Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: 2E9G6m0Df4sMONYy/0LYCPLVfYE1vjWLfx0UMpn1UE8=
Subject key identifier: A6:B8:65:BB:BC:A3:97:7D:DE:6B:7C:DD:46:45:15:0A:8A:B4:B1:A7
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 0194BCA974142FB6B1F64E4E6D1511B1D9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: wYIrBBFCkcpa9DRaOKnTV3Fn2mygRAhqVP2PLVWlUJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:74:14:2f:b6:b1:f6:4e:4e:6d:15:11:b1:d9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=a6b865bbbca3977dde6b7cdd4645150a8ab4b1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:65:67:0c:c1:56:6e:ec:c4:4e:f7:fd:c9:
00:ff:dc:b9:c4:ca:51:3e:86:70:89:31:72:ad:61:
28:f1:c7:78:34:03:52:b9:11:ea:55:3c:a7:63:24:
7f:b5:ed:c0:07:97:a2:91:31:32:b2:c1:95:8d:f9:
27:12:12:87:27:41:ee:54:c9:26:54:9e:6a:7e:0e:
0d:df:c6:81:f7:e3:c8:83:b5:d6:06:f3:dd:75:30:
69:93:35:ab:a1:73:1e:ea:10:78:14:f1:c2:b2:34:
b3:43:e3:e0:f5:3d:67:4b:9b:a4:62:7a:9a:cb:4a:
a0:71:50:d6:c6:70:60:8e:9f:1c:bc:af:ef:e4:21:
e8:e3:3a:b3:1a:3f:df:92:ce:55:a9:b6:a6:99:3d:
65:4f:c2:2c:88:7b:97:bd:73:60:d8:a1:d1:d0:8e:
b7:a3:61:ae:0e:cf:2a:28:cd:ea:49:3d:b3:d6:1f:
51:6e:01:96:e6:42:45:ec:f4:a9:d6:50:11:c3:9e:
07:15:35:ef:fe:f7:ce:06:05:07:81:f9:f0:6e:79:
d2:0f:7f:37:9c:57:ff:9c:75:d0:ca:4f:a0:53:a1:
8d:0b:6c:14:ee:04:19:f6:c5:24:d2:38:f5:a9:f4:
72:ac:92:cd:28:85:be:42:24:32:d0:97:7b:97:d8:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:65:BB:BC:A3:97:7D:DE:6B:7C:DD:46:45:15:0A:8A:B4:B1:A7
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4d:5a:2f:26:42:48:5e:ef:10:3b:48:ff:b2:50:ce:63:9b:
d6:2e:8d:0c:e8:87:0f:d4:bb:1a:c6:de:a1:77:c0:8b:ae:10:
0d:89:7e:e7:0b:7b:04:ac:eb:ec:59:6d:a3:f7:e1:56:f1:c6:
60:7f:30:72:ed:48:8b:82:e7:3a:16:b2:d0:f7:89:35:5c:7f:
03:f1:e9:3d:45:0d:cb:6f:a9:3f:99:34:b8:7c:cc:fe:19:33:
a4:30:5f:01:00:22:18:1e:8a:2d:68:99:9a:38:13:52:79:40:
6d:73:66:99:9a:7e:c2:36:f7:5f:c8:63:4c:c7:4e:30:e1:0a:
57:41:a8:2d:02:ae:87:2c:5e:a2:69:ba:24:04:9a:da:0e:56:
2c:e0:a9:01:22:62:77:8a:b3:06:0d:ba:bf:1a:ce:9d:c2:e0:
fd:52:cb:ad:25:a0:b1:fa:dd:65:d1:96:de:84:b7:70:52:07:
73:76:d0:a5:5d:fe:fc:ad:3b:9d:cd:b7:54:d1:41:2a:2f:78:
35:e1:2a:49:c8:fd:63:f9:b3:33:2e:39:23:05:97:49:74:70:
56:4a:d9:ca:3b:e0:88:86:23:b1:a7:4d:f0:d0:20:d5:14:39:
94:90:dc:57:6e:39:65:09:ec:39:45:a9:90:20:05:ef:52:55:
05:61:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:18 2025 by rpki-client