0b:a3:48:68:1a:eb:8e:ce:b8:93:4c:
c2:00:70:82:78:34:65:8f:13:f2:94:f3:0d:de:c5:a5:07:f6:
7d:15:d1:ae:ad:fe:37:7f:66:28:2e:f0:09:2e:cd:f8:fa:a2:
e7:4e:95:ce:88:ad:cb:5d:62:4a:1b:fd:97:4d:92:e8:03:98:
dd:d6:7c:30:21:fe:87:3e:f2:02:2b:21:19:65:96:ed:dc:a9:
33:4a:e6:3e:56:db:e8:5c:cc:b1:9d:65:20:d4:4d:78:7a:fa:
34:03:9d:3b:32:16:f6:e5:c7:61:0a:c1:bb:6b:5b:d2:b1:a0:
32:a1:47:6c:54:08:d9:f0:66:2b:81:c8:44:19:90:5d:bd:04:
17:c6:a1:2f:d0:4c:24:ff:4c:15:52:76:e2:a3:a0:14:69:97:
91:f6:af:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:34 2025 by rpki-client