Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
File: HqVZ2L9qwtho0GZa1X0sasFHIZM.mft (raw, json)
Hash identifier: erl40AebcOprLCvjsXcnBkQeWpn9FtxxodQd0/vVXTo=
Subject key identifier: 0B:DE:86:C6:DC:16:70:14:0C:9E:90:20:F1:2D:DA:C8:A8:92:27:CD
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 0194BC72E57A518B1A8F3986AAE5EC7A918C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: AJvWKjlfflZ9cQofDD0ppbseZLQ.roa (hash: VGiicvrQITfBrX3SAtjyhR6B6SA41PSS6lItKnKTNYo=)
2: HqVZ2L9qwtho0GZa1X0sasFHIZM.crl (hash: v6Z0uqaS129ZksXdePsR49rcndgPvA8kRKgkHlVeAn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:7a:51:8b:1a:8f:39:86:aa:e5:ec:7a:91:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=0bde86c6dc1670140c9e9020f12ddac8a89227cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:39:d4:f2:e5:2c:fa:59:28:04:0b:38:f4:
d3:ed:a1:95:e6:33:f2:4f:1b:a7:b4:4e:31:61:22:
12:7a:3e:b2:ba:dd:9d:63:e9:29:38:b8:1f:30:e7:
73:d1:ce:02:f7:b8:3e:6d:71:76:96:b0:31:ce:1b:
27:88:80:86:17:51:6c:8a:e7:ff:31:5a:42:85:72:
c4:8c:0f:7a:2e:63:be:41:4d:24:a2:66:c6:71:40:
13:68:e3:4f:48:dc:a1:a7:e5:24:5f:67:72:a5:ca:
75:eb:b6:af:b3:e9:1f:15:e3:6e:88:ab:74:cc:c5:
41:e2:43:2e:c4:25:36:66:60:1d:25:66:04:46:2a:
e8:80:00:0b:1d:0e:01:93:28:cf:16:56:f6:2d:46:
63:f2:ba:8e:a7:05:99:17:e4:30:69:fe:70:91:9b:
d8:be:5a:fb:3c:8e:23:31:76:1d:83:1b:e3:68:32:
8d:09:74:5c:f6:c3:ed:9a:92:ed:f2:06:c1:63:70:
9b:c1:59:96:f5:84:31:26:06:19:c3:e3:51:6c:17:
72:22:31:ed:4d:6f:36:fa:e5:ca:90:f8:9e:72:8d:
1d:7c:fb:dc:53:16:be:51:84:74:5c:d4:f2:d2:5d:
48:34:45:2e:99:d4:7f:f2:a7:09:f3:eb:45:8e:73:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DE:86:C6:DC:16:70:14:0C:9E:90:20:F1:2D:DA:C8:A8:92:27:CD
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:45:16:23:5e:39:30:fe:4d:e7:45:ea:a5:15:46:5e:21:
36:5d:ce:11:eb:05:50:a5:e0:5c:6c:c5:b4:3f:ea:2b:af:79:
91:de:64:c4:6e:04:39:54:03:56:d3:57:14:10:f1:a1:a1:59:
67:7f:3b:1c:2d:e6:a5:6c:13:4e:de:32:e5:47:42:2a:b1:a9:
d6:16:50:43:c5:97:ce:1b:2d:78:32:b1:8e:f2:5a:24:4f:bb:
c3:73:e6:43:a7:c9:7f:da:86:af:83:82:cd:96:f9:e4:c5:cc:
d1:ae:76:1b:de:85:4a:b5:03:d3:af:3d:e6:74:91:5e:61:63:
af:b7:40:35:93:ab:ef:84:6f:68:3d:eb:bc:11:dc:56:4f:3e:
c0:60:ad:55:e1:d5:43:11:40:42:fd:fb:84:41:4d:1b:f5:39:
e9:ba:c0:dc:49:2e:ac:7c:b5:11:b7:02:98:35:9e:78:46:6a:
b8:a5:cc:4a:96:1e:76:41:37:8e:17:99:3e:36:85:e5:64:46:
af:fb:99:11:b0:7a:51:aa:83:00:10:a2:67:46:9d:8e:5c:b4:
1d:8d:03:67:a8:82:99:74:1f:58:b2:dd:5c:19:08:55:71:18:
0f:97:3b:7b:2c:a7:59:d2:9b:26:cc:bb:e5:02:94:a8:e1:f6:
21:41:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:36 2025 by rpki-client