Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
File: HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft (raw, json)
Hash identifier: g7KGL146q8MArdUKprHtCr2Xs3HVadHTJwqsdexPTEs=
Subject key identifier: D9:47:80:90:06:7A:51:98:D5:EF:E1:DC:4B:84:16:59:2E:A3:3C:F6
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Certificate issuer: /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial: 0194BC72E4F8DE539B6EE221C00C035DD71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
Manifest number: 0544
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: Ct9bHG4SWHTl9PMz5PXSs2vCxX8.roa (hash: N/U8cjrJKkb1U0RlpmtZn+cKz90pd4hkwgPvU1swCC0=)
2: HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl (hash: OjRlPLD+Tj27evjA3Yvlt0CMLIr3TEVmCFhnFm/NcOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:f8:de:53:9b:6e:e2:21:c0:0c:03:5d:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=d9478090067a5198d5efe1dc4b8416592ea33cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:89:a8:23:d2:94:57:ce:9f:64:ed:6c:28:
50:8d:a8:d5:4a:54:33:ff:07:dc:47:f5:0f:e5:8e:
d3:78:a3:b5:c3:6a:7a:51:2d:63:89:bf:fb:f5:ea:
3a:6e:df:03:2f:74:4d:49:5a:a0:9b:26:fe:0d:4c:
ae:08:72:2c:90:1a:e9:45:cd:ad:2a:11:11:27:68:
07:52:41:55:65:d2:49:22:c6:73:a1:49:53:53:11:
f7:7a:f1:f8:05:15:f5:de:d2:e2:46:e6:76:aa:6d:
0c:e6:cf:79:17:96:22:94:d9:62:72:89:7a:4c:93:
c6:e5:ea:2d:5e:a2:af:a6:79:a2:e9:7f:39:cc:64:
e5:75:74:5c:9c:62:d8:00:94:20:58:03:d5:34:0d:
fd:14:af:1e:bd:87:cf:ee:0e:92:ad:2b:dd:28:e1:
04:0f:bc:70:cc:e4:a4:ee:1a:eb:e1:44:9e:8e:2a:
4b:bb:58:58:8d:c7:ab:95:b7:79:79:83:88:7c:a8:
74:96:77:7e:73:fd:f2:60:3b:21:2c:d2:10:2a:ea:
12:8f:38:71:d4:b2:11:39:9d:3e:48:c4:ef:5f:ce:
4b:60:c9:e4:b0:44:42:86:43:1d:a4:78:47:45:c2:
c9:dd:11:a7:b8:4d:0c:44:35:6d:c6:19:56:7b:11:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:80:90:06:7A:51:98:D5:EF:E1:DC:4B:84:16:59:2E:A3:3C:F6
X509v3 Authority Key Identifier:
keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:91:72:96:a9:09:ae:fb:20:31:2f:e6:25:57:fa:fa:dd:
8c:26:6f:b5:99:cc:91:11:df:5c:3b:f6:3e:e9:14:b0:df:00:
40:c1:85:7d:04:ac:96:a2:2b:e1:25:33:e5:ff:30:f3:aa:6b:
5c:5b:10:94:b3:26:0f:d7:f8:e7:1a:76:00:f7:5b:f8:4c:71:
9f:ef:70:61:e1:5d:7a:51:db:89:8c:1d:d6:2a:3a:ae:e5:7b:
99:5e:d4:4d:bd:f9:58:ae:00:79:b2:69:e4:f3:d8:fc:dd:0f:
84:6c:8b:ba:24:70:36:2e:de:59:4f:ac:f3:fb:a8:f9:54:cd:
82:2b:65:9c:27:2c:5d:b1:55:18:e7:5e:41:bb:cc:c5:57:28:
1e:ec:23:2a:f5:96:82:eb:f1:82:59:e5:4b:41:bd:a2:99:15:
b0:af:25:7d:53:6d:18:6c:54:40:40:97:4c:0a:13:25:ec:dd:
05:c3:05:4e:e5:6d:4d:e8:6e:99:74:2f:21:ea:0a:9e:6e:e2:
3d:33:3f:8b:03:10:13:c7:05:71:5d:24:95:77:5e:e0:2e:26:
04:df:ab:1b:91:14:80:5d:ea:11:4d:4e:63:b9:24:d1:80:99:
2d:aa:fa:bf:f4:b0:eb:a5:ef:62:74:64:23:a3:1b:11:95:07:
d4:9b:ca:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:46:24 2025 by rpki-client