Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json)
Hash identifier: QTAKR2wTI2eI6qXRoq3ndU1NWLRYz02I90W4C6PG10c=
Subject key identifier: B6:34:CF:76:8B:D2:05:08:9E:0C:B6:73:D9:C5:86:01:B1:DD:3F:FC
Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Certificate serial: 0194BCAA1E16964AB5A6BC75808B059966E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
Manifest number: 0A59
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: SovRYzeQbHL66qv6ae4offKnCkxRfQFDY9jHVmKWTcg=)
2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:16:96:4a:b5:a6:bc:75:80:8b:05:99:66:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=b634cf768bd205089e0cb673d9c58601b1dd3ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:c5:bd:0f:ae:00:bf:2e:45:13:34:8e:31:
6e:ee:b3:83:0d:19:e9:43:f9:7b:32:17:85:ad:e8:
65:1e:91:9d:ec:ce:06:09:50:1a:6f:88:ab:de:5f:
ae:d5:09:eb:c8:4d:fc:46:c4:40:4f:0f:5c:b8:17:
48:1d:9d:7a:f0:f4:52:db:73:a1:0f:42:37:79:90:
90:d7:03:f3:8e:0b:a5:c4:ae:eb:f0:04:53:4e:db:
3d:36:49:93:16:e6:55:88:0c:4e:fa:3a:8e:8c:4c:
47:d0:7f:1d:cf:60:70:ee:1e:12:bc:06:97:e1:b4:
d1:dd:00:e0:f4:fd:3c:06:8c:42:c4:06:02:c4:19:
38:21:34:0a:26:dc:e3:2c:85:6b:06:6d:0a:38:5a:
5a:38:2b:fa:95:7a:3a:2f:d6:8b:ad:87:aa:f3:f2:
ad:d4:5c:08:08:5e:60:59:1f:e4:df:d8:81:3b:d9:
e2:13:eb:e4:fd:62:12:03:1f:72:76:6d:43:30:8e:
0c:5d:b8:59:2a:88:6b:ba:99:11:b2:d9:46:aa:70:
16:ef:ff:0f:ae:a5:5a:db:df:cd:30:dd:93:35:17:
a4:67:3c:30:2b:24:5b:9f:6c:9d:96:81:eb:41:a1:
7c:3e:35:6d:9a:b4:2d:b6:76:06:78:74:d9:33:c9:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:CF:76:8B:D2:05:08:9E:0C:B6:73:D9:C5:86:01:B1:DD:3F:FC
X509v3 Authority Key Identifier:
keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:20:90:b8:7e:22:05:32:cb:63:17:06:e7:cd:be:dd:31:
7e:3b:31:52:c0:8a:60:56:45:c8:94:05:64:c8:4d:15:8d:26:
58:64:d1:a0:81:0a:3c:05:bb:2f:6e:dc:1f:be:55:cd:68:86:
26:08:58:48:9c:5e:c6:30:98:62:f6:22:8a:56:c2:2d:6d:33:
68:a1:a4:9a:66:b1:3a:1a:be:49:32:ce:c8:a8:ee:d7:51:6f:
d6:a4:fe:b7:0e:a3:e7:b0:04:c8:58:11:a1:2e:5e:61:3a:e7:
e3:d1:bf:aa:c6:de:a7:60:c7:33:88:d9:bf:06:b7:b7:5d:38:
eb:ef:4a:a9:01:78:b2:db:94:be:32:56:f9:c2:c1:7c:d3:f7:
de:eb:93:6a:9a:57:87:8e:d7:8a:5b:51:0b:e2:2b:2a:f4:0f:
87:16:1e:f8:bd:2c:c4:dc:c7:4d:56:11:6a:60:53:53:fa:74:
7c:d3:c4:8c:bf:aa:32:72:19:aa:8b:42:6e:f9:0d:98:ab:e3:
e6:7c:83:f0:06:6e:79:ad:9b:de:6a:11:fb:4e:d2:69:98:40:
e2:78:8a:aa:50:3f:18:ba:1e:95:a6:51:ad:86:f1:5a:a4:61:
9c:4f:1f:5e:bf:4d:51:cb:98:88:d7:8a:3e:b9:89:93:72:54:
0b:ed:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:09 2025 by rpki-client