Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
File: HNq3BST9UTE7hPXY9GNio9jICBQ.mft (raw, json)
Hash identifier: QIHGvVBK+hXF3zBomA0GrWf5gvAsPq8eSG62m24JcB0=
Subject key identifier: 81:D2:BF:52:2E:46:21:A8:62:8A:67:C6:B6:23:64:3F:70:13:86:45
Authority key identifier: 1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
Certificate issuer: /CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Certificate serial: 0194BCA98F69C8B5A949693BCBD1134D8EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 8H6vwz49R0kM-gbNtDLGiXSOgWE.roa (hash: 7d11KfsVtGX7lu3CgRTWP0J/PhStNQboteNSMa34UZE=)
2: HNq3BST9UTE7hPXY9GNio9jICBQ.crl (hash: VUfEM/P3Tbo5yu0WfOAohNZ5dXHQyRGWh+ZSGI8Zv3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8f:69:c8:b5:a9:49:69:3b:cb:d1:13:4d:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdab70524fd51313b84f5d8f46362a3d8c80814
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=81d2bf522e4621a8628a67c6b623643f70138645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:d5:f6:33:eb:9c:97:38:62:3a:fe:08:5c:
8d:e8:df:93:e8:d7:68:ef:23:02:a4:10:87:dc:f4:
ae:f8:04:9e:4b:df:d3:83:cd:53:ba:f3:63:82:64:
f4:6c:30:b3:2d:7e:1a:f2:01:5d:b0:4d:89:64:93:
2b:6b:ca:06:3e:bf:53:d3:b5:cf:b1:17:0d:f0:d2:
13:45:c7:82:7a:17:23:ab:9a:45:30:20:80:aa:23:
62:da:1a:57:95:1d:b0:f0:b7:03:ed:df:87:c0:e6:
c9:78:d9:25:dd:d6:16:28:91:bf:cb:63:e0:16:78:
21:41:38:7e:91:c2:e9:38:28:b5:71:3f:b6:92:ad:
05:4d:98:61:c4:78:89:60:50:bd:48:e9:3b:dc:8b:
b3:f6:71:61:1a:24:32:52:ed:6e:71:71:86:56:af:
49:71:84:61:cd:15:6f:21:30:21:d9:cc:b4:09:ac:
bc:5f:be:e5:01:0a:aa:20:6a:a0:18:f7:c1:3f:c1:
24:96:36:ed:81:a0:6d:31:c8:ab:3b:8e:47:f9:ac:
82:98:20:25:d8:22:89:db:00:35:b2:ac:f2:3f:0d:
08:25:48:71:67:3b:54:50:0a:5a:69:e6:8e:db:43:
da:ce:e9:c4:1d:e6:16:ae:bd:0a:73:fe:27:a0:d1:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:BF:52:2E:46:21:A8:62:8A:67:C6:B6:23:64:3F:70:13:86:45
X509v3 Authority Key Identifier:
keyid:1C:DA:B7:05:24:FD:51:31:3B:84:F5:D8:F4:63:62:A3:D8:C8:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNq3BST9UTE7hPXY9GNio9jICBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/19017a-4fcc-4fad-a572-99f693e45061/1/HNq3BST9UTE7hPXY9GNio9jICBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:fb:c0:0a:eb:d2:21:1f:72:0e:34:82:7e:50:ca:35:39:
5b:b5:90:18:94:9f:7a:78:c2:40:f5:df:96:65:31:23:90:65:
ca:01:00:aa:23:ef:6b:1e:39:69:bf:36:a6:6d:ab:de:f5:94:
61:52:8a:5f:de:58:fc:5e:d9:af:b4:45:15:d7:70:6f:b1:69:
44:c6:08:8a:ba:2c:1e:50:c2:66:6d:03:d1:e1:5c:9a:e9:e5:
9c:7f:6d:14:21:36:47:dd:fa:6e:29:49:7e:80:40:7f:31:36:
b3:9a:4e:d1:04:20:b6:08:e3:6c:95:86:76:7a:08:3f:ab:62:
a7:54:ed:0f:5e:7f:14:74:bd:a8:d2:b2:26:c9:ec:db:db:70:
9b:aa:df:03:fb:1d:c6:b8:a6:05:a9:7c:00:fb:ed:93:3d:cd:
89:0b:69:6e:1f:96:21:1b:dd:ab:20:96:e5:39:25:fd:3d:18:
83:5e:aa:ff:6d:89:f5:87:64:38:68:89:11:19:42:54:e7:93:
e3:ff:ed:4d:cf:ec:6d:c4:3f:2b:01:43:92:62:ed:e4:7b:20:
23:b8:4f:34:ac:5c:0a:58:7c:d7:84:27:e6:d3:6c:58:4c:26:
71:0e:ab:2d:21:10:aa:d9:d2:ab:8d:cf:65:13:6e:9f:ed:e7:
e7:56:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:13 2025 by rpki-client