Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: hv9ZMk77SCku01Tpw1u0z0CPbG4Lk8IBYI8pxcv+OVE=
Subject key identifier: 7A:25:53:67:FF:F4:30:47:AD:D7:1C:4B:93:50:4E:1C:29:71:00:EA
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 0194BC04D8994E7DF04E359D178DC5E1D10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 0D96
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: sMDBE8t9itU/4rYN8vDDC56agoOhQ64BuJb1/0h0hfc=)
2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d8:99:4e:7d:f0:4e:35:9d:17:8d:c5:e1:d1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=7a255367fff43047add71c4b93504e1c297100ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:ee:37:72:f2:0f:96:9c:1e:80:3f:b1:88:
52:5b:e2:54:9d:62:f1:0d:79:d5:37:4a:6e:0e:f3:
a1:ad:e8:a4:20:6c:61:61:b3:86:61:a1:43:5e:2a:
92:fe:68:cd:56:e5:56:d2:b9:61:3c:b3:4e:1d:a8:
fe:82:be:b4:a3:6b:72:13:cf:5c:69:8e:6c:c1:5e:
34:c0:11:f3:2e:16:41:d7:10:c4:ef:94:ac:93:64:
dc:26:4e:f3:1e:9f:2e:6f:20:75:c5:e4:a3:b0:ae:
98:d1:b7:48:96:eb:24:00:cd:16:38:be:26:70:c6:
8c:b5:b4:7f:19:93:f2:7d:fe:07:bc:14:ca:76:52:
4e:1c:a2:24:fb:a4:c2:88:79:52:36:8d:fb:5d:a6:
b7:27:e8:5c:59:1c:34:1d:51:ec:1b:b1:bd:f8:3d:
70:4a:af:b1:40:1b:0c:92:f0:c5:71:35:d5:fb:12:
81:c1:2d:00:f8:45:11:46:91:e5:3b:b1:4e:02:e8:
83:42:92:92:3b:f6:97:a5:9a:3f:a6:16:4b:1f:28:
2e:79:72:6c:84:84:a8:d6:ee:56:24:c7:95:f0:b0:
a6:69:b0:ca:2a:a7:f1:8c:4b:24:2c:5a:7c:31:e9:
4c:34:a9:d6:35:25:5a:88:e6:bc:d8:93:a4:6d:69:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:53:67:FF:F4:30:47:AD:D7:1C:4B:93:50:4E:1C:29:71:00:EA
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:58:a3:94:9f:7d:f1:f3:14:80:2e:4a:7e:03:08:dc:e6:41:
84:4c:fc:85:54:51:1e:81:91:cd:1a:91:4c:b4:ba:04:7d:3c:
38:b6:ef:94:e0:f7:94:75:51:d5:a0:9c:b7:8e:18:c8:dd:2f:
f6:aa:5d:7e:31:c2:64:b0:7b:fa:67:c6:d4:3f:da:6c:91:ce:
e1:5f:71:ef:5d:ff:a2:cd:4b:45:9c:ab:d4:a2:84:fb:a3:26:
d8:61:01:89:c5:5f:81:50:7f:bb:54:9b:fd:8d:09:62:1b:92:
ea:b5:5a:4e:56:e5:c6:03:df:e8:ac:60:bd:e5:b7:00:5b:d6:
e3:4e:fa:be:87:62:86:03:15:5a:c7:ec:cf:b7:06:1c:61:fe:
8c:49:81:48:9e:f8:eb:d1:2f:26:8d:eb:34:a0:42:04:fa:f7:
44:e2:a1:66:09:30:d5:88:85:5c:54:06:ed:c0:91:cc:75:36:
82:b7:a9:b9:a8:34:5e:0d:c1:9b:5c:19:b3:a6:b0:2f:67:e6:
b0:6a:d0:5e:67:3d:09:4b:c6:f8:39:7d:69:25:4d:c6:f0:c8:
ac:29:d5:f4:a0:6f:ce:b8:44:6c:62:2e:8e:e2:bb:80:b6:ba:
b8:09:af:6a:c1:f6:2b:6f:f0:a8:14:44:74:7f:a0:a2:fb:67:
af:6e:0d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:12 2025 by rpki-client