Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier: nXXaC7vM5R1ShhzoZzwDpzcJkRhPfor/xYM9DTTfUwM=
Subject key identifier: 4A:AB:BE:99:D6:BF:AC:11:19:7D:6E:E2:69:64:39:7B:2E:2A:AA:5E
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 0194BCA9E6CC6A8CE076D06C929D58AAAF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
2: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: Ce/k/cm/E+HFLuO9Qd/ZRiWY5Rd58PF8O8lO+nsuHzM=)
3: bAq7NCQg3KQUq0C73n9DTh9N3QA.roa (hash: pzC3spTIvf8gdOkRG+uQC8E+FO/P4+4NR9s5ZCQt3sM=)
4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
5: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
6: qV3R0UAizgijs5QCSxdT_ZxyeJU.roa (hash: jWqqT/TB6ljo6j5Y6hMA8Ua3/FJYmLx0V80plcSr/6o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e6:cc:6a:8c:e0:76:d0:6c:92:9d:58:aa:af:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=4aabbe99d6bfac11197d6ee26964397b2e2aaa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:bb:c2:65:52:67:c9:f6:ce:25:44:21:04:
53:a1:91:9c:d2:7f:34:50:26:22:9a:84:ac:13:9d:
d1:ad:19:9e:6f:ba:b8:38:67:ea:0d:40:c8:38:e4:
1d:60:ba:4e:74:70:76:ac:17:ca:2c:2a:6b:02:ff:
7e:5b:be:42:9f:c0:b1:63:79:56:d7:97:ba:bb:eb:
d8:c0:ec:1c:f7:09:7b:c4:d1:52:2f:cf:b3:ef:86:
6b:ee:a3:1e:8f:f2:32:6c:a7:fd:bc:60:90:10:dc:
d0:90:a6:05:ad:a4:b8:d2:67:58:2e:83:6d:4b:2e:
5c:69:7c:0c:7e:3f:fa:78:73:c7:f6:ae:9a:6d:7b:
41:2a:f7:5a:7a:c8:d1:32:97:c7:c2:50:64:54:33:
48:bc:9c:55:22:73:4f:e8:73:65:29:c6:ae:c6:8e:
e3:70:fd:00:c4:f4:7c:e9:cd:ff:7f:56:f9:fe:ac:
11:aa:1d:82:f4:43:c9:0b:bd:c7:ce:56:74:a6:60:
7a:d5:98:f0:a2:47:e6:09:5d:f1:51:f3:26:47:3f:
6b:82:80:67:80:a3:c7:49:f7:24:f9:74:2f:94:54:
b2:05:1d:d6:5b:56:4b:b1:f7:5d:f5:44:0f:e3:33:
c2:d9:78:1e:6b:1f:1f:01:80:90:ea:e6:76:a0:8c:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:BE:99:D6:BF:AC:11:19:7D:6E:E2:69:64:39:7B:2E:2A:AA:5E
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:35:51:09:a8:43:55:2b:86:b9:35:38:3a:d5:32:bc:25:9e:
f9:6a:9e:9b:4d:2c:72:49:b1:66:0c:f1:6a:39:42:fb:d3:94:
39:5e:99:40:a0:0e:5b:24:ef:fe:ff:6b:53:42:96:4d:8d:7a:
28:e2:1a:55:f1:ed:47:02:a0:f3:25:15:d8:6d:88:43:ec:e5:
ae:96:a5:24:11:5b:3e:f0:50:b9:6d:6a:79:5a:7a:60:c4:d2:
22:86:85:5a:69:a0:4f:e6:6e:b2:a3:14:63:a8:6f:8b:6e:6f:
9e:80:a2:a6:45:d9:75:35:5b:a6:66:eb:16:58:6f:30:c8:f8:
5d:3c:1b:02:57:3e:6e:00:27:d9:ec:3b:ec:68:2d:1c:60:dc:
35:76:69:e3:00:f4:4e:8e:18:12:f3:63:c2:56:4d:14:ef:08:
54:c8:fb:8b:85:fc:61:fc:2b:32:e9:33:43:fb:7a:56:d8:42:
ed:7d:70:ab:e9:db:78:f5:2b:3a:c7:cb:10:14:e1:56:60:cf:
f0:32:7b:11:73:12:88:a0:53:9e:25:47:36:13:c3:eb:57:72:
eb:f2:ac:ec:5e:21:c5:2b:71:c0:62:fb:12:b1:a0:a3:72:79:
66:77:43:83:d3:9d:f1:50:da:f0:cc:c7:bf:f1:7a:1b:bf:e3:
22:21:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:55 2025 by rpki-client