Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
File: HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft (raw, json)
Hash identifier: HRPkuU0thhyP8CavRPDoQBsh3OgDcvFdAK7RMi849L0=
Subject key identifier: D8:51:8B:20:AE:1F:B5:B4:5E:1B:07:27:9E:03:DC:FB:69:13:61:44
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 0194BD8574027CADE17DF29ADB7B1320738F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: 3xLZeEIptPvK0tTXJW89UAdaarE.roa (hash: Tc+izVjQYC0MNH3Q9cc3IIUmepusC2XNOTdtPs/jIz4=)
2: HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl (hash: T1K0Jf9tO7H6SspEkfhFnu5QDiWSPhuCuAR0Yjj98Co=)
3: pdSwS3q_Aq9iIM8JVjDKkb9Kesw.roa (hash: Ci1NRJKdqWSbaDsRVp57BbXUB2naGLYnO5kSwluYKxo=)
4: ztoXV0czkggEzKpWeBIPpNx7Y00.roa (hash: MW72dY631rN8xBMa8x273b/yH8cBTnl1fp+7hzq29aE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:02:7c:ad:e1:7d:f2:9a:db:7b:13:20:73:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=d8518b20ae1fb5b45e1b07279e03dcfb69136144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:26:ee:f6:00:9c:35:c5:43:ef:dd:b4:c7:
bb:58:0e:bf:07:cd:4c:70:75:69:66:17:1b:fa:e1:
91:b6:1b:3b:33:99:61:95:1e:c2:a4:58:73:2b:ce:
a2:b5:39:57:3d:f2:b8:cb:ce:f7:05:47:12:fa:af:
b7:0c:73:36:58:7f:f9:19:a0:75:c8:27:9a:46:e2:
3b:dc:72:cc:f9:f8:22:29:23:91:4f:7b:29:4b:36:
11:8a:5e:9f:13:e6:f6:ab:4c:f1:84:9d:b5:b1:ab:
1e:4c:4e:a1:6e:2c:2f:62:93:8e:42:1a:2b:0b:bc:
5a:ed:51:73:da:59:96:8b:20:68:00:78:7a:f7:91:
09:4f:cc:1e:27:b9:43:c8:9d:ba:df:ab:11:ec:71:
6c:56:10:f4:31:ca:fb:13:e9:58:74:9d:66:31:38:
1c:c1:57:71:63:84:56:00:60:37:43:c0:33:c8:be:
f2:26:32:da:9d:ba:dd:71:fc:da:eb:65:d7:74:ed:
32:68:8d:77:84:58:fe:f4:2e:b4:d3:82:b8:41:8f:
d1:25:ca:74:9e:f8:ce:42:dc:81:7a:4d:f0:6a:30:
ff:bd:5b:6f:89:6d:27:81:f9:b7:d1:76:49:50:c4:
92:8e:e8:02:e0:e0:67:96:23:3a:6f:78:67:3b:eb:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:8B:20:AE:1F:B5:B4:5E:1B:07:27:9E:03:DC:FB:69:13:61:44
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:d6:7d:94:13:38:03:b9:e6:df:d9:c2:6f:be:9f:4e:b4:
2e:b8:93:f2:dc:3a:f3:25:b5:38:66:64:f0:78:2f:2c:6f:45:
e0:f5:d1:c1:31:dc:88:3c:27:9a:10:86:9f:8e:31:60:6d:34:
56:aa:76:65:bb:f5:5b:96:21:fb:ed:04:cf:be:ca:08:7e:f1:
c1:d8:35:d7:14:c0:22:68:ab:2c:f7:c5:30:f4:23:59:77:cc:
f8:02:aa:90:de:96:6a:38:1c:db:e3:80:b0:9f:52:cb:14:2b:
4d:b9:33:95:c7:8a:9d:89:8f:bf:89:e9:f4:c1:ad:f5:49:52:
23:ba:b8:75:85:30:57:4e:76:f3:83:1c:cf:96:04:db:dc:c3:
08:f8:ce:02:26:ea:1f:61:39:7d:e1:24:ac:6d:4a:67:b0:af:
13:00:d3:2a:0a:d2:48:ce:16:30:02:cf:de:32:65:e6:60:bd:
f9:91:2f:5e:b3:b4:4d:32:7e:b3:a7:f5:5d:d8:d0:a5:ed:7b:
36:a8:4d:3b:54:c1:ac:ed:2f:1b:21:4b:65:f0:50:5d:a3:5f:
b5:64:70:0c:94:8e:9a:03:ff:2d:7f:8c:39:2d:92:48:5d:8c:
8b:f4:9e:59:d1:ae:d2:0d:59:84:06:f7:18:d0:32:de:8b:b8:
23:fc:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:33 2025 by rpki-client