Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: bZT6IbUjMboHB6Iz8lXKi8dqAa4wQDrW57vmk50XNgQ=
Subject key identifier: DE:8D:AC:68:7D:F3:55:05:C0:BD:A1:A2:7B:F1:FE:FF:CB:1D:D5:21
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0195E07D46017F4E8E18A9A9A66932B85BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 1456
Signing time: Sat 29 Mar 2025 06:01:00 +0000
Manifest this update: Sat 29 Mar 2025 06:01:00 +0000
Manifest next update: Sun 30 Mar 2025 06:01:00 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: C9hQ12MGZq6V209dFQ/GQuW99Yzz7GXKlqAWGzMqZHQ=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:46:01:7f:4e:8e:18:a9:a9:a6:69:32:b8:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Mar 29 06:01:00 2025 GMT
Not After : Mar 30 06:01:00 2025 GMT
Subject: CN=de8dac687df35505c0bda1a27bf1feffcb1dd521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:84:9b:69:4b:8a:01:50:06:1a:4e:ff:19:
64:99:5d:d5:ff:b9:e3:f1:34:13:b4:44:3f:e8:44:
cb:0c:21:5a:51:20:48:70:14:15:20:93:a4:6a:6f:
39:f4:84:a7:45:f0:8b:fc:2a:cf:7e:7d:e8:0a:a4:
5a:5c:2d:45:96:d4:0b:eb:08:88:f0:8d:8a:15:21:
ee:19:d7:0d:46:6f:e2:a6:a1:de:9c:8a:d3:42:6d:
00:21:fd:39:eb:83:16:5f:ee:76:c0:f5:c2:64:71:
3d:f7:3c:9e:6b:75:ad:9f:7a:b0:05:34:9e:ae:80:
b7:11:c2:e0:cc:94:f3:c7:3e:cb:43:ac:33:68:cf:
36:3e:05:73:6d:9f:1c:49:da:d1:07:aa:51:7f:db:
22:a4:2d:31:5d:10:2b:12:80:00:92:50:b9:a9:1c:
cc:4d:90:50:8a:0e:78:3b:d3:4b:3b:11:a7:de:3b:
5b:eb:5d:ec:41:cd:08:19:76:21:ee:2d:22:fb:2c:
cd:a6:73:3c:e9:b3:8c:c8:64:7f:3c:fe:b3:7a:aa:
81:ac:81:8a:f8:15:7f:55:d4:27:24:7f:cb:f1:be:
85:10:72:9e:65:cc:b0:e6:10:51:45:b8:11:39:1a:
68:bd:c6:ab:1b:54:33:97:1e:6c:f5:55:c3:d9:7e:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:AC:68:7D:F3:55:05:C0:BD:A1:A2:7B:F1:FE:FF:CB:1D:D5:21
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:59:73:68:99:a9:0e:6d:52:36:dd:f9:44:a2:5e:e7:3e:
86:3f:06:c4:f4:f0:52:c0:9e:6c:e7:6f:0b:27:d2:0f:c9:4e:
43:ba:ec:06:1e:de:aa:2b:aa:b5:77:a7:67:7f:c5:1d:82:d1:
84:85:41:73:b9:58:b7:fa:61:7e:60:f5:7a:84:a9:85:fe:7c:
0d:70:ed:38:be:3d:99:7e:cb:aa:8d:02:2d:e4:53:a1:4c:61:
e8:8c:62:47:f1:ad:be:6f:5c:52:8a:2c:04:57:aa:98:b8:5a:
06:e8:9c:ea:d3:85:d7:96:2d:f4:7c:08:0f:4b:09:e0:d3:db:
ee:36:0c:06:ff:a8:04:f3:7b:53:e9:38:f4:aa:18:04:c9:45:
18:7a:63:9a:f0:ec:5f:24:6f:56:aa:54:fc:84:a8:4c:da:7a:
a1:e4:b4:a0:08:8f:5e:e2:71:ab:34:b3:8a:4b:82:96:4e:b7:
43:58:a6:48:d6:6c:6d:2c:cf:99:0b:05:47:f9:b2:86:9c:18:
fb:21:65:14:3a:3c:7c:dd:5f:f5:85:08:28:e0:f3:fb:67:f4:
d3:5a:15:b7:dc:ae:4f:54:5a:5f:d8:eb:28:bd:eb:c2:d8:86:
e5:7a:27:d5:0b:8f:06:d5:fe:7a:f3:9e:7f:1a:ba:de:0f:86:
a3:1d:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:43 2025 by rpki-client