Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: s3l6Md1VO+vlCT0FQLYzoAzovyjcoOBtjfRD/FTfbD8=
Subject key identifier: 5A:5B:72:82:5B:C5:E5:44:CC:E2:45:51:1A:0C:2B:51:F2:D9:E7:03
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 0194BC3C1111BE578E0D4DADFE7C1D12759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0BBC
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: exYf3bzhAxQY/TPvKKxRcGdqvF2NLQwhkiU8oHwLwh8=)
2: IwEBndBJay-42UjStrqkUigiaxw.roa (hash: K30WoUV1lkACaXc+c2n1S5YA0J82XCcvxybes+V2uGY=)
3: U2aJyBd8P_eUVY58McQwjVpYLjA.roa (hash: LuVboNkBf5MvVMVqL/wxb5E/X4ZkELwqjAYKuZW9FEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:11:be:57:8e:0d:4d:ad:fe:7c:1d:12:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=5a5b72825bc5e544cce245511a0c2b51f2d9e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:6b:c2:bf:b3:27:a3:4b:b0:40:ce:7f:1d:
af:81:3a:e9:33:71:3e:f5:d6:04:67:a4:b8:3c:6e:
30:d7:4b:82:c5:41:9c:c8:73:79:ab:f2:3c:fc:80:
f9:ad:a0:13:46:ef:8c:ce:c3:f3:64:3a:38:33:49:
30:dc:a0:d9:d4:8b:6d:3e:57:df:21:13:c6:83:93:
62:d3:11:1a:b3:f1:71:57:18:5a:39:75:b4:80:33:
26:23:b1:dc:a0:c5:75:2b:07:21:a9:4f:73:9b:70:
3f:21:6a:e9:a7:1b:7f:2e:c7:7b:0b:a7:d4:59:1b:
20:9f:02:13:50:74:8e:b6:51:e4:f5:3b:18:29:e1:
97:63:0a:b2:eb:2f:cb:aa:66:83:ce:14:0d:b9:31:
67:47:c7:62:e8:33:c0:25:7b:0c:f3:82:74:91:9a:
7e:2e:5d:26:09:ea:3a:54:b6:9d:5b:d7:61:2b:08:
6e:1d:f5:0f:4e:14:ab:02:40:60:56:ca:97:77:59:
27:92:2a:e4:d4:a5:aa:e8:1d:54:bc:72:26:ce:68:
b3:cc:e7:f3:11:9f:7e:e8:d6:f1:8c:df:cd:b3:65:
4b:0a:86:db:39:2f:87:ae:a0:80:4a:c3:53:b7:00:
73:61:b0:5d:ad:66:a1:d2:77:af:d1:bc:71:d4:60:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:72:82:5B:C5:E5:44:CC:E2:45:51:1A:0C:2B:51:F2:D9:E7:03
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:63:08:d6:04:e9:b9:8d:16:25:44:24:9b:c4:2d:46:15:d3:
ea:14:f2:c1:5c:42:8b:35:28:0b:71:8b:a7:f3:c1:a8:a0:34:
0f:ca:ca:c3:11:4e:f0:ca:b5:33:8d:6b:e0:9c:ad:3f:7e:07:
76:bd:dd:ca:4e:8a:73:ef:db:8a:18:87:e5:01:cb:bd:3e:aa:
2f:93:a5:15:a0:90:94:2e:b7:50:ac:e6:3c:eb:b3:87:9f:9d:
a6:20:53:b6:47:69:b6:6c:a4:b6:ab:9c:b7:bb:03:bb:33:41:
65:2b:9b:90:8d:6a:d2:96:34:c6:ef:be:c8:37:0b:b8:40:f2:
95:4a:cb:32:01:96:94:93:8c:3a:af:8b:97:f4:85:8e:35:04:
4b:76:1a:b2:32:9f:1a:0a:9a:41:27:c2:f9:d2:c1:89:50:09:
7c:de:1d:47:5e:c0:56:41:84:50:f5:20:14:6e:b4:1a:dd:b9:
c0:28:28:a7:59:47:1d:58:39:47:7e:c5:1d:8f:2a:f1:f5:b0:
33:8e:f2:e4:4d:0e:d1:c7:25:55:9e:57:16:a6:f3:f1:2a:f4:
62:07:47:8d:0b:c9:a2:e4:8d:73:08:b4:de:45:c6:8d:1a:4a:
d2:14:97:1e:9e:c8:c5:78:07:83:74:53:97:7f:89:d0:14:07:
57:ab:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client