Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: oiSAO2ffOiInAp8MSoplOoHNmkS7OpADTvO/w0j3VcA=
Subject key identifier: 6B:17:F6:61:26:75:8F:EC:B4:95:E8:88:00:1A:40:2B:F3:5A:F3:91
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0195E0EB7C60838C267B5634CAC3E8A34DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 1202
Signing time: Sat 29 Mar 2025 08:01:23 +0000
Manifest this update: Sat 29 Mar 2025 08:01:23 +0000
Manifest next update: Sun 30 Mar 2025 08:01:23 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: gDP1SFeU8H+XV7+KcTkEvbs2bqyY/Gh0e5O08Q+W5oY=)
2: aW4RufV84k31ipqteYJMKE-MWns.roa (hash: TaIvFNKhSLJsRmqi1+QKHEIHNXDSbVD+wo6DE/PVLR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:7c:60:83:8c:26:7b:56:34:ca:c3:e8:a3:4d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Mar 29 08:01:23 2025 GMT
Not After : Mar 30 08:01:23 2025 GMT
Subject: CN=6b17f66126758fecb495e888001a402bf35af391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:d8:dc:9b:ca:1c:20:25:c5:63:f6:36:e7:
23:7c:21:a1:0a:dc:0f:74:9b:47:6f:67:33:c8:c8:
5b:90:ad:0e:bd:3a:d0:58:42:a4:83:6d:36:fe:d4:
40:d2:b8:46:af:6e:55:8f:4e:21:7f:15:b9:0b:21:
0f:41:b9:34:ac:21:01:8f:16:4e:e4:1e:65:81:ba:
9d:da:85:3c:60:af:38:61:5d:da:e8:85:76:c8:9d:
54:33:55:c1:ea:82:64:43:e8:f5:da:24:10:78:d6:
e4:62:25:95:61:97:03:6d:d4:49:4c:f4:9c:a3:19:
cf:f5:cb:f6:54:f4:95:89:dc:41:26:ae:08:70:56:
c3:5f:cb:64:73:2f:e8:55:74:55:85:01:28:17:1c:
d4:7d:18:5e:64:dd:7e:96:94:ff:ea:7d:c4:6f:c4:
6b:ca:73:00:83:5c:db:80:9e:a6:44:0c:88:3f:f7:
40:1a:54:d4:3f:6d:73:80:07:d8:e2:93:dc:69:eb:
3c:13:63:0c:3c:e4:77:b6:43:7f:5e:a8:28:0c:3d:
19:d0:7e:f9:50:07:bb:5e:48:21:84:50:6f:42:6d:
81:73:b9:69:fa:6d:c8:92:c7:de:71:ed:5b:08:e6:
bc:44:e3:ac:3b:e4:b1:81:1b:01:97:eb:4a:18:be:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:F6:61:26:75:8F:EC:B4:95:E8:88:00:1A:40:2B:F3:5A:F3:91
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:74:94:bf:0a:73:7a:56:46:9c:d4:86:52:f1:29:d5:14:e0:
c7:c0:f5:ff:aa:f6:cb:fe:36:2b:0b:75:c7:f7:8c:e9:da:e8:
8c:99:db:b2:02:06:8f:94:07:4d:49:2b:b3:0c:3c:be:6a:a6:
fa:70:2a:f3:17:0a:58:eb:ba:76:d7:69:f1:83:34:d6:0f:04:
40:34:0d:df:81:5e:3d:e2:fa:a0:ec:46:45:c8:a1:50:80:84:
a6:85:df:af:c1:8a:08:d9:d4:6b:c9:19:db:c7:b8:54:11:42:
34:fc:99:f8:10:cd:7a:2e:38:31:a9:60:70:0f:35:36:42:db:
7d:ba:61:95:16:22:f7:97:7f:b6:42:5f:26:a2:eb:b2:39:62:
0f:24:60:66:54:5d:9f:28:f8:f3:a9:49:a8:76:6c:22:b6:09:
8d:b8:76:97:e5:d8:0b:99:a2:26:98:3e:fc:1e:ec:13:4d:63:
e2:e1:a0:4f:e4:d0:06:26:7e:7e:73:11:f4:2e:83:d4:55:f4:
82:85:bd:ea:75:57:43:e8:d9:c1:04:ba:82:f1:ba:cf:73:47:
15:85:75:52:d7:2b:0e:65:24:a8:9e:b3:8f:22:77:30:5c:eb:
ed:41:bf:61:2e:ca:74:1c:24:1a:fa:ba:7a:76:7c:d0:ae:c7:
02:6c:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:58:38 2025 by rpki-client