Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: INNSKoWZggAYNyhi65EXiX9vlo/cR4Tpox61ARgrWCs=
Subject key identifier: 84:D9:F4:D1:CF:CF:28:B7:43:1C:64:8C:CE:E6:64:C0:81:FD:E0:44
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 0194BBCEDBD67B8B98E699344AF4CF3674E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 3MF6BuznJ4OfS1C5J5sFom719Ag.roa (hash: SgA1M+YF5PTZbvqD1BRuBpZXk3sFWrE/PgQsVhuZ/S4=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: VMYNUiRHk7K7sSTds5HQ0S8zxa6JD8vMTDtLatrZ75c=)
3: pFxtApTW54EbBHD0oDAnh4jDG3E.roa (hash: gJNAVWKEII1RjZzGIybSB1Nkau8KmzUZnx0gYczpW88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:d6:7b:8b:98:e6:99:34:4a:f4:cf:36:74:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=84d9f4d1cfcf28b7431c648ccee664c081fde044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:00:2a:2b:34:b7:05:e7:c1:8d:0b:a7:eb:0b:
45:9e:a6:cf:7e:64:57:b8:52:f9:79:14:7e:e1:be:
4f:e1:5b:21:45:c4:c8:72:a7:30:6d:96:fb:15:db:
3f:bc:00:b1:07:0d:fd:2b:d1:16:07:a1:8c:ce:de:
b0:cf:54:86:1c:b7:af:8c:fd:79:9d:88:4c:da:e5:
ed:14:1c:36:af:49:e7:b1:f4:0c:1d:e5:c3:77:78:
2e:a5:ff:a5:a2:e9:d1:a4:a7:6a:99:80:60:15:05:
cc:68:47:9d:a6:1c:d1:34:b8:5a:61:a6:7f:d6:14:
ac:ab:79:16:bb:93:14:96:3c:d0:85:7a:06:cd:83:
1f:8a:7f:63:59:68:80:f5:41:11:ba:d9:1d:15:c9:
f6:9f:53:0a:bb:8b:57:77:bb:8c:75:b9:4e:7f:bd:
07:51:7e:5c:5e:f7:fe:67:c8:a1:84:ac:53:35:74:
d7:1c:02:97:25:70:0e:b1:9a:1e:c2:84:85:32:95:
b6:b2:5e:8c:06:59:eb:01:68:a6:9f:00:22:ba:82:
51:4b:6e:66:a6:99:ad:e2:7f:ec:5a:79:d6:de:36:
73:d3:1a:59:eb:f1:3d:7d:b0:7e:a9:dc:f3:93:07:
87:70:c2:21:d4:18:80:0d:4e:60:fd:15:94:21:63:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:F4:D1:CF:CF:28:B7:43:1C:64:8C:CE:E6:64:C0:81:FD:E0:44
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3d:31:81:20:15:f8:b3:b3:7c:c0:e0:18:ad:39:db:b3:5a:
e0:f5:f8:e1:3d:1f:0f:05:f1:a3:80:1f:2e:61:2f:19:6c:7c:
c8:77:9a:0c:30:b8:52:92:cd:95:ff:1f:17:30:f2:c2:69:8d:
7e:b4:4c:b8:5d:a2:b7:fc:28:34:58:60:0b:dc:1c:36:63:d8:
4c:05:72:e7:d9:cc:be:c2:88:d4:9e:c5:6a:73:d4:29:2f:bd:
9f:2d:06:05:a4:98:8e:a0:cb:c0:91:bd:bc:ce:f8:db:eb:3d:
fd:74:af:fe:48:1c:50:5e:e9:28:a2:96:9d:09:ce:b9:f7:5a:
50:83:42:1f:70:a5:1b:97:7d:4b:c6:6f:a3:df:1f:50:a3:b7:
24:03:41:2a:af:30:22:9b:c6:c3:ff:ce:bf:9b:2a:3f:90:f8:
1b:6c:98:e0:f2:b3:db:a3:aa:84:97:4c:c7:7b:92:9d:5f:ce:
c3:2f:92:4b:3d:ce:ae:78:17:4e:2a:b1:ca:75:f7:0c:0b:12:
37:d7:20:01:90:39:34:ff:07:41:e8:50:5e:b2:35:1e:ff:5d:
11:da:65:b4:0f:76:cb:96:06:ad:a9:bf:f5:ed:ab:e2:41:7a:
dd:ef:ca:6b:d8:e7:6d:37:50:24:02:46:4b:c4:47:2b:81:43:
da:21:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client