Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: egEXdXsORGHinuEmJPtAmteA2rdoiqY6qeOyMyesOlg=
Subject key identifier: BD:D7:5D:86:54:2C:4E:2D:97:DA:50:2A:D2:08:71:75:14:12:30:FD
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 0194BD8559169C0B5774D766C884B3FC6BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: 1-i_f4gNCAnPwT26M-00faBCZ1ec.roa (hash: rf9DtMiWGOZOoz1U+iRouParfUgOp6ltk1lTfbvhGLM=)
2: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: Cg3QWdqii0tRdmV6EyEmtYjthfI4ZX+NsR9cfPoyICo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:16:9c:0b:57:74:d7:66:c8:84:b3:fc:6b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=bdd75d86542c4e2d97da502ad2087175141230fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a7:9e:1f:6f:1d:f2:36:6d:5d:97:c1:f9:2f:
2c:69:52:ef:81:60:5b:2a:35:d6:55:e1:92:eb:f9:
60:c5:5c:bd:0a:bb:33:e8:f3:f4:2b:89:6f:ee:87:
ef:44:7d:e7:e3:b6:1d:3f:d9:20:23:f0:cd:8f:19:
cb:1e:c9:85:e6:ef:14:46:6f:29:fc:91:5e:f6:d0:
22:64:a1:b5:ae:b7:b3:e5:63:d0:fc:e2:ee:ca:e0:
be:57:0f:07:4b:f9:c3:43:dd:9a:65:cd:85:f6:e0:
08:66:9a:a5:0c:cf:07:ec:03:a0:ab:a1:a5:f8:c0:
1e:a8:26:98:36:9c:b1:b6:24:ad:1a:7e:5c:02:24:
91:6d:48:b1:62:61:7f:2d:48:a9:00:e0:f5:ac:f5:
db:d8:13:95:fe:4c:f2:bb:2d:05:07:ea:78:54:40:
f3:5b:09:7d:d0:8c:24:ff:b1:0e:f6:ae:56:46:6b:
3e:68:d8:73:7a:30:d2:80:67:cb:9a:1c:00:81:51:
3d:a7:29:d0:b7:fd:90:3a:75:6a:88:60:c2:9e:ff:
55:1a:05:b4:cb:b9:17:46:42:44:10:e2:67:e7:4b:
8f:af:a5:ca:34:80:9e:ea:b9:37:25:05:ac:07:ee:
65:d3:90:2b:b3:8f:da:5c:8d:c1:4d:0e:bc:34:96:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D7:5D:86:54:2C:4E:2D:97:DA:50:2A:D2:08:71:75:14:12:30:FD
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b6:d8:30:a7:b2:bb:e1:2c:58:8c:76:8f:f9:e6:57:4d:4c:
88:e1:fe:e4:3f:b2:cb:35:57:1d:35:85:d7:f0:0c:63:e1:52:
af:5b:a3:2f:27:35:60:fa:06:0e:2b:04:4d:75:0f:9c:85:38:
44:24:4a:18:26:74:62:21:af:f6:ec:83:50:42:2b:57:d6:1c:
c5:59:21:24:c9:5c:aa:5c:d5:72:ed:c6:7e:9b:fd:df:cb:76:
1e:fb:18:26:61:fa:64:a2:ab:22:da:af:aa:e7:3f:48:fa:49:
86:ec:0f:cd:e0:6a:82:be:19:ed:1a:6c:c5:fb:9e:28:2c:64:
77:ec:8c:74:0c:8f:13:22:78:02:5d:31:c8:ca:7c:90:3e:bf:
82:71:b7:c3:ed:82:a2:76:f8:57:64:af:20:c6:86:32:33:aa:
7c:5f:e7:2e:c5:fe:db:6a:ee:05:6d:cc:4f:3b:71:40:fa:2c:
23:7d:ea:a0:c8:2c:29:27:6c:fb:30:59:f3:40:87:8c:20:6b:
96:ce:b1:2f:04:84:35:c6:e3:0c:a3:c4:2a:95:aa:b2:3b:9c:
5b:f9:ef:20:6e:fc:ab:b0:c5:c1:c6:35:f7:bf:a3:8f:f3:27:
9e:53:3d:fa:3a:2a:14:cb:65:86:03:6c:b4:3a:ee:80:37:db:
e5:7c:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:30 2025 by rpki-client