Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: rebk0wC910Mr4R9mosGI5qXgrBBRh52OXxpdXTqFWaM=
Subject key identifier: E0:C1:C4:BB:BE:82:45:1F:00:99:D3:F7:35:04:42:D1:89:8A:40:42
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 0195E0EB443351B4668F7D8B0ED54D2326B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 013A
Signing time: Sat 29 Mar 2025 08:01:09 +0000
Manifest this update: Sat 29 Mar 2025 08:01:09 +0000
Manifest next update: Sun 30 Mar 2025 08:01:09 +0000
Files and hashes: 1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: Qg/9eAkqzG1Ejwlr3dFRUCQrdOqVuVCRgVU0PrbKK0c=)
2: XqGkNzWhGRzFFq_Ld0F1iKDun4o.roa (hash: sSmVA8YWQ3N6iHQCrnx4d6eQ8ZnwuumMJH4aLXBAS+Y=)
3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:44:33:51:b4:66:8f:7d:8b:0e:d5:4d:23:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Mar 29 08:01:09 2025 GMT
Not After : Mar 30 08:01:09 2025 GMT
Subject: CN=e0c1c4bbbe82451f0099d3f7350442d1898a4042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:f1:93:3e:82:f2:fe:53:74:21:32:42:1e:
a3:31:e3:a6:66:4e:97:29:da:35:bb:c8:15:e9:90:
2b:71:93:c7:2d:63:1e:52:66:94:c8:3a:db:93:1f:
d1:bf:b0:7e:7c:5c:c8:23:08:ec:a9:9c:7c:c0:02:
9f:ad:97:a0:75:2b:50:b4:8b:f1:83:f3:cb:67:ab:
a9:8c:65:2c:44:09:26:99:9c:d2:d7:d8:9b:f9:01:
0b:c5:70:22:1f:f1:96:11:74:79:69:9a:8d:61:68:
99:f2:d8:c4:d1:d0:bc:25:8d:8b:96:53:09:11:59:
85:8b:78:3f:85:29:dc:7f:bb:49:e4:94:bb:2c:9d:
4b:c2:04:be:bc:22:20:0e:05:f1:ea:b0:6f:08:6e:
5a:ae:df:cb:90:1c:d9:b8:36:67:b3:96:4c:e0:89:
dd:1a:92:31:aa:7f:7e:af:8e:5a:55:0d:03:49:2f:
f7:21:3c:90:e5:2c:62:f5:2d:9e:52:d8:b7:d9:1a:
e9:93:74:c9:f9:bb:d0:84:bb:eb:cb:ac:a7:39:2a:
ab:b5:08:0e:1f:61:d3:e6:eb:61:29:1d:cd:4f:dd:
82:b2:52:02:62:83:77:02:44:85:a3:30:f6:94:93:
8b:88:ef:5e:7f:b3:1e:69:ad:2c:c2:52:2a:9e:c9:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C1:C4:BB:BE:82:45:1F:00:99:D3:F7:35:04:42:D1:89:8A:40:42
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:3f:cc:0c:4b:4c:54:50:8e:6e:e3:23:a2:7c:e4:6f:44:
54:3e:91:e2:0b:be:fe:e3:44:5b:54:c8:12:ba:c9:74:0a:08:
c8:9b:de:68:5a:2b:25:6e:aa:a1:bd:2e:59:22:c5:6d:6d:0b:
b8:08:8a:50:7f:34:6a:52:9b:74:0f:d0:87:5f:99:71:88:ad:
1e:8f:ab:43:1b:39:7b:4f:e7:8f:50:20:35:40:9e:12:1a:b9:
3f:b8:ce:c3:b2:ed:53:bf:8e:1c:e3:e7:fd:d8:07:44:b0:92:
f2:ea:1d:57:4d:62:5a:89:94:e1:30:9b:69:48:9f:c2:b9:dd:
a9:69:66:5d:af:8f:57:b9:71:a8:26:2a:ca:bf:17:58:60:9b:
b2:13:64:17:c8:95:06:88:a9:f9:53:a1:b5:83:06:09:94:c2:
01:4e:01:c5:47:e1:97:89:ca:6d:46:8b:4a:5f:a0:59:92:5f:
30:05:ea:3c:ff:b3:28:37:87:f0:08:d3:b4:b5:c1:21:2d:5e:
ad:2b:de:23:ac:ef:18:34:d9:16:5c:97:a8:68:9e:56:7a:d3:
4c:48:bc:5e:b0:28:cb:fe:6e:94:2e:f3:33:e8:a6:90:06:ca:
fc:ab:74:59:ce:b6:91:ea:80:78:6d:7f:14:c1:20:43:4a:2c:
3b:23:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:56 2025 by rpki-client