Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File: HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier: inkFSj2wBZTFWxWDnbfkkn+koWA7mtwbEd7En7drD4A=
Subject key identifier: 75:A4:1C:9A:4B:AB:C0:21:12:E7:D7:8A:6C:E1:14:0E:FA:CE:D0:C2
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer: /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial: 0194BBCEB044380AB5D7B2F09C0E127B13EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number: 0679
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: 6UNYC1DG6qDz0Z7MLLBjIf5h626OTotOHsAQ9nYFlSE=)
2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b0:44:38:0a:b5:d7:b2:f0:9c:0e:12:7b:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=75a41c9a4babc02112e7d78a6ce1140efaced0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:5e:24:ec:93:d6:02:ca:10:ca:0e:c5:f1:
c9:49:38:8b:ab:90:bb:b8:f7:95:94:58:f1:a6:f4:
16:22:0a:87:1d:c4:0b:47:a4:b5:e8:71:d0:e7:9d:
79:e7:46:d2:ef:ab:87:bb:61:e5:83:11:1d:e5:3b:
a5:2f:47:80:71:ee:17:61:f1:e5:57:0e:2e:e3:37:
c5:a6:cc:cf:3f:56:6c:73:5b:c9:96:3b:ba:eb:46:
35:69:89:60:f2:4f:83:9a:49:f5:fc:ad:f5:8c:b4:
61:bd:53:96:af:68:5e:10:65:b8:e0:66:27:d8:26:
7d:cd:b7:fe:97:c7:eb:96:bb:84:30:0b:9d:32:55:
77:c1:20:a2:f7:7b:7f:49:08:fe:14:af:df:6c:9b:
8c:54:7b:1f:ec:cb:7e:20:bd:2e:41:28:b6:be:de:
28:02:e2:97:68:75:f4:6c:1e:c4:cc:97:16:ab:4e:
df:4b:9a:43:3d:b2:05:ed:fc:0a:ea:a2:cb:2b:c5:
56:2c:67:a6:58:62:ca:9a:29:68:e5:ac:59:60:2a:
93:da:e9:68:3b:6e:0c:2f:0f:0f:22:44:89:4d:c8:
0d:b3:c5:d7:69:44:55:22:44:d7:81:bc:cb:2d:87:
ce:f7:fa:3c:42:12:dd:26:20:18:47:e7:98:85:25:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A4:1C:9A:4B:AB:C0:21:12:E7:D7:8A:6C:E1:14:0E:FA:CE:D0:C2
X509v3 Authority Key Identifier:
keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:53:6a:db:c7:5b:35:60:52:7b:da:ef:e1:ea:ab:ba:ec:
8e:de:b8:7d:93:cb:c7:be:d7:f5:c0:6d:76:7e:f7:e1:5b:23:
db:05:71:08:5b:2a:a6:c4:7f:4a:e2:c3:4e:0f:01:58:b0:fd:
74:b2:b9:33:3b:d7:9e:52:b2:5c:2a:9a:31:1d:b4:f3:9a:12:
f2:62:8f:a7:bb:8b:cf:53:88:3e:af:e0:41:73:ab:f8:92:52:
2e:7c:de:fc:6b:2f:53:a1:e2:56:90:95:79:ad:20:9a:bd:5c:
e6:a4:f5:92:14:ca:32:11:6e:e5:db:a8:4b:da:01:24:b9:29:
31:44:6e:06:5d:f4:c4:04:a0:ae:9c:47:7c:39:b9:4a:af:12:
51:cf:30:0c:7d:e0:c4:e3:ec:49:5c:c2:02:35:66:2a:23:bb:
b8:9a:64:16:cc:38:e6:b5:13:bd:fe:3a:88:18:e6:fa:5e:5c:
97:84:36:27:3b:28:67:b7:16:c2:e6:03:97:c7:04:6f:53:16:
2a:48:40:a4:db:2b:49:10:09:f0:f0:61:a8:a1:19:c3:3e:9b:
4c:dd:37:27:a0:46:70:81:99:73:f6:b9:df:4f:d4:ac:34:6e:
e7:14:2b:d2:4b:bf:a2:70:d1:25:61:fa:13:c9:32:a3:4d:97:
a1:fe:cb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:16 2025 by rpki-client