Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json)
Hash identifier: pIcotyU4TpNB08t6C6fmyl4B4W2Yja61rifKKBPY+30=
Subject key identifier: 71:A4:1C:71:46:AA:63:B6:E5:28:D8:B0:6D:DC:32:2C:10:55:FF:76
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0194BC72A945EAB01731EAA01FA2D2A5D1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 047l34dEc0OdG2ttT+yYVuuCiqbwulQxH71zIwfkFjA=)
2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=)
3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:45:ea:b0:17:31:ea:a0:1f:a2:d2:a5:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=71a41c7146aa63b6e528d8b06ddc322c1055ff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:23:7f:29:51:ca:67:00:89:63:0e:0e:69:e0:
63:2c:f9:99:4a:d3:22:27:61:6b:cf:51:0c:f5:f0:
02:43:c3:f7:d1:69:31:1e:d8:a7:10:43:5a:1c:a6:
0c:0d:a5:1b:52:e5:04:4c:0a:3d:7b:24:6c:0b:97:
76:5d:a7:02:7d:1a:1f:8e:9a:b7:a3:d0:d4:76:81:
ee:2e:b6:b8:f0:5e:9c:70:13:f4:f3:af:9c:9d:f9:
09:13:7d:75:e6:dd:a8:59:e5:21:d1:9b:1d:df:19:
80:95:91:cd:5a:4a:69:e4:b9:88:63:f8:3e:ee:dd:
8b:63:1e:ef:4e:7f:ae:4d:5a:d5:0e:44:a8:98:90:
8c:3a:10:e9:65:cf:0a:65:76:ed:b9:30:c5:12:6c:
bc:83:db:d0:11:86:e9:7e:60:25:72:0f:40:f6:12:
4d:ff:56:34:a5:bf:4c:ac:7a:2a:dd:fb:cb:65:5b:
e6:99:ba:1e:ec:50:5d:41:fa:c4:9c:cd:65:95:69:
3e:3d:86:ed:be:98:cc:e4:6c:88:33:7f:48:ce:69:
c7:be:5c:24:1c:ec:f1:c4:56:78:06:61:8f:79:dc:
a1:db:8b:9d:7d:27:30:08:6d:96:b8:4d:70:21:cc:
bd:d8:71:89:8f:17:c8:7b:69:5e:65:94:20:b8:e8:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:1C:71:46:AA:63:B6:E5:28:D8:B0:6D:DC:32:2C:10:55:FF:76
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:e0:f1:5d:e3:01:dc:f1:83:be:6c:c9:8f:d0:3c:61:72:
16:da:6d:57:e7:30:12:9c:d9:30:4e:64:24:c8:22:b3:aa:0d:
b2:f4:63:38:52:94:99:7d:2a:2d:7b:4f:48:77:56:8a:3e:ce:
be:02:c2:96:7d:c8:9e:99:ee:d3:47:63:25:21:44:4d:e9:9a:
1e:e4:39:1f:4d:f9:8d:2b:a0:2b:1d:f1:35:33:c7:8a:60:1d:
ed:74:66:cc:25:5e:3f:51:4d:89:59:30:32:66:c9:c8:71:e3:
f3:27:af:79:99:db:cd:f8:f5:85:eb:27:61:7d:d2:2f:9d:c0:
e8:1a:4c:fa:6c:10:cd:7f:f6:c2:76:64:49:0f:e9:3b:90:ed:
6b:5a:a7:64:d7:ac:5e:a5:29:36:db:71:0f:64:eb:17:e3:95:
19:65:ea:9e:3a:a8:48:78:d2:af:0b:35:80:68:9a:fa:cd:4e:
15:58:45:01:e4:e9:c2:f1:55:1c:83:6a:06:a3:e6:04:7c:c5:
e2:30:63:ae:35:a2:14:6c:35:55:52:bf:eb:7c:69:35:94:45:
d9:d3:28:0b:b2:1a:be:9b:5c:f3:cf:a2:11:9e:79:aa:22:dc:
95:29:21:28:68:cb:af:c6:7c:6b:f6:76:24:46:cb:66:6e:4c:
8a:cc:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:10 2025 by rpki-client