Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: KNoNAthw6zzyYTvZXIVFrp4JSb9of/6nNr8b0+zU0Fw=
Subject key identifier: FF:75:35:38:B8:13:BE:DD:89:35:CA:EB:BF:97:DE:5A:5B:24:D2:71
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 0194BD855C35E64CE9F656D30A78C3287A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 1292
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: TrYD6Q/plHAB74jfPAJRJ5Qd4Ndh3IRjev3NNVripzU=)
2: iX7h5l3sV_d51o_IUpABQgz2jEE.roa (hash: 7mUD+DdFdg7I8P+Syen4M+Sxp4GaWG8BiuGQo7fDMq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5c:35:e6:4c:e9:f6:56:d3:0a:78:c3:28:7a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=ff753538b813bedd8935caebbf97de5a5b24d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:5b:a2:41:97:3a:f2:2f:b7:ea:3e:38:af:
ec:35:0d:ee:c7:85:14:b9:cf:d8:f7:5a:ec:bb:11:
92:04:92:7a:3b:0e:9d:f5:a1:70:16:b1:7a:79:bf:
65:e8:94:4a:57:c4:cd:2b:cd:1c:86:09:01:67:fe:
7e:eb:07:10:70:73:99:60:16:61:a7:5e:df:7a:31:
4a:81:a4:60:10:24:a1:2c:e9:91:84:58:d0:20:9f:
44:27:2e:d1:68:13:3d:52:3d:42:af:89:7a:2e:eb:
c9:93:4b:5c:6f:a5:fc:1b:98:ff:76:0a:ee:d3:f5:
18:9a:2b:75:47:5c:71:ac:84:24:70:09:5d:d6:e7:
9b:54:b5:fd:15:5e:8a:19:8b:43:ed:a6:f9:e9:d1:
7c:46:e3:ea:2f:a4:95:23:76:fc:83:c3:34:1e:af:
89:1e:55:d2:73:b5:ab:c5:df:99:72:2e:40:be:77:
45:2a:6d:01:90:95:36:c5:35:a3:d3:c8:14:da:b9:
05:74:eb:1d:9d:30:14:64:d8:f8:2d:78:0a:44:d0:
6b:04:7c:3f:2f:4d:e8:d6:04:3b:30:fe:18:fa:9e:
e8:b0:fd:44:54:bc:49:db:84:c0:1f:c4:98:b1:29:
6a:75:03:92:69:e5:2e:df:0a:b5:69:af:97:8f:ea:
f6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:35:38:B8:13:BE:DD:89:35:CA:EB:BF:97:DE:5A:5B:24:D2:71
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:f1:7f:e8:32:61:d5:62:9c:09:08:e5:35:f7:69:a7:74:
b3:ff:24:bc:6a:b3:ab:21:41:5b:71:42:e9:38:a4:3f:d3:2e:
fa:3a:20:e6:bf:0b:a2:8f:ef:d1:96:f0:0c:0d:3e:c5:ab:40:
f4:ce:78:4a:32:37:4e:40:f2:29:6f:46:94:61:51:43:1c:ad:
aa:77:3c:5a:6c:a1:8e:54:1e:3f:1f:31:5b:89:2b:36:c7:8d:
1f:d8:5d:3b:8b:8d:95:32:62:35:3b:0d:ef:bc:35:53:59:3f:
81:f8:2d:8c:34:8b:4f:57:05:71:bc:13:dd:1f:ee:0e:cf:6d:
53:af:ac:df:a3:53:c2:00:1e:67:dd:eb:eb:eb:ac:e6:e9:33:
aa:b2:dd:48:02:4a:42:08:a4:00:48:7e:2d:a0:a4:ef:26:9a:
ab:4a:1a:99:0e:09:ac:55:39:b4:5d:28:c1:4b:a5:d7:5b:45:
6b:b7:24:01:17:9f:4f:79:39:47:cc:7b:14:a7:ae:45:bd:93:
bf:af:c1:e1:1b:96:09:61:56:78:f4:83:4f:4c:95:2f:46:c3:
4f:3c:3f:25:0f:66:03:49:b9:92:a2:cc:11:09:bb:7c:b4:5c:
2a:89:10:0d:cd:82:7b:68:0d:5c:bd:fd:e1:3b:8b:dc:6b:cd:
eb:a3:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:49 2025 by rpki-client