Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: 9kHGQ6n6i6mfOjMPR+YsQYXu+Wkx/O7jkprY9eqjAvs=
Subject key identifier: 89:8D:2D:F7:16:53:09:BC:FF:AA:79:4C:10:5D:57:18:7E:A6:37:BC
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 0194BC3C56A6C508D8D5767A36A503B3672A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 13A4
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: Ltj8/JEYkwUj3le+JVvk7DsYju71Td66U86hKL7laSA=)
2: gzmNz0PYWdcLgL6_SHiIcrAToJE.roa (hash: Guzyh0bDeJqFnbpc68wrDXyHWPH3X5psfEh7CAeI44k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:a6:c5:08:d8:d5:76:7a:36:a5:03:b3:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=898d2df7165309bcffaa794c105d57187ea637bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2a:c6:55:82:23:1a:b5:96:5a:b5:ef:c6:d0:
cc:84:30:98:9a:65:76:ee:24:ad:1e:f7:01:ac:b3:
ae:48:4c:de:a7:cc:66:d0:03:00:4f:86:66:04:35:
9a:aa:1e:c8:19:56:00:34:39:b8:b4:50:7e:33:62:
68:3a:14:63:2e:5f:7f:26:d7:db:e7:f1:29:57:05:
cc:4b:d6:8f:2f:a5:20:3f:20:fa:6c:49:07:ac:5e:
ec:71:08:19:5c:cf:c8:37:3e:7b:ab:4e:14:de:11:
73:2c:21:d3:97:69:bd:61:12:3b:9c:32:8d:78:50:
ac:2a:2f:b6:25:17:b8:6e:1b:17:c7:e4:83:8b:d3:
08:2f:c8:26:03:07:09:09:dd:36:69:53:5a:91:53:
b0:1a:d4:0b:95:56:8c:fd:89:cc:60:3f:c0:5a:0c:
da:86:8b:b2:9a:33:8d:3b:6e:c8:15:47:16:a5:80:
54:4c:e6:92:9b:17:47:4d:26:15:5a:0e:13:a5:7a:
bf:71:9b:02:eb:47:5a:0a:5e:28:a4:54:95:21:43:
c4:b1:47:23:61:11:af:5b:1b:ae:01:40:4a:0c:22:
9f:8a:f2:97:40:1d:ae:d0:0d:93:3d:1e:95:22:08:
dc:3d:2a:4a:79:b2:1d:25:c7:ce:a9:57:51:86:d3:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:2D:F7:16:53:09:BC:FF:AA:79:4C:10:5D:57:18:7E:A6:37:BC
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:6e:09:df:07:45:b8:f3:ae:b1:49:82:10:93:2a:6e:9a:
db:c7:31:71:13:17:f3:21:dc:72:c6:80:9b:03:39:ed:98:10:
4f:45:eb:4a:c1:a2:1d:81:fc:0a:ee:3b:b4:ef:81:8d:1a:16:
49:1e:0e:2a:d9:f3:a4:27:8b:65:37:fe:fc:bc:cc:a5:09:b8:
b1:c5:ab:99:ab:d8:50:47:53:1a:6c:41:ec:c7:8f:51:58:50:
cc:24:2c:07:dc:57:17:a8:3e:d4:81:1a:c2:4b:92:e5:10:1c:
87:c1:a5:2b:d8:4b:35:98:eb:b7:e9:aa:03:21:c4:2d:6d:03:
bb:a8:d3:2b:56:73:0c:10:8c:73:7e:f9:fa:36:f7:a8:84:94:
fd:58:16:84:90:8c:77:41:51:0d:23:ef:c4:16:e1:0a:b1:c9:
fd:d9:8a:d2:e5:83:36:5c:15:47:b5:51:51:28:e2:bf:97:6c:
da:6c:7a:34:7f:a5:57:67:71:22:44:b9:56:f0:c9:60:16:99:
89:17:d9:be:07:b1:01:44:07:f1:fb:a2:8a:5d:5c:9a:8c:d5:
ce:f3:92:5a:df:ca:1f:7f:78:c8:6d:e7:07:ba:8b:bb:25:f2:
26:0a:29:e0:05:d5:af:42:66:69:02:2f:53:9c:3b:35:79:14:
84:bb:ec:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:14 2025 by rpki-client