Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: zZB4h502nI3S14ZMxORwGWHresUX/azr7HHJqWMRRnI=
Subject key identifier: 7F:3B:0C:A1:C8:4C:25:23:B4:D3:71:32:00:FB:57:70:A3:B4:8E:F5
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0194BC7297FE05E5A4D76D6357C01A1AE054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0BED
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: iIn14TP5of3EqeorlHRpcKYyPp1Ub9uEMbU0XjMyYM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:fe:05:e5:a4:d7:6d:63:57:c0:1a:1a:e0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=7f3b0ca1c84c2523b4d3713200fb5770a3b48ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:ab:43:00:13:d1:b5:82:63:03:5f:27:7d:
0d:91:91:38:07:ce:89:40:d7:7b:5e:3d:31:3f:c9:
72:09:b0:a5:d6:83:01:20:96:66:8e:be:90:2e:a3:
be:09:fa:18:1d:39:2d:83:a2:0b:ef:60:db:59:96:
43:a8:32:fb:ea:14:2e:0a:fe:c6:5e:0e:55:f5:d3:
a5:2d:7f:8b:30:e8:7e:2c:98:ec:67:bb:2e:7c:f9:
88:27:9b:25:b8:df:69:6c:34:a6:5b:13:da:03:04:
dc:91:33:8c:2e:dc:3a:11:50:34:06:80:db:27:dd:
84:12:92:60:5a:50:ec:96:37:6b:7b:53:f6:05:e4:
f2:16:25:f3:85:d1:58:8f:af:1c:85:3c:2e:20:df:
b9:05:20:b3:56:bc:bc:ed:2f:7c:e6:c8:97:47:35:
bf:b4:ca:ef:13:b7:8c:8f:35:d8:8d:f5:bd:cf:42:
9c:00:14:c8:0e:bf:b7:9c:d7:62:58:a3:9f:be:36:
62:a0:d5:b2:65:0d:fa:63:1b:ca:f1:7e:6a:f9:d6:
f6:48:63:51:8a:b8:2c:58:43:f2:41:c0:2f:e6:9b:
b5:23:3c:67:ad:d8:9b:d2:2e:05:fb:98:a3:a4:7b:
f2:16:e9:31:e9:50:2b:a5:c9:2e:a5:85:8b:7e:a7:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:0C:A1:C8:4C:25:23:B4:D3:71:32:00:FB:57:70:A3:B4:8E:F5
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:61:eb:40:47:42:f6:80:4a:e2:f1:9b:ea:1f:36:d6:6c:71:
c0:ef:46:f7:8a:3a:9c:a7:65:d9:0a:6e:e6:d2:d1:5f:d8:bd:
d6:47:8b:51:b6:35:1d:20:74:65:37:e8:9c:e4:d7:df:4e:0b:
4f:12:c9:1d:4a:e0:ad:1b:85:8e:c9:69:b9:27:ab:97:02:af:
75:1f:33:2b:8e:cc:c7:8d:33:f8:cc:ba:70:23:57:8c:50:8a:
a9:e0:d4:2b:eb:f4:52:a3:44:c6:cb:0b:1f:ca:c0:de:80:d9:
1c:a8:67:45:05:f5:1d:8a:40:ca:2f:04:9c:c6:04:79:9d:33:
05:a0:fd:9c:fb:12:4c:a3:0a:9b:12:03:eb:a7:25:f9:c8:35:
9d:6c:59:94:4a:ab:67:a3:ff:b8:95:4d:d9:b5:64:17:ff:5d:
5d:cf:16:f7:4e:5a:bb:c9:1e:ac:0f:3f:2b:b6:19:6e:67:dc:
62:93:30:93:d6:8d:78:6f:a8:fd:03:71:64:d0:86:66:6c:3f:
76:59:f1:66:9b:29:40:03:1b:f6:cf:68:3c:47:50:ab:f7:e4:
0e:68:0b:3c:19:14:4a:8f:cc:a0:95:88:45:7e:49:39:e5:09:
aa:57:19:f0:9c:fb:32:08:fe:0f:3d:17:42:cc:69:dd:18:80:
d2:96:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client