Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
File: Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft (raw, json)
Hash identifier: XiTrRLyac0Ui8JycNNubXjIDdUAlvg1A/awoNTcbiSU=
Subject key identifier: A1:32:8A:87:87:33:7B:8F:8E:45:CE:68:99:54:38:1D:F7:36:72:23
Authority key identifier: 1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
Certificate issuer: /CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Certificate serial: 0193F2518C81BEDDAA8A3B138A0DAEDF36B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
Manifest number: 0783
Signing time: Mon 23 Dec 2024 07:00:50 +0000
Manifest this update: Mon 23 Dec 2024 07:00:50 +0000
Manifest next update: Tue 24 Dec 2024 07:00:50 +0000
Files and hashes: 1: 2A1M9twGPD1-4PIkttPdprW7aBM.roa (hash: pfzZjAP4oOXZVW16atseLgUkhdLMr4uAWy0Rj7f1Rr0=)
2: Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl (hash: +nSZ2TWEjzvAnbodfk4RlYF8jrZAjH4J18bJatotVj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f2:51:8c:81:be:dd:aa:8a:3b:13:8a:0d:ae:df:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbd8981d70d1c4e1c4f0538bd04f7011fadc3b9
Validity
Not Before: Dec 23 07:00:50 2024 GMT
Not After : Dec 24 07:00:50 2024 GMT
Subject: CN=a1328a8787337b8f8e45ce689954381df7367223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:61:88:04:23:56:30:d3:a9:50:4c:27:97:5f:
17:53:c7:e5:ed:52:56:fe:e9:9c:31:9c:65:05:eb:
17:74:dd:0d:60:30:16:8e:c5:f5:78:fd:f6:1a:c0:
1c:b0:82:4a:5a:12:b2:f0:cd:1a:bf:a1:d5:41:ea:
20:9f:61:42:11:4a:2b:ab:99:76:72:41:94:0f:dc:
9c:de:ab:2f:fe:d9:99:be:12:72:88:38:e7:4b:3d:
35:8d:ed:34:6a:c0:8c:f7:04:83:9b:6d:94:5c:7b:
7d:11:ae:8e:1f:f7:31:cb:52:75:ae:15:44:2f:d8:
ee:38:85:86:97:18:12:01:2c:32:31:ed:65:d6:12:
74:31:65:af:29:4b:32:2a:e5:32:20:c6:a2:28:e3:
35:ee:05:05:e2:2c:f9:c3:f8:8a:cb:a0:90:ee:48:
85:0d:99:bc:dc:5e:18:de:89:ea:89:c9:29:ca:40:
ea:3f:f0:2e:9a:00:60:0c:c0:f2:6b:d7:fa:af:52:
3d:57:6c:2c:2f:49:58:40:71:03:bc:36:60:39:c4:
15:74:2e:16:80:00:6e:56:cf:02:cd:b6:51:de:01:
a6:be:ae:5b:99:f7:ec:5a:1b:f4:6a:ec:63:2d:db:
d9:c7:d0:d7:d2:f2:c2:50:29:d7:3d:38:73:89:c4:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:8A:87:87:33:7B:8F:8E:45:CE:68:99:54:38:1D:F7:36:72:23
X509v3 Authority Key Identifier:
keyid:1D:BD:89:81:D7:0D:1C:4E:1C:4F:05:38:BD:04:F7:01:1F:AD:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ef25e5-fc90-427b-a849-3a158d1722dc/1/Hb2JgdcNHE4cTwU4vQT3AR-tw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:84:90:a1:66:2e:59:62:a0:cf:a7:d9:76:ac:89:b9:4e:ea:
f7:cb:3a:5a:2e:13:f9:b3:82:59:28:86:2e:d0:16:42:f3:be:
06:d3:56:75:7e:5f:8b:1f:4a:91:e7:f4:07:2d:da:e5:bc:af:
00:0a:65:61:fc:60:3e:d5:51:df:d0:2c:f0:c9:48:7d:b5:c5:
26:6a:15:b5:e0:2f:58:7e:a1:c3:52:79:eb:e8:ad:9b:b8:5f:
d4:06:5b:2a:a1:24:40:07:8a:f0:38:c5:d8:d5:97:17:72:e4:
e2:8a:a8:27:31:12:3c:a0:c0:04:83:a2:d4:79:9c:19:2e:79:
53:b7:4e:16:1f:71:f5:f5:46:1b:42:a9:7a:1a:55:12:03:39:
f3:c4:50:ab:ee:84:06:85:23:3d:05:3a:25:ed:05:be:b0:3a:
38:86:24:8a:07:67:33:b4:0f:76:d0:96:66:c9:20:a4:4b:f6:
1c:89:d8:05:60:d7:59:73:e6:ce:5b:40:1a:5e:e8:cf:e6:6e:
ad:eb:ce:17:bc:c5:80:56:a2:8d:3d:d2:e1:c2:8e:67:19:09:
12:14:e2:35:8b:c4:69:93:ae:be:9e:37:97:ea:0d:3e:a0:c0:
31:66:ea:01:11:7b:c7:9e:33:d2:b5:7a:fb:56:80:47:eb:92:
44:b4:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:31:49 2025 by rpki-client