Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: I24aSQyWSVyuWp1p6jt897lqVRTqVbAEgIyAGvaZGjE=
Subject key identifier: F3:38:F8:F4:EF:E0:B0:70:25:E6:5B:FB:4C:11:D8:39:68:84:68:CD
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 0194BD17696404E2FA5AB9DBD22A9D358BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: IHbDbNCW+l9ckohlNK6Wh6OKUUdcZdq0yOSmrvNrxzA=)
2: hIagYPgcgLqF5hqMfUhJY2-sJAs.roa (hash: ZaaWq0BbjJoluHI5ROX+aFarBCsxRa8oHhsXlvsyUeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:64:04:e2:fa:5a:b9:db:d2:2a:9d:35:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=f338f8f4efe0b07025e65bfb4c11d839688468cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:4f:cb:fb:b1:39:b9:22:dd:e6:07:bf:33:
f2:32:f6:c4:1e:7c:48:35:8f:2c:9f:72:9a:ed:cb:
78:b1:ea:9e:d2:d5:50:3d:65:4c:a5:65:06:e5:12:
79:58:f9:d1:0c:d8:e2:59:66:ee:72:b9:1f:32:f8:
5f:30:6b:c5:85:b9:16:88:57:e0:47:15:0e:88:25:
66:8d:08:31:09:ca:79:29:b9:7b:0f:25:fd:43:f4:
4a:ca:ae:aa:41:e6:87:f9:f7:6a:e0:84:ec:95:1c:
3d:f0:06:e9:32:12:4f:16:cc:34:e9:cb:2c:91:e6:
af:d5:b5:50:89:56:1d:72:6f:9d:35:82:d1:d1:c9:
70:d6:5b:68:fb:a0:c2:82:c6:89:55:bc:d3:64:2d:
a2:35:2c:83:07:3a:56:c7:10:2d:39:cd:4e:e6:7d:
14:be:cd:3c:84:7b:0a:d0:b5:b0:6d:87:e0:3f:19:
60:4b:df:94:39:92:c6:53:99:de:de:c7:2e:8a:7a:
43:ad:75:76:9c:34:56:73:81:e1:64:b3:fa:82:b6:
40:68:bc:30:59:ea:2a:81:4d:50:64:96:75:ea:67:
1f:24:06:9c:f7:96:6a:25:7f:a0:38:8a:e1:cf:58:
d3:a8:d3:84:fb:49:e5:a8:cb:6a:2b:85:77:a7:f2:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:F8:F4:EF:E0:B0:70:25:E6:5B:FB:4C:11:D8:39:68:84:68:CD
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f7:db:82:80:6a:0f:a4:68:7e:f9:00:be:33:95:a0:62:75:
94:b7:48:fd:0d:39:13:c9:d3:c5:46:48:d1:3d:cf:18:48:6a:
d9:f9:d0:3b:35:f9:9f:cb:f8:88:e3:41:2b:06:b1:af:91:2a:
64:c8:94:ec:e0:cb:cc:b8:ca:a7:f1:96:0f:e5:d1:55:c6:cf:
a1:04:97:98:6d:32:85:54:50:9a:66:ce:ab:0d:9b:56:fd:d3:
2c:77:4b:74:39:80:90:36:63:5b:17:cd:bd:f9:af:f6:79:15:
be:b1:a0:3c:0a:38:65:bd:33:ae:78:44:68:a6:03:5f:86:9f:
1c:11:35:62:37:b9:6d:48:76:3b:8c:00:4c:3a:22:80:a3:cf:
98:34:31:7d:72:40:7d:27:7e:f3:f4:4f:3b:4d:51:cb:23:f5:
e0:cb:66:60:5c:02:03:bd:91:2c:99:06:42:52:3f:e9:d4:4b:
54:64:5b:c4:e0:41:41:c2:c6:f7:19:45:c5:f9:98:06:eb:ec:
e0:e7:a3:5d:28:84:05:9a:ba:bb:90:4e:f3:f7:ee:f5:18:29:
20:44:3f:1e:d7:83:fe:01:45:89:04:2e:87:ef:50:e4:23:d3:
08:a5:a0:b1:8d:0a:da:44:dc:9a:67:8f:b5:8d:bc:a8:32:bc:
fa:8f:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:26 2025 by rpki-client