Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
File: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft (raw, json)
Hash identifier: bmaLBwWuLMm6v+nvs1L0xRzaDwO+Tc/SkBQCFYKOExk=
Subject key identifier: CA:1C:E3:57:58:B0:BA:04:2D:14:36:5B:25:01:52:64:66:09:F4:3F
Authority key identifier: 1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
Certificate issuer: /CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Certificate serial: 0194BCAA15017544E33AA5518690ED0A5D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 1-nOh_fcrGs71syqQUCrDnx6Dh5Q.roa (hash: MC3QMP1DMmNJPDq0RMEC/Cc+mBXhBq/i9gsriN4YbrY=)
2: HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl (hash: gyZ2dc2rJR/Duddl2dOwlPrgWEOwbbrfbMieVbYV7OA=)
3: c8vg0HClEXhcPioY22wCvZFQSNc.roa (hash: qmf3BkaUvFn3iXx2ay1H/G3dq4845AkTBF3dK41I618=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:01:75:44:e3:3a:a5:51:86:90:ed:0a:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbbfa49877bc5d9e4cf446950fd14279929f49a
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=ca1ce35758b0ba042d14365b250152646609f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:26:26:f4:31:a1:38:ca:1a:b3:ba:25:17:
15:80:8e:48:c5:0e:9b:05:72:be:6d:98:df:6b:d0:
f3:88:f7:b3:9a:ea:49:6a:48:3a:be:ef:54:e5:37:
4e:41:92:b3:24:42:cf:e3:84:08:97:9a:9b:4a:40:
e2:04:46:63:c3:54:34:c4:ca:4f:f0:56:57:88:13:
1c:9a:59:5d:e0:49:ce:d3:c8:50:60:aa:a1:b5:ed:
50:f2:93:67:b5:3e:19:c8:8d:59:26:cd:5d:0e:91:
25:81:0f:69:f2:d5:7d:60:3d:aa:86:f7:62:67:75:
6f:df:a5:fb:d0:a8:41:d4:1b:e0:98:3f:e9:aa:0a:
30:26:0b:0f:ca:23:65:7b:27:4b:23:b0:83:6a:d8:
e3:fb:d8:f4:fd:74:ce:bf:a7:76:c5:8e:67:b8:f1:
22:89:fa:53:49:54:77:70:29:f9:a1:d6:96:9d:86:
1c:50:e5:1a:45:33:7f:b3:62:ea:34:9f:cd:a0:31:
77:7f:86:ce:26:52:98:44:0f:dc:79:8a:95:e5:5c:
b1:a7:ff:29:45:cf:ea:eb:24:17:ac:f9:50:61:7e:
32:c7:69:fe:cd:2a:69:e5:42:05:88:5d:37:9b:f6:
c9:49:ff:37:76:a9:5e:87:0f:02:3d:6f:de:e3:4f:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:E3:57:58:B0:BA:04:2D:14:36:5B:25:01:52:64:66:09:F4:3F
X509v3 Authority Key Identifier:
keyid:1C:BB:FA:49:87:7B:C5:D9:E4:CF:44:69:50:FD:14:27:99:29:F4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/851cac-e1d8-4571-82a6-46bf762618e7/1/HLv6SYd7xdnkz0RpUP0UJ5kp9Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:22:72:5b:24:a8:d0:d2:70:cc:86:63:55:c6:03:aa:17:c5:
2e:98:26:91:ae:5b:87:97:e7:6c:ac:2f:e3:bc:3f:b0:d2:5b:
69:48:20:77:8c:ae:cf:0c:b8:04:ac:aa:1a:5b:2a:23:ed:0f:
92:b1:91:0b:54:ad:4f:76:65:75:16:72:4d:b4:d4:08:58:bd:
76:5d:ce:40:15:49:50:7f:8a:ec:2b:77:d9:f6:b2:9e:bb:27:
f1:23:89:44:5b:59:66:bf:51:e5:7f:9c:c0:05:7e:7b:c1:d9:
22:12:9e:06:5c:09:e1:c2:92:9e:38:92:95:20:5e:ab:c4:02:
81:fa:3a:13:07:89:78:0d:9d:fd:14:be:b2:52:03:04:57:f5:
7d:b4:dd:e9:f6:25:9c:93:13:8a:7a:8e:79:67:fe:da:28:82:
df:d6:f1:ef:68:05:2f:b1:f8:14:59:7e:9c:d9:11:80:16:bd:
c2:c1:55:90:ce:d4:25:f4:17:b0:f9:26:fe:68:04:4f:93:41:
04:f2:a3:5a:18:bf:f3:a6:50:64:99:3c:02:b8:b3:e5:70:20:
b4:ae:ce:91:c5:d9:26:96:8c:95:46:40:5c:88:80:14:4d:64:
9e:a5:cb:6e:3a:df:c8:80:ce:25:58:64:af:ee:4e:28:e7:4b:
48:82:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:44 2025 by rpki-client