Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
File: HG_Sl_lVMf64LJZP1n9slDIJOPY.mft (raw, json)
Hash identifier: DVMrJJ7a6ZKWyGR3LidFAZ3UyuAO6I6QKMRzhkU6hsA=
Subject key identifier: 1A:13:C2:9C:2A:62:5F:2E:FC:A8:7A:68:F6:5D:7E:10:F1:DC:21:4F
Authority key identifier: 1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
Certificate issuer: /CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Certificate serial: 0194BBCDEB1E7B4B606423F980D46A91F09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
Manifest number: 1044
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: HG_Sl_lVMf64LJZP1n9slDIJOPY.crl (hash: VNkXGQDjaY2i67Zpsz5rYVnodSK6rNwX4IKP2XtdK0w=)
2: Jz9OReni23tlAFlv2GW25Ecf7IU.roa (hash: GvIndfLunXr32q+mQyRE3wlkyEX+dK/mibzNsCJj8Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:1e:7b:4b:60:64:23:f9:80:d4:6a:91:f0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6fd297f95531feb82c964fd67f6c94320938f6
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=1a13c29c2a625f2efca87a68f65d7e10f1dc214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:13:58:94:44:56:2f:9e:e2:a4:66:7a:20:
e4:36:4d:9b:33:b2:99:e4:be:12:37:50:9a:3d:d5:
8d:a5:78:42:6d:da:e2:4a:5d:4d:67:b9:75:f4:eb:
27:56:99:ab:e3:53:e3:1e:36:da:75:c4:aa:0b:df:
9f:f8:d9:21:f5:51:5b:c3:07:15:e8:c3:09:a4:02:
31:73:9b:81:ef:9c:54:d7:a0:01:eb:ca:19:b0:16:
a1:00:56:45:e9:41:32:4b:a9:48:3c:ce:5b:24:53:
3f:c1:dc:ae:a0:6b:1a:4e:e1:bf:d5:98:ce:07:e4:
24:6a:4d:4c:be:31:15:7a:61:be:c5:56:a1:bc:e4:
86:f4:5c:9e:34:88:95:4a:87:40:f2:7b:1b:76:f2:
3a:33:32:27:3a:26:57:81:dc:25:44:fb:d1:55:bd:
72:82:e6:c7:86:72:ce:66:44:a2:00:18:b0:bb:27:
a0:82:2d:e4:af:57:ca:55:02:c3:d3:a6:d0:b1:58:
4d:24:7a:9e:5c:15:e5:7a:5c:4b:e3:56:f1:3f:b0:
99:61:52:fd:22:b2:1a:e2:af:56:b2:24:2d:15:84:
6e:a1:70:c1:7e:e4:4c:7b:7b:a0:19:27:bd:ee:c3:
80:d7:c1:64:33:72:53:07:21:6e:e6:2b:1c:6b:b1:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:C2:9C:2A:62:5F:2E:FC:A8:7A:68:F6:5D:7E:10:F1:DC:21:4F
X509v3 Authority Key Identifier:
keyid:1C:6F:D2:97:F9:55:31:FE:B8:2C:96:4F:D6:7F:6C:94:32:09:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG_Sl_lVMf64LJZP1n9slDIJOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5bd26c-bbce-40c0-89d7-ef78a8a7606c/1/HG_Sl_lVMf64LJZP1n9slDIJOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:94:91:ff:26:9f:5f:28:70:b3:c2:d0:1a:40:95:ac:02:97:
a5:25:8f:85:5b:57:f3:c1:35:ef:d9:d9:da:b0:25:01:01:08:
fd:28:a2:07:11:80:27:b7:06:61:d6:96:39:7a:23:db:f4:9f:
88:f1:0f:df:d2:60:22:cb:c4:05:f9:e1:b1:0f:8b:4b:d2:a9:
21:e9:43:b4:11:7b:89:fb:6e:51:24:31:14:50:6d:11:35:24:
fd:e5:91:24:6e:f5:f8:ef:c8:5f:d8:9b:21:dc:a4:a4:a2:92:
59:0f:f5:d7:d0:f1:c4:30:e0:32:1d:98:d5:2c:e5:60:c3:1f:
2a:0f:98:9f:ca:a5:c0:f9:a4:1e:87:14:df:e5:8d:c7:fb:19:
cf:ec:44:ad:3d:63:06:a0:fa:7c:f1:63:a9:3b:8a:f7:dd:e2:
b6:a3:94:4a:82:a7:8f:8c:24:46:96:b4:8e:39:17:e3:53:27:
63:9c:12:a6:ae:f2:8a:d3:c5:fc:72:06:c9:ad:45:f8:ab:dd:
f1:a9:2c:90:a2:03:3a:8e:ad:e5:5a:93:96:5a:b9:37:a5:15:
3d:93:2a:a4:3c:37:f9:dc:90:7b:33:9a:15:c8:da:be:5c:6a:
68:bc:16:a2:e4:64:9f:96:2c:97:18:72:d3:5d:59:54:0f:b9:
1f:23:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:53 2025 by rpki-client