Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft (raw, json)
Hash identifier: LOzgc/blIKT51039jrNv4puxUR121Vs6IQdwSYXeMCQ=
Subject key identifier: 10:D5:2D:21:4C:BC:F3:43:7D:83:BB:1F:5D:63:98:6D:63:37:1A:13
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 0194BD4EBC20DA3B92950BBEA922AF26C0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
Manifest number: 094C
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl (hash: n/7a8S03p7OFI7yL47alKrg0wczJHplFj6tDdWVol8k=)
2: cnFeqHBw9aaza2RenBeNwJKndxs.roa (hash: kjgI4uTxYMi7MCfdj3M5XWKqSFRmZG0IxbqIvN1jC7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:20:da:3b:92:95:0b:be:a9:22:af:26:c0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=10d52d214cbcf3437d83bb1f5d63986d63371a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:84:34:bc:a5:40:c4:f7:ad:5a:29:bc:17:
ca:6e:ee:d5:8f:7a:8c:ec:33:7d:d0:0a:71:86:7d:
23:09:aa:29:33:b5:1a:15:3b:11:3a:c2:2f:5c:5c:
7f:66:6d:e2:46:2c:8e:36:ae:d6:2c:4c:6a:1f:22:
0e:7e:be:b7:03:3a:67:52:f4:cf:86:79:d8:96:67:
c4:f0:e8:c2:f0:37:2d:f5:8d:d4:7a:58:6e:f3:90:
79:7e:c8:4a:aa:9b:4b:15:0d:2a:be:94:1f:33:57:
d1:41:c5:96:2d:10:c6:14:4a:04:60:55:b1:93:ce:
a8:eb:e9:86:c5:a0:e0:40:da:45:ce:6f:5f:a3:ac:
7f:61:e1:60:4f:c6:fb:3a:6c:34:39:dd:b9:cb:96:
07:60:a0:9c:91:d1:00:76:da:a8:e6:fb:50:b2:07:
9a:6b:62:39:bd:5c:0f:1d:33:3a:0a:08:bd:9f:a2:
9b:26:f2:a6:1b:81:b8:25:1a:75:e6:1d:7e:6a:9b:
3e:11:ee:d4:5a:df:73:d0:a6:d9:5a:3e:dd:5a:b5:
4a:99:35:9b:26:eb:2c:8e:43:69:64:62:64:ef:4c:
93:d7:63:87:b9:b8:81:01:78:8b:6b:cb:9f:dd:76:
cb:c1:7d:cd:2c:85:6c:1b:8c:03:bf:6c:1d:72:c9:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D5:2D:21:4C:BC:F3:43:7D:83:BB:1F:5D:63:98:6D:63:37:1A:13
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:93:d4:d7:f2:0a:0d:45:ee:56:2a:7d:fa:ae:85:8b:70:
11:3f:ef:2e:eb:ca:fd:c0:0b:33:c8:82:fe:c7:90:53:56:c2:
38:cd:63:3b:a0:19:60:0e:0c:a6:1d:c7:97:30:26:10:c0:d1:
7a:0f:8b:e0:df:e2:7a:64:68:dd:f1:30:bc:a2:30:ee:1d:a9:
29:60:39:98:65:24:25:4c:f4:26:86:c6:0e:dd:3e:1a:ca:22:
d7:30:f2:65:ff:5d:94:da:3e:32:78:0a:80:dd:3e:0c:2a:36:
46:dc:88:a7:3e:11:c9:5e:65:c2:40:11:0f:ca:13:a4:27:d7:
21:bb:19:b3:af:af:68:e5:60:6a:41:88:b8:be:81:8a:0c:c2:
8c:a1:c5:31:de:ae:fb:5a:23:8b:55:99:00:e6:18:09:04:20:
4d:78:eb:4e:1c:51:f8:53:e6:15:1c:3c:03:92:ca:fb:61:aa:
9c:a7:98:8e:aa:e5:1f:6a:f7:31:7e:73:2c:44:27:05:0c:4c:
fc:98:a4:15:7a:59:55:32:af:68:cc:0c:b8:4b:a7:1b:b5:28:
bf:8b:6e:23:5d:5f:af:5f:0f:f8:18:2d:a1:d7:45:ae:51:96:
c2:af:a9:3b:28:e9:c0:8b:27:58:e0:f6:e9:9f:fe:98:20:36:
66:dc:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:16 2025 by rpki-client