Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
File: h1bSd2jhHZSgu837P7zXQNRaAPQ.mft (raw, json)
Hash identifier: tGCsogPAcIHgU/ZLTzoG5Kpl55zVUitBR0ccbDeVHI4=
Subject key identifier: 73:D7:15:30:CF:AC:DA:E2:18:E0:89:92:5A:1A:78:71:7B:56:AB:7A
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 0194BBCE98248CE9AF0E7B5A81CAACFDF402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: b2XsYiMu1xHQndcNQ0ucXkzeN7E.roa (hash: uYxfaCmhcw362gqaEMF6PdCZbjIYOfXpyFCpshaBqpM=)
2: h1bSd2jhHZSgu837P7zXQNRaAPQ.crl (hash: gkInjqGJg1VubPZGQa/DkLAYBSq6FbVRsvI2AB5PyS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:24:8c:e9:af:0e:7b:5a:81:ca:ac:fd:f4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=73d71530cfacdae218e089925a1a78717b56ab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:a7:ad:16:b9:6c:e0:b3:22:61:a0:57:ca:
82:2d:95:aa:27:b3:39:ce:40:e1:f8:c6:bc:db:a4:
57:f5:06:73:5b:de:85:f5:78:fa:82:db:46:ef:8d:
6b:ec:a3:45:10:0f:36:f1:df:6f:b8:7b:e1:36:d7:
a2:32:9e:74:d9:56:87:02:38:f5:91:b8:eb:35:f7:
59:dc:a1:82:df:1f:12:83:90:97:ee:8f:4e:f5:7a:
6f:84:9c:21:90:2b:f8:98:75:12:36:27:12:67:74:
6d:f6:6f:d9:88:d6:1e:9e:38:e0:6e:9a:de:54:97:
17:82:d5:a8:58:5f:d4:11:6d:80:7c:5a:5a:2f:d9:
53:61:72:20:ff:1e:07:a6:9f:d1:ed:c6:2e:9d:b9:
57:fb:3d:f4:1a:6d:39:42:f6:2c:81:64:94:b7:8b:
29:a7:2d:65:56:14:33:bd:16:dc:f5:6c:79:2b:07:
55:fd:e2:a2:7a:f8:e4:3b:db:ed:ad:18:7d:c0:ec:
28:62:7d:6f:0c:01:74:4b:6e:33:7f:c4:56:f2:37:
ef:9e:80:21:fe:fe:90:55:fe:c0:b7:9b:b3:aa:2c:
de:17:46:aa:69:3c:21:70:f3:25:3b:36:a2:b0:5f:
89:8e:60:f2:97:76:b2:e4:3f:ab:30:3b:97:ea:19:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D7:15:30:CF:AC:DA:E2:18:E0:89:92:5A:1A:78:71:7B:56:AB:7A
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:73:df:c7:a5:84:ca:02:d5:6b:dd:5d:6e:1d:d0:22:6f:
d5:fc:77:a4:9b:38:7e:65:5c:b8:7c:17:fb:0d:92:c9:2c:ca:
f3:d7:dc:42:7e:80:82:a8:66:79:91:fc:af:d5:46:e5:8c:22:
af:81:cd:f2:cf:d4:5e:b7:7d:cb:48:b0:80:7a:3f:d9:c5:54:
f5:e7:16:8c:7a:ef:19:f7:61:f0:f3:93:73:49:2f:9e:26:49:
3f:25:8b:2f:29:80:61:5c:05:88:c7:13:0d:26:93:55:5e:be:
84:e9:cf:a0:54:6a:99:de:13:72:c1:37:de:15:33:21:a6:de:
50:04:e2:7a:b7:8b:03:5d:0f:11:02:a6:dd:58:dd:93:11:56:
48:f5:8a:b7:3b:ad:5e:13:32:03:b2:74:7a:bc:70:ea:53:f9:
51:21:d9:9e:ab:d5:c1:72:eb:16:92:21:a4:dc:fd:0f:78:0d:
1f:c7:ef:8e:d2:ed:4b:bb:5a:77:5d:08:90:53:2c:4c:f4:71:
7a:77:95:47:5b:da:08:aa:8c:b5:c0:4d:9f:2b:92:08:ff:ab:
52:38:de:52:81:a2:a2:ed:2d:d3:39:ef:db:57:a4:68:b2:47:
c5:a5:59:b9:62:16:53:95:70:85:c7:b4:8b:3c:f8:a5:ba:1f:
ca:73:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:41 2025 by rpki-client