Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
File: HHixg23sq0_1vfpeN3o9-H8Y_A8.mft (raw, json)
Hash identifier: I4GWfVLjP1gqJANjqoYzzsj4g57k4vV7x8UB10+AgJY=
Subject key identifier: 9F:B2:30:E7:F1:C4:C2:51:19:BF:4F:D6:33:29:55:63:BB:34:1A:B2
Authority key identifier: 1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
Certificate issuer: /CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Certificate serial: 0194BCA9DF2E05ADD8D020789B7BB6B25377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
Manifest number: 0C40
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: HHixg23sq0_1vfpeN3o9-H8Y_A8.crl (hash: wCNk3nZ+/ibdg4ZmBL/1zRtw8hPrFSqalpzkf3FKThQ=)
2: UGBpl3oHNIS2Cd9_Sczzu0VBiiE.roa (hash: wSoOj4MFImWuZ5Z3plItyJ7lOAnvxzo7omn+Vgq6Vio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:df:2e:05:ad:d8:d0:20:78:9b:7b:b6:b2:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c78b1836decab4ff5bdfa5e377a3df87f18fc0f
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=9fb230e7f1c4c25119bf4fd633295563bb341ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:b6:eb:dc:aa:b3:5c:dd:37:1f:ec:37:85:
65:27:35:fc:ab:40:24:96:7e:86:c7:3b:c7:6c:5e:
c6:0e:a2:e5:3f:60:30:34:20:fa:10:ad:89:16:c8:
eb:ef:ac:cc:6e:61:89:ae:c6:d0:3f:e2:23:9c:b2:
00:5f:a0:fb:c8:88:8f:8c:bd:28:51:9e:ea:57:ab:
f7:9d:3a:74:9a:0f:bb:28:39:25:af:cb:65:17:ba:
3f:fd:7c:f6:ba:6d:ff:7c:35:f5:70:61:06:10:a9:
fb:5d:7b:c4:1e:f7:a6:48:22:2b:1b:f8:46:1a:0c:
51:f9:1d:4d:21:1c:c0:45:56:28:32:c5:10:89:6f:
c3:cc:96:76:ac:33:74:c5:86:ea:5a:11:9a:35:5a:
b3:4b:b5:2d:62:52:d6:86:c7:5f:73:b4:78:92:46:
78:2a:48:af:17:9c:3c:a2:c1:7b:32:63:a3:78:43:
ff:e9:10:01:ee:56:b3:e1:35:cd:06:0b:14:78:62:
e9:96:7f:43:82:95:1d:73:d2:5a:f1:02:02:d3:9d:
42:92:5f:58:26:4d:68:d2:ae:1b:73:b2:7c:60:ab:
b5:0b:83:72:f0:a8:62:3a:8a:2d:e2:37:61:67:37:
1b:d4:c9:de:fd:36:59:3e:bc:eb:0f:f4:a0:9b:f6:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B2:30:E7:F1:C4:C2:51:19:BF:4F:D6:33:29:55:63:BB:34:1A:B2
X509v3 Authority Key Identifier:
keyid:1C:78:B1:83:6D:EC:AB:4F:F5:BD:FA:5E:37:7A:3D:F8:7F:18:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHixg23sq0_1vfpeN3o9-H8Y_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c6152d-1c90-40cc-a206-ec3cb36d1026/1/HHixg23sq0_1vfpeN3o9-H8Y_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:4b:82:37:6b:53:19:6e:cf:d5:e1:71:7e:0b:1d:94:12:
4c:41:1d:89:aa:b7:3c:9c:15:02:e9:2f:30:a4:a9:f1:d9:1e:
20:b1:c4:2e:88:37:d4:51:bd:eb:ab:2d:a8:82:21:68:a0:0b:
71:40:c2:ff:6e:f4:6c:68:a0:4e:91:c2:ad:08:d6:e5:e1:09:
22:f5:55:e2:9a:d9:1a:d6:e9:fb:3e:ed:ca:53:9e:c6:a6:d6:
46:e5:67:6f:4d:d6:96:c6:62:db:a3:ee:4e:4d:34:fd:11:46:
56:b9:e0:84:ef:bd:b8:fd:f3:b1:66:fa:f8:39:21:5d:26:13:
92:ad:fd:3e:74:e6:77:68:c4:f4:26:40:40:02:2f:b5:8c:4b:
5f:aa:73:e0:b8:6c:a7:a8:d8:a8:07:6c:7e:bb:40:b6:3d:52:
53:3d:ef:9d:3f:ae:6c:25:6d:b0:61:94:47:1c:58:2c:77:fd:
87:47:36:56:6d:2e:b5:22:83:7e:12:d4:12:c5:1f:6f:f1:68:
14:6d:fb:88:66:34:a9:5b:02:e5:2e:18:43:51:55:25:7c:c5:
d2:3e:46:22:e7:e8:dc:65:af:d7:ec:81:78:16:7c:ce:33:25:
6c:79:6e:8f:27:1b:e1:e0:eb:ac:e0:ea:3d:0a:c4:1c:a8:ef:
e0:c9:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:00 2025 by rpki-client