Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
File: HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft (raw, json)
Hash identifier: Rc+sAtAuinHw5jxT0YKgm/mwAx4yDR7zMpwreTNLwek=
Subject key identifier: 9C:E9:41:B1:9E:B6:52:8A:7A:36:05:08:DE:35:96:21:A4:1F:07:05
Authority key identifier: 1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
Certificate issuer: /CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Certificate serial: 0194BCE08B135B50B9084EE6DFE5B336F38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
Manifest number: 0ACB
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl (hash: WdjgVPT6wH0DqvE7W7zVLGQ9BVps9SRf8qICNMWKD5I=)
2: j4nA-5dcYXHEDW8ahrcEwwSSveI.roa (hash: B4JnjqZ19Obadp4A6xUEPeEjzogbr5ee2D1zydPWFcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:13:5b:50:b9:08:4e:e6:df:e5:b3:36:f3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98955128bcbc7693eb1a937ff28b40eb3448a0
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=9ce941b19eb6528a7a360508de359621a41f0705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:25:3a:d2:27:18:42:95:a3:15:aa:a7:82:11:
d7:59:db:ff:f9:c1:55:5c:ff:39:d0:52:5f:f3:37:
32:43:e0:07:9e:2e:fc:6d:ce:19:86:a0:8c:0a:55:
2f:a7:41:3a:59:f1:d2:3e:b0:bf:6d:7b:ed:e1:8a:
32:e7:ba:4e:6a:bf:a9:0c:a2:18:2b:5b:66:cf:79:
95:eb:73:b6:ed:be:e6:ce:3c:a6:65:d3:7b:a9:dd:
2a:c4:5f:47:cd:f2:b5:3b:23:52:6a:d0:7e:70:39:
04:6f:e2:e8:37:7b:65:b9:ca:ab:9a:81:57:41:96:
c9:0b:d6:94:7d:fc:67:55:b6:e1:bd:f4:3c:b2:44:
5d:99:00:12:51:9a:2a:22:95:cf:aa:69:c5:24:86:
a2:a3:8f:32:e7:68:e9:bd:2b:cf:1d:a7:2d:dd:d8:
0d:65:fa:eb:cb:1c:53:90:b4:d9:ca:e3:ac:41:a1:
8d:d6:c8:d5:05:d4:e4:79:c0:6d:7f:36:31:87:e1:
e3:ee:95:bb:36:41:c8:c0:f5:0a:ee:f3:d0:62:36:
68:e3:df:23:84:cf:22:9a:8d:61:d4:4d:e0:51:f1:
ca:d3:77:75:0c:23:83:6a:74:9c:5e:bc:a2:53:7e:
d1:40:14:3a:73:43:11:87:85:a7:a6:93:b7:fd:59:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:41:B1:9E:B6:52:8A:7A:36:05:08:DE:35:96:21:A4:1F:07:05
X509v3 Authority Key Identifier:
keyid:1C:98:95:51:28:BC:BC:76:93:EB:1A:93:7F:F2:8B:40:EB:34:48:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJiVUSi8vHaT6xqTf_KLQOs0SKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c871d-853e-4a2d-a8d4-bf813cf081b7/1/HJiVUSi8vHaT6xqTf_KLQOs0SKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:16:20:73:be:ce:a5:97:d3:86:78:83:94:4d:a4:1f:6d:
7f:78:15:21:e7:e1:44:bd:d9:08:ca:e3:ad:03:74:d9:87:b0:
26:b5:e3:53:65:4d:e9:a8:5e:a2:29:47:b6:f3:39:27:37:7d:
f8:63:89:d1:98:0e:e1:35:0f:17:32:9f:48:ee:41:05:99:ed:
00:bc:ae:8d:b9:b4:96:86:20:cb:46:62:0a:d3:48:4b:1f:21:
8b:44:9f:b3:f3:49:c5:2b:ab:45:8c:c4:56:96:73:84:fe:24:
af:65:3b:17:dd:17:93:ed:70:fc:77:f6:64:e2:65:8d:6d:69:
40:a7:e8:dd:97:a8:b5:a3:36:54:0a:3a:39:40:05:2c:ce:5c:
b6:e2:28:54:f1:6b:5d:62:ce:04:f5:6a:c6:32:2e:2f:e1:5a:
42:b5:d9:d5:78:d4:61:d2:80:2a:a7:e9:e5:63:2c:99:b3:cf:
61:05:16:dd:4f:68:dd:29:7f:ad:e6:ae:dd:72:5c:51:9d:dc:
18:3c:f5:4c:5e:bb:6e:bf:46:d4:d8:35:c9:2c:5c:de:c8:62:
dd:25:be:be:37:10:1d:ad:65:77:45:40:4a:10:c2:bc:17:4b:
7b:37:d8:4e:93:9a:0f:2e:2f:1e:95:5a:17:c8:74:da:91:7d:
65:08:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client