Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: PyYfcQp0rw8RiWB0tfKFJBnGNH6EwGuoUF5rid/9GAs=
Subject key identifier: 12:A6:ED:33:C6:97:C0:F7:BE:61:5C:BD:78:69:0E:FB:12:B9:F8:9F
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 0194BD17E2F709C23E608B8218B4D34EE3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 0EB9
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: Hw3TkEqfPDoZVBBM8zmHd1Q3SAQ.roa (hash: U4y0eau1NcIfxGeynrNwqFBJWvMOiOvvzCwI1Oo5dvk=)
2: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: y5/PimQwoG80SoIRvx2DFf94LZ1VaHo5wliPfZje6+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:f7:09:c2:3e:60:8b:82:18:b4:d3:4e:e3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=12a6ed33c697c0f7be615cbd78690efb12b9f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:a9:96:01:d6:21:75:1d:35:97:9a:95:5f:
ef:2a:9a:cd:18:3b:97:f3:d8:93:4f:59:aa:58:4e:
b3:81:42:dc:ab:20:f1:b0:b1:df:39:04:d6:87:7a:
63:b7:43:de:b3:83:c3:5f:76:da:aa:2c:c0:ad:17:
26:6f:ce:4d:2b:d5:4c:cd:a0:14:3d:75:91:45:ac:
74:ec:90:75:67:66:b3:e1:69:59:ed:5f:01:16:8c:
7a:dc:2a:07:79:39:ac:82:e4:b3:37:09:cf:bd:3f:
95:54:89:fa:82:44:6d:35:9e:dd:08:4b:9e:a6:64:
ed:38:b7:2c:2d:54:7a:fe:6d:42:2a:58:b4:62:29:
27:a9:fc:6f:d1:bc:7f:8e:e6:fe:cd:02:00:2e:8a:
62:46:bc:05:90:24:11:e4:ba:80:58:48:38:c9:c1:
2f:5f:09:d8:d5:df:fc:05:82:b4:7b:1f:b6:29:28:
0a:f9:2a:19:b2:48:bb:4c:2a:13:31:a7:5f:0a:d1:
61:7b:fb:45:57:10:74:6e:90:54:ff:5e:b2:3e:79:
95:30:0c:4b:3b:cb:b7:46:05:06:b4:e5:cc:69:85:
26:ef:39:18:58:d6:7c:3e:89:a0:13:a9:14:57:0c:
cb:c0:13:72:4a:89:87:43:18:52:96:f4:a3:91:ee:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:ED:33:C6:97:C0:F7:BE:61:5C:BD:78:69:0E:FB:12:B9:F8:9F
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4f:fc:9b:ae:16:50:19:3e:4c:0f:4e:d2:bb:1c:2d:fb:fb:
fe:05:fa:23:06:1d:67:1a:56:55:81:23:69:6d:cb:28:46:5e:
28:4c:88:ed:75:15:e8:65:0e:03:6c:24:f3:ae:3c:14:cb:ed:
86:9d:86:ea:16:b4:26:c4:9a:46:ff:a2:34:2f:6d:b2:6b:19:
6b:dc:cc:7b:9f:48:d7:c7:d6:26:87:f8:dc:1e:ff:4b:01:88:
8b:a4:87:7a:61:f4:5c:bf:24:1f:ce:d9:bd:8d:c3:ba:8d:56:
9e:88:8b:a1:02:81:76:d4:52:73:66:da:0f:18:ce:5d:a8:2b:
7e:f7:50:6e:b6:5f:2c:54:4c:7e:1d:41:3b:29:2a:36:7c:2b:
18:ef:cd:4c:4d:35:61:ee:d0:58:ab:f2:13:06:35:ee:22:fe:
50:4b:d2:f6:c2:9d:71:0b:a9:05:ec:23:f0:df:2b:76:f2:5d:
a9:ce:82:89:5f:36:20:9d:fb:e8:28:98:81:86:2e:82:d8:59:
e1:c9:b3:31:a6:d2:95:9e:ee:3e:75:4e:d1:5a:83:45:6d:17:
16:d1:71:56:2f:88:e1:a0:c8:25:8f:f8:7e:1a:23:93:1f:0e:
b3:09:c3:b9:54:ce:83:ce:82:c4:91:ab:ca:c4:2c:4a:6d:7b:
c8:b6:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:53:43 2025 by rpki-client