Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json)
Hash identifier: tPn9TbymV5Yxjs574dk6QMqW0gwaQdOOhf7TIrTjkt8=
Subject key identifier: 40:FF:23:5C:C9:81:92:80:05:26:1F:87:E9:63:EB:77:91:0D:E9:63
Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Certificate serial: 0194BBCEDAE4892941286B96C4D352F6F69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=)
2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: q7RXXR0I6QdiOLpo8+5drsukn9H60rrhy+igfW32FUM=)
3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:da:e4:89:29:41:28:6b:96:c4:d3:52:f6:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=40ff235cc981928005261f87e963eb77910de963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:33:39:72:77:56:79:fd:5f:8f:d2:de:0c:
82:50:25:25:48:38:2c:18:97:3b:e8:2f:71:3a:2e:
5a:51:86:43:be:d6:e2:ca:a8:29:36:42:61:ac:d3:
ad:1f:8a:06:2c:7c:4f:59:07:ff:8f:8d:ec:26:0f:
98:b7:2b:84:4c:e0:32:4a:cf:93:7d:16:cc:a6:f0:
79:1e:0e:82:bc:46:5b:4f:49:cc:78:85:b7:a5:54:
fe:80:7e:38:1a:d3:55:49:2f:64:7a:f9:17:a1:66:
21:0b:3d:14:b2:27:7f:ef:5f:44:09:79:0d:53:cb:
30:0d:e3:1d:55:aa:bf:92:d5:15:5a:77:b5:a7:7c:
f9:28:58:d8:86:55:04:36:32:7e:f0:d3:91:54:5d:
05:d8:7d:cb:77:0e:9a:f3:e6:61:c8:fa:71:bc:87:
bd:a2:c5:0d:cb:99:54:0a:80:26:a7:96:56:52:b2:
e6:18:ef:15:b0:9f:68:fd:89:65:e2:73:4e:9e:fb:
a5:22:f7:bd:b7:58:9a:e3:13:00:af:a8:cb:97:c0:
8e:ba:10:9e:ed:9c:d0:a2:80:b7:bf:54:5e:e4:c3:
3d:7b:2b:61:27:96:57:4a:d8:81:d2:ce:2b:03:21:
f8:a4:34:4e:bb:cc:21:c6:b2:d8:da:a8:e1:32:d7:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FF:23:5C:C9:81:92:80:05:26:1F:87:E9:63:EB:77:91:0D:E9:63
X509v3 Authority Key Identifier:
keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:33:91:07:dd:a6:b6:c9:df:50:56:e8:9a:94:46:82:10:
1b:c4:88:32:6f:94:09:7a:d5:99:e1:55:b9:3c:77:91:db:bf:
24:50:5e:5e:42:47:fa:c6:66:73:7b:b8:a1:6e:f8:f4:d4:bb:
8e:ac:73:f2:b2:a2:ba:ec:45:e7:05:93:38:4a:e3:04:be:25:
5b:f6:cd:7e:93:a7:ea:23:80:9b:ce:d8:07:89:14:b7:5f:71:
f6:84:43:b0:27:6a:d1:98:a0:29:cc:5a:b8:a1:12:b7:ae:38:
df:42:d4:69:19:c8:23:05:bd:1e:19:65:51:54:27:ca:6a:24:
84:f8:06:45:cd:b0:d5:a3:cf:03:87:09:1a:fa:e0:33:61:d2:
96:48:ec:18:bb:51:4b:de:45:11:12:f9:eb:a3:e6:00:23:2a:
f9:8b:44:73:9e:6b:27:d1:ca:ea:6d:e7:b0:c5:a7:65:d0:f3:
56:9a:3c:98:87:4e:49:99:d7:a3:8c:e6:f4:40:3e:a5:8d:04:
6a:4d:3a:58:60:5a:d3:ce:21:52:65:ba:5e:84:76:9a:bb:7e:
08:94:42:dc:ff:d6:02:e1:17:84:e6:36:b0:8e:ee:83:fd:53:
01:61:d4:f3:a3:fa:1e:b0:43:d7:e2:d2:e6:67:8a:ce:d9:a3:
8f:13:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:00 2025 by rpki-client