Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: 72tsJkd0NMNeC5O4K7S/LJ1DhgV5wjYiYBrEwg1JVIo=
Subject key identifier: 82:FB:07:09:46:73:5A:01:D5:C7:30:2B:57:4E:E8:30:73:B4:BE:B4
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 0194BC3C67243CCD01A63D6C188E6A985D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 0548
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=)
2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: kpiUdbtLx6VWuuA/WPtxcYNdF7FOirMLZ2hBD3DpDG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:24:3c:cd:01:a6:3d:6c:18:8e:6a:98:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=82fb070946735a01d5c7302b574ee83073b4beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:98:57:0d:a0:d5:ea:16:b7:e1:2b:3c:ce:
14:1e:b3:c0:b9:6f:f8:9f:6f:62:a2:ac:18:cf:c3:
7c:62:d2:76:d0:84:61:b5:22:05:57:34:78:78:9f:
23:4f:39:08:9a:85:c5:9d:fb:29:64:6c:2f:a4:6f:
63:3d:f7:bf:a3:13:74:b3:de:39:e6:30:e2:cd:b5:
2f:bc:8c:7a:e7:ca:5c:7a:b8:22:8f:dc:d3:86:ad:
47:ce:24:a7:13:0f:e4:58:2d:6c:e9:54:11:83:3a:
1a:a8:f8:25:00:db:96:4c:3c:9a:ae:7f:d1:8b:ee:
3d:7f:ce:d6:91:1c:bc:32:9a:13:a8:cd:e5:d2:81:
27:2f:18:88:71:21:5a:6e:30:b5:f7:a6:b4:c4:e8:
04:eb:65:37:bf:be:d9:df:24:1c:6f:ab:ad:5c:83:
d9:66:0a:40:d1:6c:7d:17:ad:97:7d:24:3a:a5:07:
78:ab:2c:c5:e5:1f:ac:ee:b9:85:74:70:7e:f3:cc:
48:db:dd:13:39:2c:52:af:7f:ca:a4:ba:8e:f8:0a:
09:9c:c3:42:af:63:58:f0:d4:2e:6d:db:aa:33:bd:
32:9e:1c:c5:5b:ca:b7:53:b5:72:f6:ef:dd:0d:1f:
65:99:81:7e:70:b2:c3:81:4a:6e:46:92:b8:9e:df:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FB:07:09:46:73:5A:01:D5:C7:30:2B:57:4E:E8:30:73:B4:BE:B4
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:ec:97:2c:d5:d3:59:d2:5e:a5:9c:12:cb:1c:89:f3:8b:
a8:4f:05:5f:fc:a4:e3:ae:58:8a:33:f5:28:19:ea:f7:12:a3:
cc:5e:f6:67:fc:8e:0c:64:4b:08:fc:a0:09:f0:e8:6b:cf:3d:
4f:12:35:dd:13:49:f4:05:c9:e2:16:5c:d4:6b:1d:ac:1f:3e:
12:56:44:01:35:f3:2c:79:11:e2:f7:d0:2b:ec:71:88:c1:5b:
71:04:c4:6d:36:20:19:a7:64:09:0d:91:5c:c6:0d:d5:7e:7b:
27:de:c1:5a:15:64:d0:79:d0:dc:2b:da:53:d2:56:6b:5e:7b:
16:37:e1:12:f3:8f:7d:67:6e:99:36:d5:1d:6e:15:65:b7:c1:
f9:12:45:09:c8:19:42:2b:a4:21:a2:cb:04:aa:a7:03:7e:33:
5b:3b:5b:da:f7:96:63:27:16:fa:be:42:43:71:db:7c:a6:be:
50:97:e4:8f:80:c3:83:c0:18:e7:60:2d:52:47:97:76:61:96:
1d:0f:ea:3a:15:3e:4d:36:85:9e:05:69:5b:49:b4:a7:e8:b1:
93:3a:2f:b5:74:71:d5:f4:09:7b:d3:fe:e5:0f:d9:b6:ce:79:
33:4a:99:5d:3f:68:85:ff:41:20:b6:fa:87:2b:05:b5:fe:f6:
c3:e8:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:49 2025 by rpki-client