Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
File: HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft (raw, json)
Hash identifier: VFwtBQL3hTdBFUJJmP06gX0cULgXFQAH9znoiNqL6LI=
Subject key identifier: BD:44:01:F4:71:08:C2:59:4F:4F:94:1E:96:8F:E2:CD:02:18:F2:3C
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 0194BD17904ECB02D451241E34767EF5A56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl (hash: o9ru7TJzm9k0cWIW1bOJFs3AUuNkedJBYg9Fo/CGdbQ=)
2: PbIDcbaeTmzqv6S3lSLbNvURWEo.roa (hash: uZA1YqedLdm4CZwYy9HthzXaLTGvBfTVV2vq6HENU4E=)
3: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (hash: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:4e:cb:02:d4:51:24:1e:34:76:7e:f5:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=bd4401f47108c2594f4f941e968fe2cd0218f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:78:2a:30:b8:df:50:eb:eb:93:aa:4e:63:
bd:ed:c2:21:91:64:8c:2f:b4:3c:cc:c4:13:96:c1:
f3:67:23:1c:d9:b1:34:3a:61:21:e5:78:97:c0:b2:
6b:d1:7c:55:87:b5:74:21:76:9f:80:0c:82:c3:33:
45:2f:02:b9:ee:1a:65:5f:f6:ac:6a:dc:30:fa:9d:
6c:b4:9d:31:2b:d7:23:39:ec:85:4b:13:fe:a8:4a:
2e:7d:d8:7d:b4:88:30:ab:65:94:c0:41:eb:38:da:
82:c8:a0:6b:8d:03:a4:27:56:7c:65:1d:2e:11:d1:
15:0d:ff:1a:65:c2:52:0b:02:4c:ff:af:06:28:c9:
b2:e4:6c:e7:91:cd:fd:78:33:e1:29:6e:c8:f2:41:
b5:a2:e6:57:ab:e7:a5:65:b2:c1:68:c3:1b:3d:04:
e2:5c:67:68:69:89:9c:6a:22:e1:2a:81:8b:20:c7:
0d:db:a2:1c:55:22:03:54:e4:30:bf:ca:b6:48:f8:
ae:ec:7f:7c:6a:9b:44:51:db:29:0b:5f:06:51:fd:
88:f0:ab:7e:fd:0a:2c:33:97:35:ef:9f:08:25:45:
27:70:6b:36:64:5e:6f:b2:1a:4a:95:1e:48:ca:c6:
99:45:08:13:73:41:b7:7b:81:a3:69:d1:68:52:af:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:44:01:F4:71:08:C2:59:4F:4F:94:1E:96:8F:E2:CD:02:18:F2:3C
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:5d:be:b4:6e:b9:6b:74:52:a6:4d:77:d3:5c:80:4d:db:
43:10:c9:56:ce:37:61:bb:82:d9:12:3d:ad:4b:44:fb:0f:8c:
37:fd:59:8f:bc:3f:34:dc:01:30:8f:9b:03:30:47:52:5d:c4:
3f:3b:f2:a7:b9:6a:4e:74:a8:ae:4d:07:ec:46:a4:a4:35:87:
5a:2a:22:ff:63:c8:8b:11:10:8b:f8:68:02:6a:1b:da:55:d4:
ac:de:02:a6:b6:db:90:d3:79:f6:50:b2:a3:82:ea:b8:36:4f:
2d:db:fa:ab:66:74:12:77:7d:17:b6:ec:46:a7:0f:39:c9:fd:
fe:16:db:a6:2f:c6:81:92:cf:6c:02:81:59:89:6e:17:00:17:
77:14:7a:60:29:2a:05:4f:a9:21:40:43:07:2a:05:fd:42:80:
ba:42:c0:63:f9:69:15:eb:e6:17:79:c6:7e:1c:03:e7:80:3c:
95:f4:80:42:80:bb:2f:f2:17:96:95:dc:d0:1d:91:53:86:eb:
d0:3c:d0:fb:61:1c:9f:b8:19:3f:68:8b:57:1f:41:0a:40:ee:
e9:e2:ce:ac:51:c5:dc:c9:7a:36:9f:5f:10:a7:4f:4a:54:12:
5c:0f:a3:3e:cc:85:30:09:6e:44:17:eb:04:b1:1e:f4:8c:26:
cb:65:34:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:36 2025 by rpki-client