Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: yyEzSrA2C46DQqOJkq9piBdjjiHLaTCG5QadUhFzFPA=
Subject key identifier: 6B:BA:F2:58:0B:B6:A4:EB:94:A2:A3:74:90:82:F7:F2:C8:89:8A:CE
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 0195E00F7AB2B411966664EE88335E07B27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 1428
Signing time: Sat 29 Mar 2025 04:01:05 +0000
Manifest this update: Sat 29 Mar 2025 04:01:05 +0000
Manifest next update: Sun 30 Mar 2025 04:01:05 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: y5FxwDrDC5dXuRgYdzRptL68WTFRm3Kt+OmjHXofB7Q=)
2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:7a:b2:b4:11:96:66:64:ee:88:33:5e:07:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Mar 29 04:01:05 2025 GMT
Not After : Mar 30 04:01:05 2025 GMT
Subject: CN=6bbaf2580bb6a4eb94a2a3749082f7f2c8898ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:35:6a:1f:44:dc:cf:a2:a8:17:59:1e:7e:
3a:55:c9:b8:03:2c:65:04:37:4c:e3:4b:6b:67:f4:
8c:51:e0:d6:f4:7e:d3:c4:1d:bc:a7:03:0d:62:8f:
34:f5:82:ec:60:ca:cb:d3:01:18:22:17:36:34:dd:
65:3d:d9:f5:2a:cb:49:7b:5c:61:43:e2:7d:72:ee:
73:2c:99:a6:e4:76:6f:07:f2:0f:f9:9b:63:69:e5:
a1:c7:31:de:d0:0d:02:ca:f0:64:ee:60:a9:2d:02:
32:33:87:89:86:e6:e6:5f:55:47:3c:ef:ba:c8:38:
36:9a:7b:92:ec:e2:4b:18:fe:46:3c:7f:cb:15:ee:
23:73:8d:02:5d:a8:b9:bf:53:f3:8d:9d:a7:69:c4:
59:02:6e:6a:9f:e7:8e:2f:49:1e:07:72:33:cb:01:
ba:b1:41:e4:11:a1:9c:a3:ce:ee:b9:ce:59:a7:14:
5c:e9:3c:54:79:d9:3c:79:08:31:42:74:ea:fe:4d:
64:e2:8d:fe:a3:ee:cb:51:52:a3:70:19:15:be:12:
ff:65:b1:a7:9b:5d:e0:03:46:66:b0:8b:08:e7:26:
a9:24:ab:67:cb:c3:19:21:cd:21:69:2d:61:4d:7a:
73:ee:61:b7:66:24:7c:b0:96:68:40:d6:f6:77:78:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:F2:58:0B:B6:A4:EB:94:A2:A3:74:90:82:F7:F2:C8:89:8A:CE
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:58:d3:ba:49:51:6f:f6:f7:79:be:93:be:c9:37:2b:88:98:
7c:5e:13:a6:f5:20:46:cc:f2:52:eb:e3:b5:4c:6b:4d:60:d2:
1a:68:bb:2a:7d:14:00:ec:f4:0d:5f:fa:47:02:41:6e:54:da:
e1:61:1c:e2:14:90:f4:1e:b9:36:39:8f:3e:5c:2b:78:aa:cd:
85:61:f7:0c:35:37:1d:e9:b9:4a:b8:e1:34:db:cf:3e:e3:16:
43:fe:06:53:8e:bb:39:62:f6:fc:73:ac:b0:64:47:79:9b:76:
53:00:80:d2:0b:a3:22:b5:00:98:f3:30:d0:3c:5b:ad:19:55:
d4:7f:73:a0:b3:9d:d5:49:49:e5:88:47:1d:4a:88:3d:b5:e3:
84:57:fa:56:c9:37:06:a8:d7:12:2d:fa:54:ff:2f:8a:60:c9:
a8:16:65:dc:9c:e8:bd:f5:90:7e:5f:b4:84:e4:37:ae:34:4b:
63:5e:46:bf:a1:9e:a7:3e:a9:95:f3:8f:f5:62:e8:77:10:38:
b9:12:ce:eb:db:b0:6b:28:c4:75:9f:27:51:92:04:68:cb:85:
7c:20:8f:ec:54:03:0c:ee:d3:2b:df:53:c8:5f:75:b2:a6:dd:
35:6a:44:d5:51:33:19:49:50:53:ad:b1:fc:a0:cd:75:68:ef:
e8:af:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:31 2025 by rpki-client