Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: zs+9+gWDMeKyRaZ/xloP4ruyK4W+aOE6adXjJm3Vlhc=
Subject key identifier: 20:E1:49:AB:86:05:D5:73:6B:F8:46:02:0D:02:83:82:44:81:20:01
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 0194BD4E43A5045A844DF169B0FB1755C713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 08EE
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: VwiDbDDyvBo4aFKIeYxGg0ReK3vh6At9WFUMz6hnkUY=)
2: IGa7QfhbXaDsGCT9xJOI5gdu6yw.roa (hash: X0y8/lBS1BHPwzQ2lfqfjmgEWEXvXO2MftnVLJbE6FY=)
3: VwEoUNw-ez0MhDo9hKLki2sD7x8.roa (hash: hJNorU0BhP7KaHlsAZlKF465rhSAsAGROKIAje3NnsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:43:a5:04:5a:84:4d:f1:69:b0:fb:17:55:c7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=20e149ab8605d5736bf846020d02838244812001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:f3:a0:3e:e2:f6:cf:26:62:6d:8f:f4:be:
85:d4:5c:f6:ad:57:26:10:9e:99:09:84:2e:aa:ff:
b0:14:a0:f7:67:45:48:40:68:5a:95:24:3f:76:be:
55:d1:06:70:8e:9b:8f:6e:79:ba:db:73:7c:ac:74:
ed:dd:9b:81:37:b2:9f:38:08:12:13:53:31:c6:49:
2b:21:f5:24:69:0d:49:19:76:84:24:4c:6f:a4:94:
12:13:c8:2f:a3:81:4d:bf:9f:8d:85:25:b4:90:fe:
85:0d:d9:e2:4c:09:6f:b2:be:f1:e2:ad:90:ae:73:
f0:02:00:42:40:b1:84:10:65:0a:bf:8b:0d:d3:71:
76:df:33:1c:a7:95:44:0d:7b:e2:8d:01:18:8d:22:
4e:ee:35:f4:76:15:ef:6a:fb:28:82:08:f8:00:06:
0c:75:29:5f:57:a5:00:e8:9b:80:65:7e:48:9c:56:
01:5f:be:70:2f:20:37:b4:15:fb:14:b6:00:f0:67:
43:36:02:3c:c4:d1:81:1d:f1:fc:5c:87:ec:62:15:
8d:02:66:94:73:fc:22:12:47:d2:f5:40:96:6f:8f:
66:0c:eb:bb:9f:ed:26:bc:13:89:04:5d:bd:85:f4:
56:6b:14:8e:d9:7d:dd:fd:b7:02:2a:a7:1d:74:88:
ef:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:49:AB:86:05:D5:73:6B:F8:46:02:0D:02:83:82:44:81:20:01
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7f:ca:57:5e:24:3f:74:c9:38:2a:b4:49:5b:97:10:83:d3:
f8:91:34:a3:b4:1f:1e:84:c0:96:d7:84:14:ce:4b:ae:26:79:
ac:a0:76:3d:a5:34:68:1b:63:e8:d5:c8:2b:e3:01:09:2e:73:
75:77:a2:72:d9:7c:93:b4:41:98:5e:f3:19:93:aa:3d:52:03:
68:5a:6c:42:d4:61:a4:b0:46:48:0f:32:af:d1:2f:b0:a9:99:
e5:e3:f2:f8:78:0a:d3:00:99:a1:48:ae:72:10:a5:a4:a4:56:
e2:2d:9e:13:62:49:1f:e4:db:43:98:f5:40:d2:aa:6d:63:11:
32:54:47:e3:6b:65:f4:64:f4:8e:8c:c3:31:d0:2b:9e:f9:98:
9f:69:b5:3a:39:a3:3f:27:0e:c0:7f:96:82:17:96:e8:29:1a:
0a:87:78:60:f8:c5:bf:5d:b5:cc:dc:6d:0b:30:e4:bc:e4:23:
22:a4:8d:db:0c:bf:c3:33:4f:30:0b:64:cc:73:df:a4:4d:40:
73:f5:fc:cb:3a:ce:7b:53:f3:e2:99:5b:4e:5f:61:e0:5b:ad:
73:65:1b:11:c9:b9:94:e6:b6:97:b1:04:cb:f5:c0:7b:88:06:
ce:ae:5a:8c:f5:75:5d:46:f1:c2:d7:87:79:dc:a2:a0:c4:b5:
67:80:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:53 2025 by rpki-client