Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: my7X6H+Macu2vxJ7GsNHQxDxLJ8ovGJvVAiFpCQZ+Fg=
Subject key identifier: 6D:E5:9B:48:A8:22:B7:60:95:CE:44:C0:B5:49:93:5A:21:D9:90:03
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 0194BC3C2269FD06E2013802DD246F9C9A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: Iha4LPlZlntmbJ0ANRO+NgrNOKBj2NA5D3qWWtRqL3E=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:69:fd:06:e2:01:38:02:dd:24:6f:9c:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=6de59b48a822b76095ce44c0b549935a21d99003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:5f:96:98:90:1d:7d:0d:33:20:a8:e9:3b:
fb:a2:94:4d:43:9c:9d:e4:7e:4d:be:dc:f4:e1:3f:
fa:84:dd:c8:90:96:6a:39:4c:5d:00:e3:da:69:95:
29:76:dc:47:0e:ba:21:ab:f7:10:ff:3d:d6:25:96:
cc:fe:ba:9a:c0:86:2c:95:46:0a:f0:c1:48:66:b1:
2f:2c:46:ec:dc:06:3f:e4:f1:97:c6:58:b3:e8:32:
d6:00:27:a0:d7:20:be:05:33:b3:31:60:f9:03:7b:
ea:3f:fb:78:91:42:60:de:63:4d:d1:c5:f6:52:04:
03:1d:52:fa:0d:77:ea:df:b7:aa:b2:85:f6:6a:39:
ad:17:58:d7:d3:d7:e9:29:a3:8e:d1:6b:c4:20:17:
1e:f1:5b:62:0c:7d:f7:fc:dc:84:06:30:3d:df:da:
e7:0e:fb:8b:79:d2:94:a8:e3:8c:8b:13:33:33:bb:
86:18:2d:67:3c:ce:c8:b1:70:8d:85:16:31:53:04:
bb:bb:d2:a1:a5:fa:1a:e1:06:dc:2c:03:1a:5f:e0:
10:23:6f:af:3d:33:71:c3:08:a5:9f:05:c6:28:6d:
4d:c0:19:b2:39:e6:5f:00:a3:b0:c2:f9:7d:76:c0:
12:7b:66:a0:6b:ab:31:63:96:4e:1f:07:37:45:ba:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:9B:48:A8:22:B7:60:95:CE:44:C0:B5:49:93:5A:21:D9:90:03
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c4:83:52:cf:47:4c:20:b8:ba:94:9e:3a:19:71:c1:5f:1c:
67:1c:91:a6:86:fa:2e:98:9f:7d:c5:cb:be:c6:87:14:84:7b:
cc:35:19:48:3f:ff:d5:d4:a2:8d:7e:5d:e9:f8:b5:e0:16:a1:
be:f7:90:63:d5:be:5c:57:03:13:23:9e:0d:1d:28:91:df:28:
78:37:b5:34:fb:07:cb:d3:22:3a:56:a1:b8:6f:2b:f6:aa:8b:
51:ed:be:36:39:08:ff:e1:0f:e8:be:76:d3:c1:84:c3:cc:9f:
2f:c9:7c:80:b9:19:cc:0d:94:59:36:91:16:01:99:91:1d:5f:
86:5f:fa:92:a2:6d:f9:33:11:e5:5a:be:65:ac:2e:1f:60:13:
a6:02:0e:5e:e5:c9:54:6f:57:3d:19:ca:69:9a:1d:fe:1b:a9:
14:5c:5c:8c:57:f6:7d:a3:a5:07:5d:30:fb:a0:d4:79:9a:f2:
03:50:20:78:d2:99:45:77:70:16:7b:e5:32:b2:0c:b4:6f:ef:
9e:59:61:b9:a7:1b:6c:b2:59:50:0c:a6:62:cd:4b:c2:13:c9:
32:f3:c8:24:17:94:f2:08:e8:5c:05:bd:05:6f:0e:f1:90:38:
4c:37:85:47:cc:2b:67:37:5e:c8:ab:7a:5e:b8:93:27:13:b1:
17:7b:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:06 2025 by rpki-client