Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
File: HLQJLqLRKW3-YdeKffs8HgORZAg.mft (raw, json)
Hash identifier: FUBOyOXpvnNiE5mSSkQugqKdhiQmXhwTZa7JWIKkF6E=
Subject key identifier: AA:D2:4A:9C:5C:F1:09:83:C4:83:64:CE:15:EC:C2:82:2A:F5:01:75
Authority key identifier: 1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
Certificate issuer: /CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Certificate serial: 0194BCA9721BB25B27453224FA6C36DC136A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
Manifest number: 07F2
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: HLQJLqLRKW3-YdeKffs8HgORZAg.crl (hash: c0qrIYC1L4dHPYc65fjJVg6WBSRdDKHCJ9PG85u0Y0E=)
2: lwK-tdVWMXrHYVdbn4kUCTAVzCc.roa (hash: 4tg/EkN8rS3veLtCDPXV4EkuPbAIwhwYzveo6umGo00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:1b:b2:5b:27:45:32:24:fa:6c:36:dc:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb4092ea2d1296dfe61d78a7dfb3c1e03916408
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=aad24a9c5cf10983c48364ce15ecc2822af50175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c8:20:06:73:cd:68:d5:3f:63:82:9b:60:5c:
35:4f:fb:2f:6a:a7:c3:fb:37:01:22:e2:13:3b:70:
cd:16:4f:25:d0:a3:88:02:70:ae:61:0f:e5:9f:cb:
70:d9:72:17:fd:1e:ee:bf:58:54:f0:4c:58:a4:b1:
3f:67:a1:ea:21:ac:c4:34:5c:70:6d:a5:3e:07:62:
7e:f6:65:24:b0:9b:d3:8b:00:a2:43:a4:62:37:44:
e4:48:06:b4:d7:79:cd:87:97:6c:72:d1:77:65:82:
55:56:b9:52:eb:ef:f4:fc:0e:33:30:9b:76:fe:3a:
94:8b:37:18:3d:98:9d:21:ab:56:3b:22:ba:9b:84:
f4:69:ec:91:eb:90:61:34:26:72:0e:dc:bd:9c:99:
cb:5e:77:aa:04:e8:9f:5e:aa:6c:ad:5d:16:0a:51:
06:cb:70:f4:5e:1c:e6:b8:d3:81:cb:94:57:53:36:
ed:12:ec:10:e8:bd:9a:0a:2d:93:b2:25:38:35:71:
ed:0e:97:4f:ab:30:6f:ed:10:91:6e:a6:10:98:d3:
ca:d5:0a:ac:ab:5d:58:90:f9:57:45:c3:49:98:9f:
9d:7d:f8:8a:dd:65:18:57:27:3c:c9:64:6b:31:59:
9a:ff:23:a7:6e:69:4b:cb:7f:62:82:db:7d:c2:41:
95:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:4A:9C:5C:F1:09:83:C4:83:64:CE:15:EC:C2:82:2A:F5:01:75
X509v3 Authority Key Identifier:
keyid:1C:B4:09:2E:A2:D1:29:6D:FE:61:D7:8A:7D:FB:3C:1E:03:91:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLQJLqLRKW3-YdeKffs8HgORZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4ca005-177d-44b5-9d96-c5469fc7d2d0/1/HLQJLqLRKW3-YdeKffs8HgORZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:07:f2:7c:9b:98:6e:eb:15:3e:63:68:17:04:be:b5:5b:d1:
cf:6e:cc:a8:bb:74:8d:ed:98:a5:f6:15:0d:0b:8c:a8:32:5d:
6e:3e:60:c7:c6:f7:a0:63:98:cf:c9:f9:6a:b3:ac:84:7f:ac:
8e:ec:d6:4f:16:c8:53:5a:2f:86:88:33:82:d8:e1:6f:03:35:
2a:b0:04:bc:89:08:ef:0f:92:03:ff:b1:1e:d0:02:fe:df:26:
42:88:e6:19:ac:cd:5e:cf:b1:1f:c6:de:9f:2e:04:45:eb:4a:
34:8f:87:87:b2:a7:1c:f2:77:96:a8:6d:dd:21:63:a2:0d:01:
55:f9:fd:bb:84:4b:65:ba:d7:cb:b4:fd:24:46:22:77:7d:0b:
97:b6:a8:0b:e5:10:28:fe:79:19:b9:ba:f0:20:ef:ac:4f:01:
9a:bc:84:a1:ac:5f:f6:36:72:f1:33:34:b6:a8:ba:22:04:0d:
fa:a6:2e:a7:42:c4:8f:83:32:5d:5a:0a:0a:59:22:65:4f:78:
42:e1:00:28:e6:60:fb:e5:22:1f:5c:4f:df:75:cf:b0:4a:63:
f7:4b:2b:7a:4b:84:43:f4:34:41:38:17:09:b0:8f:3e:32:f0:
2c:71:f2:85:c1:4f:d9:82:82:48:a9:e9:ed:17:ec:53:22:ad:
45:c4:e9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:48 2025 by rpki-client