Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: sVS0eJADxVAON8xm+Mo7dD05ANWWzvMTSl2TUo4t+Ek=
Subject key identifier: 39:61:E3:4B:3B:23:19:6D:36:28:70:F5:1A:D2:1D:71:88:D0:B8:E8
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 0194BCA97BC01FCA644469185A82C562B0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=)
2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: febXP2/truZJJV0q/6cVmQpJZbnTrb0hJi5mAEiv5sY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:c0:1f:ca:64:44:69:18:5a:82:c5:62:b0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=3961e34b3b23196d362870f51ad21d7188d0b8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:67:99:4a:2d:01:ef:38:3a:a1:2b:3c:3a:
3a:ed:4a:49:a2:95:26:3f:92:db:4d:c2:d2:7b:1d:
21:2d:8b:1a:8f:88:f0:de:67:f8:95:52:8e:33:e9:
5b:9e:f7:0c:18:de:f9:5b:33:0e:8f:be:6c:8d:97:
54:91:b7:fb:8f:b2:97:7c:6b:2f:85:70:6a:eb:6c:
6c:26:92:42:a9:5b:f8:6c:86:9e:12:a7:2c:5d:4c:
d4:1b:08:67:f2:c4:79:c8:18:c8:7f:57:14:92:34:
18:33:e0:d1:78:be:b5:1a:96:6a:14:82:85:25:58:
11:37:e4:dc:b8:c9:0f:4f:0c:da:ac:03:d6:d2:e5:
f4:cc:70:aa:96:a3:bc:4d:0d:d5:91:20:8d:62:57:
fb:31:48:d7:1e:ac:b8:b0:a0:34:a2:14:05:7d:0f:
a5:77:96:83:c6:a2:94:e3:58:20:04:0f:21:f7:53:
bd:ea:89:f7:1f:35:61:a7:32:ed:ec:03:2d:45:0d:
6a:39:d7:b8:44:0a:c4:b3:fd:9a:89:a3:18:0f:f5:
15:50:d1:11:05:e5:23:35:5c:c7:51:3b:6e:fb:1c:
58:64:01:15:dc:e4:c4:03:cd:40:a9:a2:13:98:24:
0d:60:a7:a2:64:ed:41:63:9b:d9:84:d2:47:1f:b9:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:E3:4B:3B:23:19:6D:36:28:70:F5:1A:D2:1D:71:88:D0:B8:E8
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9e:1f:7f:ca:78:0e:88:ec:9a:e6:c1:04:d0:17:3b:71:f2:
0b:84:c9:4b:3d:5f:79:4e:fc:3f:7e:6f:b3:db:dd:5c:2d:29:
1c:86:c1:27:1b:47:e6:55:a6:e8:8f:7b:84:90:be:61:dc:b7:
7f:6f:9c:46:0d:d0:ec:b1:41:e8:31:d3:88:d3:e5:75:14:8b:
68:68:18:ab:84:c5:8a:c0:10:b6:12:16:64:97:74:d1:de:77:
db:0a:0d:bb:76:35:85:8e:cf:f3:91:8c:ef:a9:d1:66:b8:c7:
3c:1d:1e:1f:eb:11:93:a1:70:cb:91:c0:d5:d1:f2:b2:4d:be:
cb:b2:52:e1:33:c0:17:5d:ea:02:77:2c:20:1d:76:3e:5f:03:
77:93:cf:76:f3:66:19:8d:69:42:c6:ca:c0:ed:1b:7e:46:37:
3c:e5:d1:b9:6f:e9:79:37:97:24:34:19:85:15:19:d9:e2:54:
ac:83:ed:31:df:68:60:ce:b2:14:1e:6c:53:d4:cf:f6:bd:bc:
bb:b1:4f:a9:c8:9b:0f:b0:39:67:8f:53:81:16:1c:9a:3e:73:
9e:47:75:d5:ad:a9:99:13:66:87:dd:20:60:df:02:77:b1:bd:
00:8e:9f:c3:6a:32:c5:b3:2f:0c:a9:d5:cf:32:88:18:1b:25:
6a:61:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:04:09 2025 by rpki-client