Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: lR7bNLY2Uc2ga71dDet6hh7Kp1kALQ36MJTSjDrtUew=
Subject key identifier: D8:76:18:8F:17:74:01:1A:76:B4:A4:79:17:0B:74:3C:E1:6D:F5:92
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 0194BD4E64B832AABA015F5744900DE44E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 039B
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: eHn8BXXhhwmcXHRKkgsZRqkpyRHt2nDnIbezwa5mNLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:b8:32:aa:ba:01:5f:57:44:90:0d:e4:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=d876188f1774011a76b4a479170b743ce16df592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:3d:9a:40:c7:d9:c6:28:14:73:96:c3:34:
fa:3a:08:5b:cb:8c:1f:e0:1e:67:1e:97:0c:20:a8:
34:ae:7a:0f:7e:89:cd:98:8e:69:a7:0c:70:6c:9d:
0e:47:15:62:27:dd:c7:f2:d2:14:ac:27:03:da:e0:
99:4d:7b:38:cc:86:d2:a8:46:73:5b:68:aa:5d:4b:
1c:45:0f:07:97:82:8b:61:79:fe:53:6d:a4:32:8c:
13:2c:2f:2e:a0:4b:03:6a:60:25:cc:dc:d5:b7:fe:
63:7c:10:17:e3:5e:62:23:ef:10:3d:31:a5:ba:c5:
c8:95:3e:1d:a3:44:9c:03:0e:54:df:ca:20:02:6b:
9f:06:c4:97:61:23:73:e3:fb:ab:8b:29:ad:48:bf:
96:e9:f0:db:9e:d4:9e:fa:1a:d7:cb:76:03:5c:d2:
ea:ff:ff:42:7d:19:52:88:4f:20:65:72:47:88:ed:
e7:ca:cf:50:27:ae:4e:94:7a:f4:ba:ec:32:04:89:
15:6d:39:e3:e7:da:d3:b9:c6:a9:80:da:69:17:e2:
60:01:38:8d:a7:7a:00:dd:7a:28:a3:c8:d6:3f:b8:
87:dd:e1:9e:74:8e:42:be:77:7d:da:e2:46:fa:98:
30:e2:60:d6:61:39:e9:b4:5a:5e:f5:1a:ed:de:9c:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:18:8F:17:74:01:1A:76:B4:A4:79:17:0B:74:3C:E1:6D:F5:92
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1e:4c:cd:77:dd:73:cd:2d:5c:2c:92:90:06:57:a0:38:00:
f3:da:49:3f:d3:36:c4:04:72:c7:46:72:81:f9:6b:2e:8e:7a:
73:94:84:3b:d6:f0:aa:f5:51:81:d6:48:9a:f2:ef:6c:1f:f4:
f3:b3:87:2a:b5:e0:f6:88:cf:15:bd:4b:11:d2:f3:ec:40:7e:
90:4b:e2:2b:6a:3d:0a:41:4a:d4:6d:40:84:40:ca:28:c4:01:
23:2f:b8:c6:04:b4:4f:28:c0:97:6e:be:79:90:db:9e:1e:a4:
e7:11:2e:5d:d0:79:d5:5a:1e:cb:50:23:ca:ff:a7:f0:0f:c6:
00:9c:e5:0b:c3:b7:a3:63:35:76:d8:53:fa:c6:cb:9b:4d:af:
2f:5c:ae:52:ea:01:3f:17:e9:af:c2:b3:d0:33:e0:bc:ee:c5:
1a:79:d8:be:f2:2e:20:cc:8d:56:ef:94:18:b6:ba:ed:ea:d1:
7d:38:81:28:14:d6:f2:87:f1:16:78:43:35:23:f3:be:ce:fb:
33:82:3d:7e:eb:9c:90:10:d1:60:aa:fb:a4:5e:0f:73:bf:68:
a8:e4:ff:30:b1:55:af:87:0e:49:e5:a3:ec:77:88:58:29:49:
fe:67:c6:98:52:dd:44:6b:12:2b:17:c2:4f:63:7d:da:8d:14:
b3:2b:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:26 2025 by rpki-client