Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
File: HxINfknJ878xPZZTGt-n6q6AV2E.mft (raw, json)
Hash identifier: EuXA5BsakFjzFMsmmHnqjsXXTciNIUSBw7lU11PkAWA=
Subject key identifier: 9B:CE:E9:B8:AB:05:60:87:8D:7C:2E:46:DC:AE:43:D0:8B:1A:AD:7C
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 0194BD85AB7B5F9293380C4EE780D2441073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
Manifest number: 0C8D
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: HxINfknJ878xPZZTGt-n6q6AV2E.crl (hash: O6QwdlwFCdhVusvij/jXq0sxMP6+pfaO3bMc4EA6FaM=)
2: QTjz4VGR-GTFrRo0tluoiHJIBec.roa (hash: cV6m/fRf828h8WvDtj1b9iihpVzZghXy5TyXPUcK2IY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:7b:5f:92:93:38:0c:4e:e7:80:d2:44:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=9bcee9b8ab0560878d7c2e46dcae43d08b1aad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:55:57:d3:7d:ea:d0:b0:25:d1:96:6b:18:
4a:c6:7b:5a:e2:8a:c2:f4:91:62:38:57:75:b5:e9:
5b:f2:96:fb:0c:8c:a7:5c:41:f9:66:b1:96:9a:23:
f1:e8:9e:7e:28:46:25:02:e0:cd:49:a4:fa:d9:ff:
ff:45:3a:1a:4d:a2:b4:55:5a:87:79:a0:97:5a:ed:
77:3c:83:99:d8:ce:d8:10:30:31:9d:d8:b4:1b:6c:
4d:11:80:bc:71:2c:2e:b3:94:54:8d:84:aa:67:38:
05:ff:ff:68:ae:45:98:89:ce:41:14:03:b3:f2:c2:
34:30:d2:a1:a7:2a:7a:f5:84:75:d9:2b:bf:dd:72:
36:6a:8f:a2:bf:d1:60:fb:1c:48:50:82:96:0f:b4:
5b:92:b1:b0:fc:9a:84:22:f2:58:de:06:3b:97:9e:
07:a7:33:74:4e:d2:8a:aa:02:70:9d:a7:ce:db:96:
3d:a8:cf:93:6f:7f:c9:05:5f:7d:9b:59:31:e9:d3:
92:28:fe:2c:8c:b8:4e:19:6f:ed:48:04:b9:ca:63:
67:67:a4:cf:a2:d6:31:8f:0a:1b:83:c2:a8:b7:36:
47:25:00:54:64:a1:c0:40:ce:a3:69:83:4b:5e:6c:
23:35:eb:97:09:24:2e:7e:7f:0b:10:a4:63:81:10:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:E9:B8:AB:05:60:87:8D:7C:2E:46:DC:AE:43:D0:8B:1A:AD:7C
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9d:b2:e1:30:02:a3:cb:cd:d4:d9:33:c4:2c:4e:78:c7:f3:
d1:59:74:96:10:18:7d:90:c4:4e:97:34:7a:d9:87:e0:83:5e:
04:42:b0:82:3c:0d:78:fd:71:9b:de:65:d3:52:11:ac:48:51:
88:ac:41:84:1a:f3:b8:0f:6a:c2:00:5b:ae:b7:b4:d4:2a:76:
ae:f3:e9:0a:69:d7:51:87:9e:fc:d7:e3:78:25:30:18:d0:2d:
66:e9:ed:e5:cb:36:2d:3e:04:a4:ac:11:ce:a4:ec:84:3d:67:
4e:f8:21:dc:a3:4c:ea:55:86:f1:39:54:2d:81:b8:5c:a8:7a:
62:b9:59:b0:6e:22:78:24:7d:73:dc:67:28:e9:b8:91:e3:9b:
66:f7:b7:8a:af:19:16:0d:6d:be:91:05:62:38:3b:53:fa:6c:
13:e6:5f:24:80:17:57:f2:2d:b3:b3:87:c9:fa:89:0a:f1:2c:
2b:f3:67:66:85:6e:f2:7b:37:b6:7e:39:82:7a:23:47:c4:48:
85:5c:22:54:26:0b:85:5b:2d:32:aa:12:b3:95:4c:6c:79:5e:
04:54:0e:58:2a:47:bf:f8:62:4d:c5:4b:1e:e1:2b:e8:dd:d6:
e8:c9:96:0f:be:ed:69:05:92:66:39:b4:5a:c1:a3:ff:0e:7f:
44:f3:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:47 2025 by rpki-client