Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json)
Hash identifier: f4JBcaJPXn/dmQVEKpuBIYcHzIDJ3xXN9ZImBu3k+64=
Subject key identifier: 81:EB:99:44:3B:EE:FB:7A:6D:4C:DC:9D:BE:8B:37:A3:E9:1B:6C:08
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 0194BD4E49EE02F2F5895282AAE97CB4E9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
Manifest number: 0492
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: VZk7RQRZ7j9dHlJQBrovWna+i8HCU+1IpP2ydKbnOmo=)
2: OgqV3K9kCSqiIeZrVFL3cqlGwzs.roa (hash: bIUylMSKQ5ZoW2Pp24mJHfGBGlU7c/qX9MC7wrpEUho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:ee:02:f2:f5:89:52:82:aa:e9:7c:b4:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=81eb99443beefb7a6d4cdc9dbe8b37a3e91b6c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:68:e1:50:dc:e3:51:cd:f9:0f:22:d7:d0:
11:f1:44:73:14:5b:1e:65:10:55:d0:d2:61:5b:bf:
de:90:ce:52:eb:ac:fd:84:f4:c2:5d:65:e5:e7:07:
64:27:b4:5d:24:85:a5:b0:18:d5:12:7b:45:16:4e:
6e:0a:bb:ac:e1:ad:f8:40:41:b8:db:fe:2c:42:bf:
ea:44:70:e5:f2:fd:cf:83:5d:41:b0:40:f4:37:50:
e4:ae:80:c3:55:54:e7:b9:06:e0:bd:19:a3:bf:2a:
89:49:f2:b6:72:b1:5c:5e:91:9a:86:a8:d1:51:07:
d5:e2:7c:c5:c5:43:55:95:d5:8e:05:6f:c6:4f:e9:
6d:64:00:46:67:fe:95:76:06:37:55:ab:39:46:40:
f2:bb:9d:89:f0:57:40:93:11:9f:6e:45:e7:42:89:
b8:23:d7:1d:a0:f1:2c:fb:81:39:5c:bb:54:32:88:
62:35:3f:2e:c8:b7:ca:e9:77:06:3a:6a:05:5e:4b:
3c:71:6f:04:19:68:e7:f0:a1:e4:c8:c5:2d:dc:7b:
36:d6:ac:bc:20:fe:ad:65:14:47:e6:e0:e0:d1:86:
cb:c3:aa:ae:16:d3:aa:88:38:be:bf:54:14:0a:4a:
45:ba:77:91:7a:db:4c:65:b8:97:45:97:0d:38:0a:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EB:99:44:3B:EE:FB:7A:6D:4C:DC:9D:BE:8B:37:A3:E9:1B:6C:08
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:54:38:51:a4:94:2e:c8:52:be:ad:e0:56:cd:15:6b:83:
9e:7e:6d:2c:0d:95:2a:08:f3:5a:cd:52:3d:a3:b9:a5:7b:cc:
e8:0b:e8:7b:8a:ab:53:00:2c:fc:a3:ed:e2:2c:41:bf:a5:56:
56:cf:7b:1d:9b:34:17:5f:a8:90:de:0f:57:bf:24:e7:6d:0d:
2e:a6:b4:47:92:23:57:4c:ba:85:8b:51:5e:ea:54:f3:37:d8:
88:c5:7f:a0:88:a0:fe:8d:73:09:c0:a1:a2:bd:a6:1b:db:ff:
c3:0b:b5:0e:f7:c4:a6:bd:99:75:be:c7:35:a6:2d:a9:b3:36:
ec:17:73:21:2c:5e:63:64:bc:1b:dd:a8:d1:1b:69:7e:ef:ca:
b9:3d:26:4c:2b:43:8a:9e:9b:0a:84:58:7f:46:f8:2b:fc:6a:
4b:ac:34:94:cb:6a:0c:88:70:22:98:85:02:22:a2:c0:2f:a4:
3d:e9:27:38:bd:2e:7d:0f:d2:b0:4f:71:5b:8d:dc:2e:82:93:
a1:8c:15:67:bb:0c:70:ee:db:11:99:ab:76:12:a4:1e:60:34:
84:0c:64:34:53:c1:ae:9e:14:8b:90:53:83:63:c4:02:4c:0a:
7b:cf:63:16:13:de:32:ac:09:3c:a7:ce:55:11:1b:f9:03:d9:
82:8f:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:21 2025 by rpki-client