Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json)
Hash identifier: uTAXB/UDtK22H4iJrcJ5yEjGBY5rA2/ON2BelMHLq0s=
Subject key identifier: 90:80:10:97:E2:3D:23:A4:4A:6D:8B:CA:59:B6:A4:8E:CA:A1:00:07
Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Certificate serial: 0194BBCDC06FC5570CA45D08772B8746DF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
Manifest number: 0B51
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: /ki8BpfMEmA5L6LJFtutslTg5qgAUfRUKCh3gT46caI=)
2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:6f:c5:57:0c:a4:5d:08:77:2b:87:46:df:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=90801097e23d23a44a6d8bca59b6a48ecaa10007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:05:76:3b:96:a3:2c:41:38:d0:a7:10:17:
1c:50:0b:ad:8d:cf:cb:5b:76:59:5c:51:56:eb:ff:
80:d4:0c:a2:d3:fe:53:98:da:a6:74:37:30:90:e3:
24:df:64:53:ca:ca:85:ef:6e:06:4e:60:26:f3:dd:
8d:47:70:61:00:58:48:ea:d3:bd:d2:cf:5a:ab:8a:
0b:64:72:df:2c:1d:4d:f8:75:04:90:e1:9b:95:78:
a7:17:22:f8:0b:6c:6c:d6:55:40:e3:64:eb:9c:93:
f4:53:84:4c:9e:36:7d:ab:d1:60:d2:44:49:05:11:
e1:72:85:ae:4f:0e:30:e6:6b:cd:b7:65:50:94:0d:
72:07:10:cb:be:07:20:32:40:ad:a0:8f:a3:75:06:
5d:21:73:36:de:52:74:20:52:10:70:f8:51:19:af:
ca:20:25:4f:c2:dc:d4:d0:e0:06:10:52:96:06:b7:
c4:5b:01:2b:18:14:17:25:08:ec:ef:c1:e1:a4:fc:
41:67:51:07:71:b1:fa:73:09:c8:87:ef:46:c6:fd:
8e:e6:c1:93:99:de:be:8f:1f:50:f6:64:a7:08:0b:
f9:2f:43:20:fe:ae:fd:3e:ab:62:48:13:d9:0c:9e:
45:21:d3:0c:a7:ad:a5:75:a9:f0:85:ca:d1:20:23:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:10:97:E2:3D:23:A4:4A:6D:8B:CA:59:B6:A4:8E:CA:A1:00:07
X509v3 Authority Key Identifier:
keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e7:49:c4:25:84:77:74:eb:2f:58:12:e5:f2:dc:8b:22:ee:
b8:11:80:e4:5d:50:f6:d2:7c:dc:7a:92:56:9b:62:98:ec:f3:
15:e4:ea:db:af:44:d9:d0:7e:b6:43:71:5a:ca:fa:6b:fb:2c:
92:4b:37:40:ca:00:5f:9f:b9:9b:d9:03:a8:db:cd:3a:47:84:
ca:aa:f3:f5:97:c2:dc:26:05:5d:d9:bc:ff:2e:5e:54:89:c7:
27:51:3c:48:5c:32:71:0e:6d:1b:41:1b:ee:a7:34:2e:64:be:
72:f6:44:e4:d3:a6:8e:44:2b:a6:e2:f0:32:23:b9:02:a8:a6:
76:67:84:ac:6a:2b:c3:d1:b2:cd:85:a9:ad:b9:3e:36:75:37:
04:b1:69:b6:a1:7c:b3:26:19:6c:30:b2:4c:16:97:40:73:9f:
09:9c:46:60:f7:99:9b:c3:94:da:0f:8c:3f:9a:f0:98:47:95:
36:07:c4:a6:81:a2:12:ad:ca:48:9a:f9:22:b6:6a:70:b6:5c:
64:3a:99:54:a7:0d:f4:40:8b:a0:d7:69:f9:bd:7a:f0:b7:ae:
04:d7:ca:4d:72:92:d4:d1:78:fe:f3:34:56:bb:ef:a2:26:c0:
0c:45:1a:4a:45:01:b1:ec:bb:a1:26:d3:89:18:97:d9:fb:bb:
e4:52:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:40 2025 by rpki-client