Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: A/R5HkYCk2aill1WE8QTExJv3eKpsyOYZ4t87U2KEfI=
Subject key identifier: 99:86:46:FC:BB:B0:EC:5D:14:F1:89:89:8E:DA:B4:FE:59:41:E7:67
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 0194BC3C9DA692EF81CF019E96255B24330E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 13E0
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: nMfLa5Sqss6gigJB/edIdRQLiESjNOF042RbznzMd2Y=)
2: QxYftvw4ScrdmE6izSAuqNiVV-s.roa (hash: Ug7LB4EKJVBqtTxRK9aYbiXduDif7sf/a25gAftWyKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9d:a6:92:ef:81:cf:01:9e:96:25:5b:24:33:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=998646fcbbb0ec5d14f189898edab4fe5941e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:9e:02:40:32:86:bd:86:8d:68:94:55:b3:
b0:08:8f:3d:9b:ec:42:b5:de:03:d3:59:72:ff:b5:
9b:b8:33:ec:14:96:25:6a:69:17:92:ac:a3:60:25:
31:45:83:08:2e:ed:10:36:80:f4:c6:a0:80:5f:52:
fd:6c:ec:23:11:16:19:a3:06:27:34:c4:6b:e5:41:
5a:2b:12:1e:2c:ec:3e:17:b3:a3:a5:86:3c:48:e7:
92:89:8f:1c:54:5d:64:7b:0e:43:cc:33:1e:04:b7:
3e:e6:b8:4c:d8:bb:d9:24:55:f5:89:e6:b9:b1:d4:
8b:eb:bc:d0:2d:4f:1d:cd:1a:8f:b9:ec:c8:79:ae:
ff:8d:94:86:54:9b:47:56:78:b3:0b:c7:b7:f3:a5:
d2:1a:d6:cb:ac:8a:79:ae:c9:41:d5:c4:2c:ae:a5:
55:63:fa:ed:4d:5a:e7:af:7a:ab:a0:09:8a:e2:20:
cc:82:9a:a1:24:6e:df:ba:92:e3:56:3c:74:ab:09:
ac:68:4c:b1:85:34:f1:a6:1e:04:18:55:f6:75:90:
01:d8:c5:13:32:2f:75:c2:ab:ea:25:30:d3:15:62:
07:bd:1a:3a:c7:25:cd:9b:c6:79:ca:d9:84:ea:90:
96:0f:63:9b:5f:b3:96:26:ea:73:1f:2a:b2:0e:6d:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:86:46:FC:BB:B0:EC:5D:14:F1:89:89:8E:DA:B4:FE:59:41:E7:67
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:f0:ae:98:48:81:8b:03:27:b9:e8:53:fa:87:c9:53:2b:
22:c8:2f:6a:50:03:f8:3a:b6:e3:5a:a4:66:aa:78:0f:5a:a8:
f0:4e:4e:32:88:ae:4a:df:b6:6f:02:06:ce:26:7b:fe:79:40:
02:2c:aa:bf:b7:53:d5:38:02:e9:fb:7c:c8:d6:fc:34:6a:9c:
68:80:2a:8d:95:56:08:74:32:89:11:9b:fe:04:78:b7:6d:62:
3c:40:17:ea:32:fc:76:d4:e1:dc:c7:d3:59:22:31:61:5e:9f:
e0:c1:e0:53:a2:93:b9:94:32:df:e8:ed:79:00:84:66:5c:e6:
e5:89:bb:75:aa:1a:48:38:dd:e2:27:3d:dd:0c:4f:56:2d:83:
bb:fe:16:2d:f3:40:f6:ab:f5:60:16:02:98:96:41:e7:59:75:
ba:9a:b1:8b:39:6c:80:72:7d:14:66:4b:6d:c7:af:b8:14:ed:
31:71:fe:e3:63:91:b8:65:18:85:ef:db:ed:40:46:29:1c:1a:
f2:1a:db:fe:94:43:f3:52:03:3a:5e:1c:7b:3b:8e:14:6f:cd:
14:50:df:82:67:19:02:b8:ef:db:7c:a3:ac:7b:a2:73:56:66:
32:ff:23:b7:a4:1e:18:10:64:05:44:30:e7:0f:6f:94:bc:51:
e0:42:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:21:38 2025 by rpki-client