Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: /hab/T5pD3wdU7qmf23rw8KYDzyrpYfsvsJkUYIAjxo=
Subject key identifier: 6C:6D:47:6D:5F:9E:B7:97:24:CF:B2:14:3C:BE:95:CA:F0:09:FC:23
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 0194BC7310EAC67587C6C5D4D7E1EC1F9E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 02B1
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 0UKc3c6_AlpjqrUNJh3DwStXrec.roa (hash: OhWloYhHA/1vQyymMhBSWvWrUFfn2iV/XlUJ3vQrur4=)
2: 4gvK6UAte4i_DJjE1TPbFT1Ok98.roa (hash: GoLsyVhZqQfvGCGN6U4GMh9d59SyLh07nIkIOiePbx8=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: lhL006/ztwVCVBoCgOE/CRScmU9xIuenJRtaTxvwtnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:ea:c6:75:87:c6:c5:d4:d7:e1:ec:1f:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=6c6d476d5f9eb79724cfb2143cbe95caf009fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:6b:ed:12:b1:fa:3a:ea:d9:d0:16:05:35:
99:5a:01:14:e2:83:39:82:74:df:58:a2:19:ea:ce:
0b:0c:e8:21:b1:47:08:1e:07:6c:59:98:48:82:67:
09:0c:c3:8d:78:5d:c7:7d:23:9f:44:73:59:ec:32:
78:4f:39:aa:e2:51:33:60:d1:5c:bd:f3:a2:84:59:
f8:7d:12:c9:18:63:55:a6:2a:56:32:93:cf:be:a8:
67:42:03:6d:b5:ff:22:c2:6b:b4:ed:42:54:62:f1:
52:63:dc:24:81:01:a3:3d:b9:3b:24:13:c7:ef:0e:
79:09:31:56:ff:b5:bd:7b:ee:9c:5a:93:8a:dc:5d:
6d:1d:56:c8:84:36:13:6a:ff:02:b7:8b:3c:3d:1d:
10:7f:33:ce:51:69:ca:62:6a:ea:26:7e:e5:62:9e:
b0:66:b0:b1:0f:7b:ff:00:5a:e1:6c:db:b8:a0:e0:
0f:7d:a9:2f:95:38:0b:3e:7f:7d:31:fe:40:00:91:
2c:5e:82:2f:a3:bb:2b:cc:c4:2f:b9:89:33:9b:1e:
28:ef:9d:71:b1:3f:c5:80:0f:c5:1d:ef:99:8a:56:
b8:fb:17:55:2a:8f:d1:fd:b6:a5:f3:9c:90:a8:34:
68:c2:e3:e0:da:ee:0b:95:07:dc:cd:e0:43:ae:1b:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:47:6D:5F:9E:B7:97:24:CF:B2:14:3C:BE:95:CA:F0:09:FC:23
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:c6:83:7d:fe:7f:4c:d0:91:1f:ce:9d:68:67:d6:96:cf:
05:6a:17:db:32:de:64:1a:3b:42:90:06:6f:22:27:69:85:a1:
dd:31:6c:49:78:49:bb:02:14:9f:5e:8c:dd:2e:6c:6a:aa:0d:
3d:10:32:4a:45:d7:bd:8b:aa:a5:ce:f4:50:2b:3f:0d:5d:ac:
8c:37:0a:0f:db:f0:c8:96:0e:44:44:4e:3c:9e:ec:94:41:0d:
c8:51:df:bd:73:df:84:ca:72:46:78:01:34:28:fc:bb:8e:96:
7a:ac:1b:5a:bf:ab:5f:32:07:93:0d:91:bb:70:0b:ad:54:24:
e6:d1:07:a6:cd:0b:17:d5:73:ad:42:f6:71:67:7e:90:06:8f:
24:68:e7:ce:a5:c2:b8:75:71:f0:4b:b1:0b:74:f3:14:ec:07:
02:dc:e7:cf:40:e6:2e:1f:f7:62:3f:93:23:15:c3:c1:11:e1:
65:b9:6d:92:d5:ed:25:c1:4b:6f:90:cd:1c:94:df:ba:8a:1a:
10:61:fc:6d:45:52:07:ce:46:cf:f7:9b:fb:14:cd:c1:9c:ef:
ba:85:4a:ef:76:03:62:fe:36:42:92:eb:40:07:1a:4b:71:d7:
df:b4:83:20:9a:dd:1b:a7:2d:af:f0:ad:db:81:7f:6c:d3:4e:
65:49:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:27 2025 by rpki-client