Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: FaHJGA5VlHi4QzCg2aZJK5o2JmuIOT21K5eXCcG+pS4=
Subject key identifier: 7C:0D:E8:96:0A:30:AA:5F:E8:EF:02:C1:C9:A6:A8:CC:06:7A:7B:D7
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 0194BBCEDB5917CC7E17297008C5C8E01FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: /Bw58sol9z5v/vDeR5IH9Kr/izv0pt0WqLZXSG5/ba4=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:59:17:cc:7e:17:29:70:08:c5:c8:e0:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=7c0de8960a30aa5fe8ef02c1c9a6a8cc067a7bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:49:37:7f:f0:cb:cc:1c:21:de:0c:63:de:
8e:78:1c:de:0b:f4:09:88:8e:e5:f6:7e:da:0e:94:
00:b7:ec:ea:4d:96:3b:16:d9:f6:6e:6e:4f:a7:1e:
c6:ba:ed:ac:e1:21:09:14:28:4d:bf:f8:18:51:a3:
b1:58:af:8b:7d:3f:02:0a:b3:2f:5b:eb:d9:aa:e3:
cf:d1:fe:4b:7f:56:bb:5c:3a:b3:52:0d:19:d8:12:
e6:40:fb:75:9a:1b:13:c1:f7:b0:8d:30:8d:bf:ab:
ba:d8:32:6d:1f:a1:e8:d4:04:c9:a9:40:b9:89:50:
54:ed:2f:03:73:1d:ed:5a:e1:7f:cc:c3:5c:26:b2:
9b:4f:95:87:40:49:7d:d9:ec:d6:4b:29:53:36:f1:
57:70:17:b4:bb:be:1e:31:86:f4:87:85:8e:23:a8:
ab:63:9c:cd:fc:b3:41:b1:0b:89:77:92:fb:9b:1d:
83:40:12:27:13:2b:3e:51:5a:3a:82:d0:10:4f:52:
6d:b4:89:6f:bf:9c:25:b0:c6:10:c6:a6:bc:19:54:
b5:05:ad:af:2d:c0:6b:c7:2e:ac:c8:f3:42:b8:6b:
92:19:8d:be:00:84:61:9e:45:c4:72:5e:81:3f:e0:
24:20:a4:ec:05:93:6d:55:fa:bc:12:d5:0f:68:43:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0D:E8:96:0A:30:AA:5F:E8:EF:02:C1:C9:A6:A8:CC:06:7A:7B:D7
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:87:ff:87:95:2d:eb:03:fb:70:4f:60:82:4b:b5:1a:67:e2:
2e:37:66:a4:10:d1:1d:2b:e6:5c:c3:dd:c2:6c:a4:61:7a:91:
23:63:ac:fe:19:f9:13:4d:41:d3:5b:92:42:a9:8f:35:d2:bf:
ba:89:99:5d:55:1e:96:2b:9d:15:2e:48:c0:26:65:a4:24:20:
71:28:5a:a1:bb:92:33:79:23:2b:94:d5:31:5b:bb:9a:14:81:
b3:4d:3c:f3:1e:1c:a5:86:27:ba:d4:9e:a6:b1:ab:99:bd:71:
3a:56:9b:2f:06:8e:1b:e5:56:2a:d2:bb:96:75:cc:0c:0a:7e:
48:2f:4b:c4:69:4e:7c:b1:e9:39:1d:2c:a0:be:23:d2:2a:80:
22:71:70:66:3e:f1:17:13:94:90:e2:35:14:f6:83:d2:00:47:
83:8d:42:eb:f0:d0:a7:ef:e0:ba:7e:7a:db:8a:8a:e4:27:5b:
26:62:eb:1f:f8:da:c7:3f:b4:17:51:42:3e:83:bf:2f:59:44:
b1:ce:fa:ed:6a:6f:d9:ea:d0:ee:2c:1f:53:41:9a:d5:b8:a4:
82:c1:a1:1c:c7:81:2a:88:d9:0f:8a:f8:3b:2c:ec:59:f6:b6:
42:45:41:51:7c:a3:f4:9b:37:d9:77:45:c5:71:fb:0d:ff:3f:
3c:33:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:53:02 2025 by rpki-client