Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: cT8W161TPCUoBmum1rfKryLjrNJ0xMz1pIdRmOdJV/k=
Subject key identifier: 6A:B5:68:B0:F0:45:6B:13:BE:CB:D0:3B:B3:1E:E9:01:F1:6D:DE:DA
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 0194BC72A7D0C21A4506C54A30776A95E4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: +XlbrqcMRCjNl5mfi6hoonL4eMqyM3ySwoy9SPMukq0=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:d0:c2:1a:45:06:c5:4a:30:77:6a:95:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=6ab568b0f0456b13becbd03bb31ee901f16ddeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:e7:f1:11:05:a7:6e:42:6b:3a:ca:ac:f0:
e4:90:a4:d0:16:13:b9:a3:20:f6:6e:34:f8:25:fb:
36:8f:3d:4f:71:44:b2:12:99:0d:a2:3a:06:ac:81:
2f:37:59:32:9b:08:74:52:c0:0f:d5:be:c9:42:aa:
9f:d7:66:5c:cb:08:29:ec:8d:5d:c7:51:7f:77:61:
fc:b5:11:0a:75:70:32:98:34:d2:d5:3b:68:0c:3b:
a0:5c:0a:d7:2d:12:88:b7:e6:18:f1:b0:9d:2f:5b:
d6:56:16:37:77:bf:b7:a8:07:5d:64:33:c5:cf:8e:
49:77:10:01:cc:9e:35:55:41:4e:38:29:00:fe:bd:
06:c5:8c:be:4b:86:d5:46:bf:4b:47:02:ce:40:d6:
5b:f9:97:08:c8:3f:71:10:3f:ea:67:24:b9:36:3c:
33:24:83:cb:6c:a1:2f:86:36:61:83:2d:40:e2:00:
60:e7:c7:c7:fb:70:4b:e2:eb:95:94:05:64:82:29:
6d:06:3d:7f:6b:6a:1f:ff:c3:5c:7f:89:d2:f9:cd:
98:60:a4:3a:e7:84:f9:05:20:91:0a:0e:98:bb:b8:
0f:8f:57:7e:fe:e5:43:e2:cc:6e:bc:da:5f:92:94:
50:b0:55:3a:6f:14:45:2b:47:70:23:c6:48:35:d8:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B5:68:B0:F0:45:6B:13:BE:CB:D0:3B:B3:1E:E9:01:F1:6D:DE:DA
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:47:fa:b4:9d:a6:c1:7d:66:5c:e7:95:3e:75:9a:4c:37:be:
c0:da:38:99:ea:25:7e:88:e5:0f:47:0a:0f:18:0e:51:08:96:
32:6e:fb:25:5a:81:9d:56:3a:4d:a5:f9:03:32:42:95:d3:a6:
1f:5c:8d:18:95:b5:a5:ec:a4:99:f7:ac:5a:98:66:77:7b:ac:
28:c1:69:30:48:14:3d:13:43:88:3f:ed:6e:de:75:04:98:04:
e0:b0:47:03:17:ba:ca:46:32:59:ec:2f:db:f3:69:ec:7a:36:
d7:45:85:44:b6:ad:b8:c8:62:66:47:1f:b6:7d:af:59:08:ef:
17:21:1c:b3:8f:d0:6f:98:ab:13:54:f4:a8:c9:9a:18:54:8e:
99:0a:01:2d:36:66:ba:8b:5a:6e:a2:98:27:99:71:38:96:af:
5e:bc:bf:35:d3:ff:3a:3c:40:9e:cd:78:ad:e5:77:f5:72:d7:
b4:35:f2:38:3a:e5:bf:05:0e:3a:bd:0b:e6:24:98:19:b1:8d:
fb:c2:f0:dc:5e:c2:33:bf:bc:1c:20:2c:17:dc:af:71:8c:88:
76:89:e8:bb:04:82:76:7f:83:7d:9f:bc:ad:d7:92:4d:eb:db:
db:3f:13:e9:29:e9:58:77:86:e4:38:01:f7:4a:1b:50:cb:0b:
90:55:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:37 2025 by rpki-client