Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: w7kTfRYlbr5vyuW9OvywUSVaLgH0u2KCyDSFcoxBpIw=
Subject key identifier: 6C:D1:31:BC:62:EA:BA:3B:19:CE:11:B7:C9:B2:73:8B:70:05:B9:84
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0194BCE090FDD7C3D49E6E6E071B53C2CC98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 1010
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: cg6irhvH5lRuBaypAZKCuzpK3GEyWNO4dKB1s8TPiM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:fd:d7:c3:d4:9e:6e:6e:07:1b:53:c2:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=6cd131bc62eaba3b19ce11b7c9b2738b7005b984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:e5:9f:c9:ba:45:87:c8:cb:1a:ee:0a:82:
25:ac:f7:0b:e8:0d:73:3a:1d:49:8e:aa:de:b5:52:
47:51:20:0e:80:5c:cf:56:5f:06:c9:fb:bf:5a:39:
30:30:c3:b8:68:17:2b:ef:ec:bc:2a:eb:5b:8c:83:
c0:6e:92:80:d7:ac:09:73:6d:0a:44:f8:df:18:6b:
49:9e:62:34:47:32:d1:06:67:04:ba:75:c2:c8:04:
62:c5:5f:96:04:5d:f2:50:f9:17:bc:7d:cd:c8:17:
f9:56:44:5e:ca:f5:b7:a1:bb:0f:12:2a:0a:c7:78:
38:17:9a:6f:15:df:5e:f7:43:88:d7:c4:d0:e6:7b:
2d:fc:da:b1:fa:1b:e7:1e:e8:72:36:0d:8d:2d:7f:
5b:c1:89:70:aa:f2:14:74:c7:98:fa:a9:51:c4:ef:
8c:17:7b:db:7c:23:89:84:11:7d:c9:da:28:ea:53:
6e:0e:31:78:cc:32:98:b1:bc:ff:13:4e:cd:8b:75:
d8:24:91:ef:b1:67:36:40:4a:b2:eb:ee:d6:7f:3f:
0a:05:9f:82:bd:9a:8a:8f:2c:57:2e:c1:95:ef:37:
8d:30:3c:7e:35:9f:ea:a0:41:ac:9e:2b:e8:ad:33:
e7:91:3f:34:4f:12:1b:ed:78:78:32:b9:21:9f:d3:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D1:31:BC:62:EA:BA:3B:19:CE:11:B7:C9:B2:73:8B:70:05:B9:84
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f2:aa:82:7b:8f:3f:3b:a3:8b:e2:96:be:f2:0a:67:62:83:
8b:81:59:ec:78:12:35:9e:fb:3f:70:d8:f9:40:b0:93:52:1e:
3a:2e:5d:51:0a:ce:4b:f8:21:4f:ee:33:b0:a5:b3:5b:10:f2:
6f:50:af:b5:94:4b:53:87:2c:ce:82:5a:7b:7e:71:30:ef:7d:
7c:e2:76:f3:ae:72:9a:e5:39:c0:89:1f:1a:8b:68:9c:db:b8:
72:a7:ef:f0:63:69:3e:ff:12:3a:aa:5b:5b:57:db:6e:64:67:
fc:d8:d3:eb:09:5f:18:88:d3:78:7f:53:96:f1:d8:7e:fa:6e:
93:cc:33:4c:aa:ef:55:c6:e6:a4:07:85:62:56:63:d3:f9:d6:
6c:64:7e:0e:65:75:57:98:ec:36:dd:01:b0:da:d3:5d:74:bc:
42:d4:ad:27:fd:1a:e7:e0:6b:43:f6:e5:66:dd:4b:72:99:0a:
0e:f9:21:ba:60:2f:c6:07:15:34:c1:55:45:5b:7b:d9:72:48:
2e:01:9e:07:e1:2c:0c:f8:dc:e1:a2:b0:f4:de:f4:63:16:84:
f5:3e:91:2e:6c:81:6c:9f:d8:43:5d:1d:ca:4d:b2:dc:b8:63:
45:36:24:af:25:36:b9:4a:63:18:ad:23:43:af:d6:8e:60:40:
78:f9:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:43 2025 by rpki-client