Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/HG0edjwmHIEls2xwCraSefqSoCs.mft
File: HG0edjwmHIEls2xwCraSefqSoCs.mft (raw, json)
Hash identifier: 2x159a3h/A7/TauyOZ4u8VkJUndMNVKPKYOnpPGoTwo=
Subject key identifier: 33:94:29:B8:4B:6F:73:51:6C:CE:F5:76:4F:6E:89:86:F7:BD:18:F1
Authority key identifier: 1C:6D:1E:76:3C:26:1C:81:25:B3:6C:70:0A:B6:92:79:FA:92:A0:2B
Certificate issuer: /CN=1c6d1e763c261c8125b36c700ab69279fa92a02b
Certificate serial: 019155622011DFB65D900A4D92AA13BA2785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG0edjwmHIEls2xwCraSefqSoCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/HG0edjwmHIEls2xwCraSefqSoCs.mft
Manifest number: 02
Signing time: Thu 15 Aug 2024 09:32:59 +0000
Manifest this update: Thu 15 Aug 2024 09:32:59 +0000
Manifest next update: Fri 16 Aug 2024 09:32:59 +0000
Files and hashes: 1: HG0edjwmHIEls2xwCraSefqSoCs.crl (hash: GoFaSnvwpm1XKPvX9IpYKC+RfjW+Km7SbxEaLt5at/w=)
2: NOr55O_SLx3O_QzM_RzqHMRV0gc.roa (hash: YNsfEpBxVY7ZyIbTbJVy+4dvjcl6SDMJR2iasaLFN6w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:62:20:11:df:b6:5d:90:0a:4d:92:aa:13:ba:27:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6d1e763c261c8125b36c700ab69279fa92a02b
Validity
Not Before: Aug 15 09:32:59 2024 GMT
Not After : Aug 16 09:32:59 2024 GMT
Subject: CN=339429b84b6f73516ccef5764f6e8986f7bd18f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:65:c5:74:87:f1:65:27:21:16:c1:05:e4:
5c:24:4d:bd:08:27:49:d9:d5:7e:08:f9:d5:ee:49:
6c:72:76:79:86:3f:88:74:8d:d2:40:f2:42:0e:6e:
6e:a3:cc:28:4f:e9:ef:82:16:74:a6:3f:f8:ec:16:
ff:ad:64:cb:ee:e0:68:cb:1c:d4:cb:95:6b:34:d4:
ab:7e:4e:07:8b:e1:ce:70:5f:13:fb:9d:83:37:33:
eb:0c:18:2d:b7:81:8b:70:c0:ee:af:48:30:e6:60:
4b:e1:a4:b2:a1:b3:a5:e2:07:4d:00:6a:69:b9:34:
58:c4:74:a5:a8:6f:29:4d:15:5c:4e:92:65:3f:45:
26:af:a3:23:d7:83:12:d3:19:3e:e4:50:ea:a7:d3:
c4:6f:76:b7:65:42:05:25:2f:fe:a5:eb:36:93:08:
28:8e:84:95:de:b3:3a:81:62:f7:bf:63:22:60:29:
ad:79:a6:92:e6:b7:fa:80:bb:72:62:ae:17:a2:2f:
b7:0c:69:3b:b1:0e:54:a2:8e:e7:e0:d0:19:37:71:
fb:33:69:70:f4:ef:74:15:d4:ed:54:80:78:5e:cd:
57:08:fa:9c:3f:34:2c:7c:bf:4b:56:33:9f:0a:b0:
d8:77:5f:59:d0:5d:3f:bb:ee:e4:72:0c:6f:72:70:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:29:B8:4B:6F:73:51:6C:CE:F5:76:4F:6E:89:86:F7:BD:18:F1
X509v3 Authority Key Identifier:
keyid:1C:6D:1E:76:3C:26:1C:81:25:B3:6C:70:0A:B6:92:79:FA:92:A0:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG0edjwmHIEls2xwCraSefqSoCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/HG0edjwmHIEls2xwCraSefqSoCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b82143-f54a-4486-8a4b-c61625ee3fd6/1/HG0edjwmHIEls2xwCraSefqSoCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fd:c6:9d:ff:44:ed:f5:99:5e:87:30:6e:4f:88:77:c5:a6:
ac:f6:89:50:e6:fb:aa:c9:ef:c4:96:ac:c6:60:5e:7e:9b:43:
73:23:65:7b:86:81:8c:aa:e8:7e:a7:95:38:2d:c2:b5:9a:2f:
bc:5f:13:13:2c:46:fd:7e:a5:a7:63:1e:23:e4:29:da:b8:7b:
c2:73:b2:d7:fa:85:71:25:ef:4e:0e:e5:d0:4c:63:78:f8:4a:
96:32:7b:ff:4c:fa:c6:9e:d4:dd:f4:31:59:5b:8b:24:d4:96:
70:09:8a:5a:ad:92:19:93:06:05:c5:84:eb:31:76:ee:34:fc:
2b:6d:67:77:19:84:29:0c:32:8b:2d:4f:ec:1c:3e:ea:4d:18:
59:1c:d6:28:f9:83:14:ea:9c:80:64:e0:c0:40:8c:84:d1:8b:
ed:e6:c7:7b:d6:62:d8:cf:a0:1d:0f:af:24:a7:08:c2:ce:6a:
5d:0d:76:5a:3a:fe:98:39:21:61:02:5a:71:05:73:09:76:1b:
a8:eb:9e:b1:69:44:43:ce:45:90:49:a2:ae:bf:3f:e7:01:3e:
ac:76:82:de:15:91:54:14:6b:4c:7b:83:68:04:38:a7:af:1d:
6b:1a:2e:3a:c1:c2:d6:a5:90:e1:64:ed:09:63:8d:3e:98:f5:
05:35:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:10:09 2025 by rpki-client