Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: 7XnaKne01CXFiWuXT4JDzJQniLvtaPExkGuh9C/QkgA=
Subject key identifier: 30:FC:F5:D3:07:97:47:48:D1:01:11:7C:6F:49:42:96:B8:99:3E:A9
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 0194BC04DB5600227123348CE86198B56E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 1151
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: Iu8q+YG3w3XVaxu+4zuEguXqMYRF9E7OaL0qMz9n6aI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:56:00:22:71:23:34:8c:e8:61:98:b5:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=30fcf5d307974748d101117c6f494296b8993ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:93:fe:7b:2a:e0:8b:38:2f:3d:e9:f4:96:
91:21:b4:ea:46:f8:ef:56:7e:06:c5:5e:50:91:d1:
0c:87:25:6d:6f:41:3f:c5:39:e3:3f:f0:4b:6f:0d:
2f:d4:d4:2d:9d:42:c4:31:4b:c7:ea:57:f4:11:bc:
3f:21:14:d3:e9:bf:f4:fc:c5:d3:be:ec:ac:1a:d3:
57:0d:66:cd:69:d7:ef:26:49:b2:65:a9:47:27:ec:
70:bf:89:77:a1:97:01:ce:43:bc:cf:9e:3e:11:8a:
4f:e5:db:c5:a7:61:e7:e7:a4:c9:25:f9:ad:08:b4:
ab:35:64:5b:b5:b7:c1:92:9d:03:b1:c0:cd:68:9c:
da:09:a5:c2:ac:b9:a6:b5:cf:7b:03:b0:37:06:f0:
a5:1f:a0:82:9a:75:78:d5:c4:40:5f:1b:45:de:9c:
74:47:5a:7e:2b:d9:ed:c5:a6:b3:fd:0e:c5:cb:fb:
18:47:7d:35:0e:89:a0:2a:15:85:0e:11:f7:b7:9b:
42:6a:28:e6:9c:bb:26:bc:bb:06:89:42:5e:d4:8e:
14:ca:c6:b7:a3:13:20:66:f1:9c:c7:44:95:98:81:
08:7e:58:9a:3e:7e:6c:2b:44:84:64:55:26:b0:75:
69:a1:e3:a2:a8:40:da:3c:fa:0e:fc:56:bb:3e:bc:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:F5:D3:07:97:47:48:D1:01:11:7C:6F:49:42:96:B8:99:3E:A9
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:eb:ad:ad:dd:9a:ce:ac:20:7e:12:ce:43:6f:7e:f5:a5:
12:8e:66:e9:bf:86:20:42:c0:2a:ec:1b:cf:d9:43:81:3e:e5:
83:f5:a3:4b:f2:a3:1d:fd:41:49:c1:fc:3f:32:37:e8:28:89:
f4:54:0b:43:65:ee:6f:b8:4a:32:1b:68:88:6b:fe:7b:8b:b4:
f9:f7:04:1b:f2:65:7c:ca:37:ff:43:fe:dd:bd:49:63:3e:cc:
6d:a7:ae:7d:c9:9b:78:9b:a7:46:98:28:ed:2a:c1:eb:b6:87:
ca:ce:6c:37:3d:96:9f:62:9b:8e:df:ed:09:09:ed:a1:60:13:
8c:c7:f6:5e:57:08:fa:90:21:45:d8:5a:7b:ba:9c:62:97:aa:
68:75:0b:af:43:53:83:04:83:ef:d2:5a:9d:07:cf:0f:24:ad:
5e:fe:02:92:9e:42:e4:25:2d:c0:82:c8:eb:34:3c:e4:63:dd:
26:f1:45:a6:87:9b:cb:cd:31:fe:30:f1:b4:15:7d:81:49:0a:
cf:9a:71:c0:43:8a:a9:a4:db:02:8f:de:ba:66:e1:12:91:e2:
df:c9:ec:a3:36:38:de:7d:be:36:66:51:41:b5:94:a0:2c:28:
7c:4e:1f:a5:ec:51:5b:39:14:c9:2b:35:64:08:5e:b5:2b:e8:
c6:8b:20:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:17 2025 by rpki-client