Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: xRTBXTIzPn+Ozw1+8ny66kkbfCzfUfHsmFTmkodCry8=
Subject key identifier: 60:47:6A:A0:97:BF:FE:95:A9:13:1B:AA:76:A0:19:FD:9A:99:78:44
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 0194BCE0E6F577BCE979A87A5084B72B1965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 015C
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: gocXR49/nZHAq4pbZ9O5kWkV6Bop6UkRiB1wiR/u3kQ=)
2: Xrjd26KSD1TzQLdbZ0iBnuMSgeo.roa (hash: EiQGdbjr/bLCsj+VsiQM91wVnJzTPBjoFf00fG7D2D0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e6:f5:77:bc:e9:79:a8:7a:50:84:b7:2b:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=60476aa097bffe95a9131baa76a019fd9a997844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:de:94:15:aa:c7:06:37:a7:f2:d5:40:c9:
83:a5:75:b4:5f:b9:01:af:06:1c:41:5b:ff:39:27:
97:ba:1c:38:a7:22:10:0a:f2:c6:66:3b:f6:f2:c3:
17:71:48:61:8f:89:85:87:70:89:29:e9:68:50:3c:
eb:a7:49:61:a2:4a:e9:99:d5:19:b2:91:3a:d1:3e:
bc:14:20:71:55:10:3a:ad:8c:11:78:fa:cd:81:10:
12:18:90:ef:67:e3:5c:1c:dc:d2:6b:36:7d:87:f1:
f8:83:3e:e6:6b:4a:f9:50:9f:3d:0d:16:27:26:0d:
ce:b6:0b:4f:09:24:01:ca:d0:c7:3f:cd:5e:7c:a0:
6c:98:21:9f:10:0d:85:90:0f:dd:92:40:32:31:b9:
ac:c0:9d:e4:b0:78:a2:52:af:78:93:ef:98:49:60:
58:d1:a0:db:b2:39:6f:cf:2e:7e:1a:5c:0b:2f:9c:
50:15:78:31:e8:67:41:e0:2c:a9:bf:8e:90:23:66:
05:ab:22:85:b6:7a:50:43:71:ca:db:54:eb:d2:90:
7d:5c:74:b0:0e:60:df:03:92:64:03:6d:15:57:9b:
c5:ca:91:52:42:3d:d2:ea:17:4f:51:f2:a5:30:de:
27:4e:60:3b:8d:65:8e:1f:b2:64:1d:ea:eb:98:f8:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:6A:A0:97:BF:FE:95:A9:13:1B:AA:76:A0:19:FD:9A:99:78:44
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:01:3f:94:6d:be:54:a0:ec:7c:79:d1:38:47:35:ba:f3:09:
3d:bf:77:c1:fa:b2:7c:14:3e:70:00:ed:f1:66:f7:01:38:37:
5c:e9:27:8a:4c:2e:19:8d:65:4e:0a:bb:c2:d4:80:ae:5d:8e:
6b:04:eb:73:81:a3:e0:2f:63:a5:13:83:f6:88:9d:9c:a0:d7:
bf:57:9f:ab:1f:ec:9b:00:7a:0c:b9:95:7d:34:04:02:f6:c7:
54:d6:2d:7c:0b:12:ce:55:a7:83:96:2e:06:50:cf:75:52:4a:
a2:00:e1:40:d0:c5:46:8d:00:28:7e:3e:cc:26:40:d8:b0:60:
e4:bb:06:e3:9c:36:99:29:2d:7f:c9:d9:6e:e0:0b:34:34:9e:
72:39:63:61:f9:ec:c7:05:7f:f9:62:69:78:44:b1:a1:93:2b:
1d:49:4b:29:83:97:6f:d2:f5:95:41:b4:45:a5:88:5f:8c:7e:
2a:cb:93:4f:34:ab:bb:8a:74:db:ba:07:5d:45:ec:b7:2b:69:
32:17:cd:f5:94:87:97:ed:9c:c5:85:a9:3e:0b:93:e2:82:01:
5c:29:58:25:bf:36:3f:0e:03:cb:bb:ee:82:53:45:4d:cd:08:
16:c8:0d:b2:3d:e6:3d:f0:c8:f5:ef:29:9d:1b:6a:7c:bf:55:
20:48:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:45 2025 by rpki-client