
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json)
Hash identifier: IkpQCRTomBfINM958pv+44XvtmsqYXu+6tKvH/nWveM=
Subject key identifier: D1:A7:5A:66:28:55:AB:33:32:DE:C1:26:6C:C3:DB:4F:A3:A4:A5:C6
Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Certificate serial: 0194BD8529D7AF94BD46E4177D1F1B891933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
Manifest number: 0B4A
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=)
2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: czdW39AnYJAQNOp0EoMARTrtboMWm6R0uYwOnMVjWl0=)
3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:29:d7:af:94:bd:46:e4:17:7d:1f:1b:89:19:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=d1a75a662855ab3332dec1266cc3db4fa3a4a5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:89:a0:3b:bf:13:8f:e1:58:47:38:9c:86:
4f:3f:59:d9:d5:a6:ae:0f:34:98:84:2d:b6:b8:11:
01:37:6a:25:3a:5d:2c:f6:01:c6:2d:1e:59:19:8f:
a2:c9:90:a4:cd:0c:55:d0:12:c4:c4:2e:3b:58:de:
22:00:28:b3:c9:f1:89:17:2b:c3:e0:02:8a:1b:d8:
0c:47:0c:10:af:ce:55:ff:3b:66:f7:52:85:bd:25:
4b:75:0f:38:77:22:38:65:e0:9d:d5:25:6a:c8:4d:
c5:80:2f:28:be:8b:9f:56:8a:db:fc:cc:03:06:d5:
9f:29:b2:65:55:74:a2:73:3f:a2:6e:12:ff:8b:7b:
f0:94:dd:3e:22:30:53:cf:1a:6f:a7:16:70:5c:46:
70:98:02:63:b3:3c:3a:8a:2f:09:e4:3c:72:34:77:
75:3e:56:f0:3c:77:a4:4d:fc:9b:2b:7e:6d:4a:f3:
65:e6:3f:b6:8b:98:63:61:35:49:5f:f4:6b:7f:60:
4b:39:d4:7c:c9:5f:c9:e5:8f:85:3d:9b:d0:cf:89:
f5:5f:3b:61:b7:fd:3b:64:cb:dd:92:45:09:a0:3a:
ff:1d:91:48:75:33:d0:76:26:7b:0e:3b:d8:07:28:
a1:73:39:af:1a:83:b2:81:dc:f3:a2:aa:13:71:7d:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:5A:66:28:55:AB:33:32:DE:C1:26:6C:C3:DB:4F:A3:A4:A5:C6
X509v3 Authority Key Identifier:
keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bb:0f:68:0b:7a:04:72:57:5c:4a:26:2b:44:ce:28:65:e8:
65:79:4d:58:02:8e:6c:fe:9f:08:57:40:a4:35:33:5b:b6:34:
53:c5:b7:33:1c:5e:17:5b:16:22:93:93:e1:0c:34:69:d5:15:
d0:b9:27:85:57:af:0f:c0:e9:e8:ca:a1:a3:4a:32:86:ea:04:
a1:f4:f1:e0:c4:59:65:db:07:c9:81:dd:3b:40:6a:2a:3b:06:
a3:4c:2f:b1:10:04:9d:cf:6f:c4:92:5b:30:48:f9:d3:b7:e2:
dd:a3:83:3e:b7:b7:0b:39:62:f7:94:2f:c0:23:85:89:63:62:
91:e7:c9:e5:05:cc:50:b3:3f:2c:ac:35:c1:6f:c3:3f:77:a1:
b9:a9:29:95:99:01:26:4c:db:ed:4f:57:ad:60:45:05:0b:ec:
3d:4d:72:72:f0:1c:a7:5e:64:22:fe:34:47:5c:8d:0d:d8:c6:
69:04:bc:fc:0a:1e:60:d9:94:1d:dc:13:1e:b4:b0:35:87:76:
6e:51:59:1d:72:ea:1b:79:59:a1:3a:a9:2f:09:f6:22:3a:0d:
64:b1:87:06:c8:38:6e:2c:cc:16:97:71:22:a8:46:4f:0a:2e:
26:fb:24:32:7c:03:22:bb:02:44:bf:3b:e9:ce:ec:6f:40:ef:
0b:0a:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:34 2025 by rpki-client