Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: ONO29RxcchSgtxGUtynEPH/axsMDDEbQcxbZQ1sVemo=
Subject key identifier: 3D:B2:62:35:86:B6:92:2C:A3:FC:2F:6E:2A:84:4F:5F:85:57:B2:78
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 0194BD17D5EACEB41635DA0667E5C3196FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 11FE
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: FSeV/SyKfGzgRb2I56V/lHUwiwOfYfvB/wGq95Byifs=)
2: OLwYzj-fOtPupeVPjMakvIdCk14.roa (hash: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:ea:ce:b4:16:35:da:06:67:e5:c3:19:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=3db2623586b6922ca3fc2f6e2a844f5f8557b278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:82:66:17:3c:23:5b:ed:06:96:f5:01:d7:
ca:e4:2a:fb:e9:a1:cd:2c:ad:80:88:7e:c8:bb:aa:
cd:1d:4c:a6:8b:05:9f:fe:5f:e9:e8:31:aa:b3:f8:
57:d5:ff:3d:b4:07:83:2d:2d:cc:af:7d:08:3d:13:
0a:8a:d4:4a:6e:2c:73:6b:26:94:97:49:94:57:2a:
b7:92:59:65:32:0b:32:51:46:95:41:fd:a1:28:72:
53:a5:21:de:59:a6:72:e0:9f:8d:2a:ba:79:f4:52:
a5:d9:64:ea:f9:2b:58:66:93:53:23:d1:87:d6:d4:
c4:d9:c4:ee:22:2e:0a:bc:83:9e:02:df:0d:7c:5f:
b9:69:78:5f:b6:9a:53:be:69:04:46:c7:e5:1b:78:
8c:62:89:31:6b:b5:b1:80:a7:bb:74:11:3b:20:08:
92:b1:69:99:f1:c4:11:37:aa:4c:95:e0:ff:bf:78:
ae:c2:ce:fd:6e:5c:b1:19:28:bd:3a:53:09:54:c9:
87:4c:da:62:00:b1:eb:ce:4f:57:a1:8f:39:82:48:
2b:fe:b0:3f:ea:15:24:5b:f6:a8:61:18:2b:4f:15:
fe:f5:b7:92:23:1a:6e:ab:43:7e:2b:d8:96:38:36:
e3:de:f8:13:94:33:8e:12:e2:7b:32:f6:87:dc:ac:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:62:35:86:B6:92:2C:A3:FC:2F:6E:2A:84:4F:5F:85:57:B2:78
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:72:73:38:ce:ac:e3:0a:67:f7:96:82:91:52:2d:4f:2a:78:
73:d6:36:77:c2:06:5e:2e:7d:f8:00:52:47:c3:1e:9a:28:18:
a6:c3:3d:bd:8c:8f:43:2a:98:7a:1f:ee:88:ae:ef:d6:e4:43:
cf:96:c5:a2:ad:26:7f:48:4c:a2:4c:c9:f7:36:13:89:3f:bd:
be:10:84:da:38:6c:e8:a1:33:58:f8:06:a8:8a:61:99:93:4c:
83:41:81:21:81:20:b6:1f:e9:70:c8:05:bd:3b:8f:8c:2c:39:
52:09:f7:0a:2d:1b:a1:97:3e:f8:32:bd:5c:cf:77:5a:67:2d:
46:1a:b5:0d:66:98:64:97:99:49:83:da:33:94:39:05:36:73:
ba:76:2f:83:64:52:5e:07:c6:fe:11:6d:bb:91:a8:79:61:be:
9e:13:ca:13:aa:37:22:ab:4c:e0:b5:e6:ac:6e:b2:ca:30:d0:
af:94:a3:e8:09:7c:1b:01:ba:2e:83:7a:45:ef:e0:67:86:72:
6e:e6:1e:8d:f2:97:3d:d2:81:1a:88:5a:c8:cb:2b:cb:e3:03:
87:5a:e8:43:fd:61:d5:0d:21:09:fd:78:90:58:c1:87:46:ea:
c5:96:cf:58:6b:e7:5c:1c:fb:9c:44:07:b0:9d:c2:af:5c:85:
be:5b:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:38 2025 by rpki-client