Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
File: HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json)
Hash identifier: Q4XGMYgxlkero1VH3qynEn1a+05a8KjM+/dpXL5wBsc=
Subject key identifier: 5D:6E:EC:17:A5:2B:82:69:74:39:7D:62:A7:F9:D6:59:8B:0A:CF:65
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0194BD17EB81B524280AD16155CD35E9A1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: 01IyZPShAVPSGK_LBQOoBRoX2hY.roa (hash: ShcyZPAfMNiVhqYvv3BbNg/G1EjlR2Uh6H6nXOZGEhY=)
2: 0v94mnKmrgYtt5y2MQGuDazjxjA.roa (hash: 3Fy3bWz7jcZoEFMt18MGzYWf/tfMkeytNpRPKao8d4A=)
3: 3TOUhgccQ5dRK5AUf9WBFMagxwI.roa (hash: qgTVtFNkTxIp5RUKEcTv/WAyr0v58s4nJUa1WEamEkQ=)
4: 92fBnrq_mIGybZF5gsHPTbdH0y4.roa (hash: 3nqgv8gEoJk+mexG4q/tymckm8ICa7hlkNqJQ4qh8Tg=)
5: B3hYI-yFzUsfLaXXcmpVXDtm1FA.roa (hash: l103Ybv4lweW1usLLXjIO7Qt2UGlUxgwH75Nm0FO+Vs=)
6: CBUmi1Sy-4OHlm4dqLE_fNMsxkQ.roa (hash: sD732gCP9DEw8s9H4wJkzWgViHWbKEY1xx697cAAzh8=)
7: DFllakhYeoutBATf4MzktTkzMHA.roa (hash: GuxDJWqtKXhEqBdraQY6S/n1UWX945Zxw/dwDjpnHZI=)
8: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: Uk76aSoNfW61BqKGKM3YvXJb3ciNkvVzxbvRvTBxGj0=)
9: KOI25PzdTkm-0xZVhCT_xtTg5-s.roa (hash: 1o0QY37vh42XXWTJhB6P/HZwmg8ud9LsKS5XYNkdPhE=)
10: KwHNXab8T0qily6EhqwAah0U6m4.roa (hash: 5HRuV5twWfwR5EfODMLW7Fwyf5uXxHS3zEz0c8szxsQ=)
11: MvQHHvkVoQy3lVu02hdZ6FgqbBg.roa (hash: m2m+bjvJcfx4y9hxUx6SCMhUW5rqeRhdVnMt4uwz5JM=)
12: R2R3dYwVExujkP_3YEzS5IWSFks.roa (hash: iCdIt4hjH3rsHPjbBwBDkiRUbawLUhZbiZd908W2whA=)
13: S4EG6rgQ3B8fwlmWgKf4yy21TCU.roa (hash: 5ggzvaoeOp1wyzv8E9K2nZzJI3rQqbhEaRtgPJclKAc=)
14: TxUte2UJ9SRYfI0Kkfto-EOhFA0.roa (hash: jgnG8ECsuht9mADq610Na72eHRyPpWoKaV58yYAI49E=)
15: TyejWy3JMbuHPbI-YINhRswkn6U.roa (hash: ddeTozCzeGdeH2UQO6NJHuZFd1z2I2vHOsvjsVc+KhU=)
16: XrgRtu2fx8QocFuYPQ7KDeAxao8.roa (hash: VE4DEo/PgY06LyrHZl5Osnfd7kf7cTLi1hI0WCdZfE8=)
17: ZRRxPbfr3T5fwg8-wjb9lv3qVwg.roa (hash: DrdbTDlKovuFbmXE4ZKs0XewzPvJ/cJli+ild7wio3o=)
18: b_esdvwuL7HMMRsaUDaWOqTlMVY.roa (hash: pwo77eC9fZ605tPPzC8qd5eRG6DFX9632hHdiz08KNM=)
19: cijQjJHfmYZAHsAJY39e6wchtlI.roa (hash: mFYrNndwHoIj3rv55aoPkXCstEwQfojhqJIbbtNJoSM=)
20: d-95rAHHuBAaQPmzAEPWgdKyxFo.roa (hash: 9Wboo4a75LUMWjrM7p8sJusEoWoF75d1YR86Ff0lJjY=)
21: u_xpoEFdMS4XphSvfLjhMqrSVCA.roa (hash: F/zktMNsr2weptvJLM+lhhTnzjBLxkGzNeypTL4hxZk=)
22: uhmFxnEKd2nWDe4y3QSW_tBBf5k.roa (hash: 3Bs+fdH+UE5EdQY+qhv9fnBOPcXhnzSeBJNZNfIjD6w=)
23: uxudDre5Pcm8ozCOwSgfublLGTU.roa (hash: FGNIRDDGrVODnMu1j2Klho//FcYntZbUMLIH8HUw+hk=)
24: zMJETxLsWTAKKQAfukhgO31305s.roa (hash: WhIX26XzF7FuSZOfkdVhWWsEE5Vfe4tbUMIAoSLVDUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:81:b5:24:28:0a:d1:61:55:cd:35:e9:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=5d6eec17a52b826974397d62a7f9d6598b0acf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:3a:f9:b6:e5:b2:dd:e7:05:ae:a2:2d:d9:
4b:4c:8e:38:45:83:9c:9e:ee:0a:12:bf:53:e4:04:
8a:06:9d:3c:0e:99:49:b6:2f:f9:37:b5:7b:ef:bc:
4e:70:50:6d:f9:ed:6b:37:d9:a6:41:21:15:16:2f:
d5:7c:a7:df:0f:0a:24:ed:e9:fd:e1:fe:64:b1:0e:
2c:b4:99:94:48:d6:9b:f6:12:6b:04:24:d2:79:b6:
51:27:fe:cc:ca:c3:d4:e4:cb:eb:53:37:2f:0e:28:
83:37:8a:2e:d6:f6:e3:95:70:1c:dc:e2:82:04:63:
2e:6f:f4:12:76:03:72:11:18:e3:79:cf:98:14:f4:
b0:d0:ea:f7:50:60:a5:d9:fd:88:46:f1:f7:d1:2f:
b5:92:c4:57:43:74:8a:3a:a8:6c:b7:26:7d:c3:e9:
d0:db:58:1e:a7:4c:49:ed:9d:b3:c5:17:53:d4:e0:
39:0f:ea:a2:c4:8c:7a:3f:ef:70:e5:92:fb:5a:b1:
ea:ef:fb:4f:9f:c0:a0:96:b0:1c:e5:58:3f:e7:3c:
f9:1b:e3:58:bc:93:f4:99:f6:7c:27:b5:e2:e0:50:
6a:51:37:d0:ce:fb:9d:50:2e:11:39:d7:90:e8:d4:
a6:b9:6f:09:7d:95:65:c9:84:a1:56:92:93:62:79:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:EC:17:A5:2B:82:69:74:39:7D:62:A7:F9:D6:59:8B:0A:CF:65
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b4:56:4a:bd:d3:7e:cc:16:fe:c0:5d:c9:29:fc:4c:cc:f4:
9c:fb:ef:d7:09:2c:e0:72:95:7a:ae:bb:6b:1a:e9:fb:9d:8c:
5b:4f:30:79:ea:4f:62:54:56:2a:4d:c9:6d:7c:fc:d0:bd:f0:
d0:ce:1f:40:80:58:37:78:a1:83:03:40:ad:c1:0a:a9:10:db:
a9:a2:0d:58:82:d7:f3:e1:a4:ed:ed:2a:df:ec:df:6a:4e:76:
33:23:7a:99:fd:30:9d:7e:68:04:c2:e9:fb:48:97:3e:ed:ca:
f7:87:b4:e8:56:ec:61:6e:e4:7d:9f:46:6d:03:93:0d:42:fc:
88:7e:62:8b:e3:6c:d8:53:8d:e5:ca:55:7d:b7:f0:91:39:96:
1b:53:8e:a7:5a:8e:ca:7b:00:b0:de:5e:91:c2:ce:bf:26:77:
95:65:1a:f5:66:05:4f:9f:7f:40:1a:35:fa:f3:ea:a0:63:b3:
9e:89:cc:18:59:15:96:2b:d4:ee:22:55:4a:af:7e:8a:04:84:
c6:1b:5a:74:b0:e5:2e:bc:30:05:40:d5:5d:67:9c:7e:19:32:
b7:dc:b0:79:06:3c:0a:d4:ef:35:63:6e:a6:a2:7a:be:ff:c5:
55:45:26:26:22:30:3d:1a:88:7d:dc:bf:52:bd:93:53:43:cb:
f8:37:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:14 2025 by rpki-client