Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: B+7J3yNOZhwjBLJcVWgsS54N9kjVYmlFUad32UDElnE=
Subject key identifier: 48:2A:99:15:3B:82:3F:49:5D:35:D3:24:7F:10:B6:37:85:D7:F9:2F
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 0194BD853FDCCFE320434153D9B28208A0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 11D8
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: 7VVuzB2mo/wwBYmZYfRvL2EnsBIQX4CTJxlCEpL+Wd0=)
2: jHj1kA03qC8i8hguuEC8ASnj4XQ.roa (hash: 6J5ezyoc/LI46xWXhW/cUUltYyOZg4CBJG0jaVAl1nQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3f:dc:cf:e3:20:43:41:53:d9:b2:82:08:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=482a99153b823f495d35d3247f10b63785d7f92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:97:a1:39:ec:55:63:13:56:8d:a7:5f:80:
74:44:72:51:9e:dd:d7:af:07:57:f6:59:6d:55:63:
27:6a:37:85:12:50:d0:7f:40:a2:54:e7:79:98:eb:
6b:9c:6c:29:d1:2a:37:bb:6d:bd:24:0a:5c:fc:1f:
1c:37:64:c9:fc:03:97:cb:fd:e7:e8:48:37:c8:f0:
31:d3:40:4d:55:4b:f4:cc:45:07:e6:4d:1f:37:90:
50:94:6f:fd:9b:01:c4:03:c3:a2:b4:89:16:64:49:
3d:f1:8b:9d:e9:df:86:7f:4d:ec:05:b9:63:9b:4d:
a7:5e:b5:bc:a9:ea:22:f2:8f:a9:61:26:3f:67:bf:
20:f0:b1:e1:6d:61:84:48:e5:d9:e7:ae:5a:38:23:
7a:0b:61:c3:1d:11:b7:6a:1b:ca:8f:91:be:3d:47:
04:0a:c3:2f:a0:50:bf:f5:04:ef:64:5d:9e:2c:30:
90:6b:45:92:7a:bd:c0:58:e2:b9:ee:3c:a9:fe:de:
21:e1:1a:5f:f4:f2:64:13:03:b2:63:5c:19:d5:12:
4f:2b:7b:a3:45:5d:48:53:e6:44:c9:0f:9a:c7:07:
9b:a0:98:f9:a8:e2:01:85:dd:65:fa:1e:dc:61:d7:
14:43:45:58:44:e9:cc:3e:78:f6:fc:42:0a:28:f3:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:99:15:3B:82:3F:49:5D:35:D3:24:7F:10:B6:37:85:D7:F9:2F
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6d:d7:fa:76:6a:37:03:7d:61:ce:7a:3e:0f:86:32:52:28:
b3:82:02:cc:f8:48:d1:b7:91:c1:7a:5d:91:fc:06:07:ba:c2:
ae:2e:d9:d0:9a:75:c4:c1:bd:ed:db:e7:e4:95:79:b6:c5:87:
05:6e:83:ad:28:e0:a2:bf:3e:f2:a0:37:dc:e2:ea:df:4e:06:
73:b9:da:64:3b:28:f6:e3:04:98:b6:84:f1:ff:e1:87:e5:1b:
e2:f1:5a:ab:91:e1:b8:83:5d:26:3a:ef:13:3d:84:49:78:d8:
cb:10:1a:83:44:91:cc:bb:db:d2:f1:79:df:ea:c5:3c:9e:7c:
a3:35:94:7c:0f:38:f3:bf:12:3d:0e:77:b5:6d:26:38:b5:4e:
b5:ee:e2:21:4c:e4:f3:5b:26:17:b0:5a:6d:44:e0:03:c1:91:
c8:c2:6e:a4:6d:8e:13:61:16:99:3d:fa:c7:6d:b0:85:aa:16:
8b:4e:ac:10:75:8d:96:16:d4:b2:c7:c6:86:a9:a0:aa:bb:2f:
54:ef:88:97:7c:96:38:04:ad:fc:7a:02:b5:0e:5b:a9:fe:b8:
e2:63:76:40:78:73:93:e8:2c:3c:13:3a:b7:26:75:9c:fa:8d:
c9:e9:02:1a:b3:ee:ad:4b:58:bb:7c:22:86:9a:4c:e1:a2:aa:
8b:f6:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:04 2025 by rpki-client