Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json)
Hash identifier: /HzTQjBSt+tqW/BbYwxVGF5/c4mg5k38D2JCuA9LHd8=
Subject key identifier: F9:37:66:58:B6:D9:07:E5:BA:F6:86:E3:89:32:0F:69:D6:A5:82:1D
Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Certificate serial: 0194BBCEA60C18AAD93DBF29B0F1247A7C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
Manifest number: 0B05
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: hy2QR4U+S/EnEhjkUxO3LDIKrb/xwz/0dPaG0KCruek=)
2: eCBuvHT7IMaBXPivvQ3l-YdKsf4.roa (hash: o8SV6r5/m90uv9RNHtmHfhH9wPKwfjIhitnoqSV/JH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a6:0c:18:aa:d9:3d:bf:29:b0:f1:24:7a:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=f9376658b6d907e5baf686e389320f69d6a5821d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:c1:8a:ad:87:af:7c:24:04:67:85:b6:ee:
7b:f4:ec:de:47:b0:5c:fe:79:00:a4:6a:2f:dc:b4:
2c:de:a8:59:a5:42:3d:22:85:7e:3b:7c:85:bd:85:
0b:7d:6b:b3:a4:b8:a0:9d:c7:ab:67:05:d5:04:00:
33:05:35:bd:ce:28:0a:9b:38:9b:7e:23:5a:be:76:
52:f6:9a:e1:7d:d6:0c:58:cc:a5:6c:44:bb:d7:d7:
8d:d8:ea:ed:4d:3b:89:0b:65:c2:b3:05:e3:07:54:
58:8a:aa:1e:9d:e6:1a:a4:e9:44:59:6a:93:c4:b5:
ec:81:a4:3e:20:0d:39:36:fe:e4:a5:14:22:56:eb:
8f:3c:29:fb:fd:be:a0:18:11:ef:3a:d5:1c:da:b2:
4f:7d:ad:72:4f:49:01:51:66:02:11:1a:42:53:3a:
cb:ba:89:5d:d2:3f:88:c4:44:a1:ab:81:fe:85:a2:
59:2b:84:fb:ec:22:24:61:ae:3d:ab:c7:6c:d9:ad:
8d:f8:6d:b5:0b:0c:0b:39:bd:58:f3:5a:6c:2c:1e:
9e:ef:68:78:79:06:68:f0:fb:b3:a3:e0:1e:af:bd:
bb:55:ab:95:9a:8d:cf:85:37:46:6a:24:b1:88:93:
31:7c:49:63:18:90:96:86:e7:69:25:b6:8a:0c:6b:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:66:58:B6:D9:07:E5:BA:F6:86:E3:89:32:0F:69:D6:A5:82:1D
X509v3 Authority Key Identifier:
keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c6:d6:c3:5a:33:0b:02:6e:8c:07:02:b2:de:0e:03:c1:dc:
cd:8f:2c:33:93:cb:96:d0:6a:5e:31:43:88:9f:6d:18:9c:e8:
79:b2:75:fd:a8:c7:af:c3:72:33:a6:48:87:2a:a8:c4:37:b7:
95:ee:37:f4:11:72:18:54:f6:7b:67:05:1c:7e:1f:15:f9:54:
48:41:71:ff:f5:7b:4d:41:d8:7d:8a:c4:80:63:07:08:05:20:
68:5e:cd:53:d2:eb:12:0b:d0:0b:7c:5a:85:dc:59:58:44:0d:
c5:f4:17:7a:23:43:7b:c3:e5:94:40:75:7e:50:71:ac:19:77:
fa:d2:0b:72:d9:b6:49:37:20:60:4f:49:39:b2:c4:1b:e9:ef:
7e:85:b5:43:f4:f6:ef:e3:61:99:80:5e:be:d3:43:d8:39:88:
cb:be:c1:c2:93:8b:8d:64:0f:7a:a4:ed:91:43:ad:27:a4:87:
27:61:42:fa:a7:bf:eb:3f:4b:43:0c:05:3b:95:76:6a:fe:9d:
08:37:7b:2b:d6:85:0f:59:7f:af:16:b1:72:2e:28:62:22:4b:
e4:9a:32:e6:d5:a1:9f:bf:c2:15:5e:03:c0:ab:07:48:ed:63:
f3:bb:5e:3d:26:25:15:df:b1:ad:dd:ec:3c:69:13:d3:6f:b1:
33:2d:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:48 2025 by rpki-client