Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json)
Hash identifier: 7cjGN7Lfpd8BPsvxJwgYcEvkIgCuEf8qEeluGx1I/yc=
Subject key identifier: E0:0A:52:61:C5:41:E9:84:4B:78:4E:D0:74:E2:AB:84:73:64:2E:A7
Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7
Certificate serial: 0194BCA9D9FC935AB47CC057D212F4A0E17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
Manifest number: 0B7F
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=)
2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: nyrrxM2eMPF6/L5vN0D3mZDM9JTnSzLFXr2MxYoHNuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d9:fc:93:5a:b4:7c:c0:57:d2:12:f4:a0:e1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=e00a5261c541e9844b784ed074e2ab8473642ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:41:f7:f2:24:23:81:9f:6a:44:ef:b0:de:
7c:15:55:84:61:13:3b:8b:cc:12:77:c2:82:91:2d:
2d:aa:99:71:7c:56:2a:0e:b5:36:e6:2c:a6:ae:5e:
a1:6e:9d:f8:74:3c:ef:9b:68:2a:c2:bf:94:ef:2c:
2e:4b:7e:4e:37:9e:9d:51:2f:b3:d0:d7:45:78:82:
28:e1:ca:92:70:d1:c7:1d:6b:37:8b:70:b9:b1:ca:
7f:9d:65:87:55:ac:ea:57:7a:73:7d:26:68:c5:8b:
ea:ca:0f:75:4d:98:9f:c0:e4:2f:50:bf:ff:07:6a:
bd:4d:4e:f1:28:ed:7e:b8:ff:20:c9:d9:e5:fe:1e:
41:a1:38:91:f0:6e:f5:96:1d:68:3c:82:2a:93:1a:
c9:62:8d:1b:b8:1c:3a:39:6f:e2:19:74:47:83:38:
6d:38:8b:bc:ed:3e:e5:27:45:99:a4:bd:77:30:dd:
74:a9:9d:54:dc:79:8f:bb:0a:cf:17:72:4f:b5:1d:
08:aa:d3:76:94:df:7e:65:1b:d9:6d:fd:97:40:50:
59:4d:20:d7:3b:6f:40:c2:35:7a:e7:f9:ed:4e:8d:
20:54:f2:0d:76:5e:71:55:ea:d6:38:f6:d9:7c:fd:
ea:4d:11:71:9b:69:55:c5:ee:78:b8:be:f6:12:03:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:52:61:C5:41:E9:84:4B:78:4E:D0:74:E2:AB:84:73:64:2E:A7
X509v3 Authority Key Identifier:
keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:cf:2b:27:43:14:40:be:be:7e:bb:05:c6:20:18:1d:e2:
b8:04:6b:28:e2:9e:a9:41:4b:5c:8f:6d:17:7a:93:6e:b1:22:
7a:e6:c2:31:4d:1c:a3:d4:51:e8:e0:70:e6:16:25:d9:7c:e0:
ce:4c:be:b7:bd:b5:59:4e:5f:46:3e:00:74:92:89:d1:f7:5d:
a8:e3:e5:d1:ee:93:dd:8e:c3:56:bc:c4:c5:5b:41:76:aa:c7:
92:85:76:f2:22:a5:48:3d:72:22:a7:5c:00:df:30:dd:81:cd:
6f:da:29:33:7c:84:3c:f2:40:bd:b2:4f:df:82:62:6c:37:34:
6e:09:e8:a5:fd:63:9a:e0:f7:79:4f:b9:5a:85:ff:31:87:7c:
dc:c4:ff:16:13:10:ea:7d:e5:be:42:19:00:6d:d6:a8:72:84:
90:83:b7:39:a9:47:25:93:1d:55:1b:24:11:4f:a3:a7:d1:78:
ae:40:dd:9d:24:3f:35:07:35:e7:db:24:e3:64:3a:f8:da:4e:
50:a9:b4:ab:9c:7d:1e:d5:63:17:22:aa:b6:53:4d:c2:b7:83:
03:06:ab:9f:ca:b6:c0:81:35:a4:49:53:e5:a8:33:ee:af:ff:
ac:75:a6:2b:bb:d7:5c:a0:5a:89:a5:3d:a3:8b:de:6e:6c:b8:
b4:c9:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:58 2025 by rpki-client