Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: kYaGMHdnUd+lcSgQp4OCkB1IzRKszTacjrCvxY0FQoc=
Subject key identifier: 41:C2:D3:0F:D3:71:81:B0:1F:2C:57:EB:2F:E3:86:3D:E2:E9:9C:EB
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 0194BCE0AFF27749675C94C1A7B5640D8966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0B1C
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 2lsktl2N5omr7uTF18HMcnZtn8LeOUNAJlAmcMCFPqg=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:f2:77:49:67:5c:94:c1:a7:b5:64:0d:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=41c2d30fd37181b01f2c57eb2fe3863de2e99ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:b1:18:df:f7:cf:70:c3:0e:4c:0b:ce:41:
01:81:50:b1:c7:1c:6b:e5:98:d9:50:b4:d3:90:6f:
49:1e:a4:73:59:87:eb:73:d8:65:56:2d:fe:26:30:
35:58:ca:7d:3c:dc:0c:bc:37:ed:7a:e6:35:1b:8c:
fe:a7:5e:64:c1:1c:16:f4:63:f6:ec:3b:45:18:41:
51:5e:0a:ed:af:1d:61:ca:ab:c7:16:49:53:b5:22:
73:8a:d1:04:5b:f2:4e:59:82:1b:3d:56:e7:3b:72:
4a:ec:81:85:53:19:c4:b6:ae:d0:ac:a5:00:1f:f4:
35:f5:1a:f2:6f:6a:80:1c:61:34:d5:50:e4:1d:c5:
1a:5a:db:63:1b:f3:dd:03:ba:6f:e1:e4:c2:69:7e:
a5:7a:51:e6:e5:c8:ca:44:cf:f9:cb:ef:ef:92:86:
b4:5a:22:c8:05:a1:5b:90:90:38:3f:02:d5:35:99:
c9:de:7b:a1:fb:5c:55:f0:0a:9b:67:d8:24:2c:2f:
3e:0a:28:f3:bb:1d:fd:f2:3b:b5:2c:a0:f1:76:a3:
26:bc:9e:9c:fc:01:66:b6:f9:1f:84:a1:f8:88:a7:
f7:55:0b:a2:73:d8:16:44:ab:93:4a:16:f3:fa:16:
21:9d:ff:c1:86:52:23:ea:a9:c4:d0:51:64:af:a8:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:D3:0F:D3:71:81:B0:1F:2C:57:EB:2F:E3:86:3D:E2:E9:9C:EB
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9a:a2:2b:6a:be:4b:c2:a3:a0:67:d0:2b:bd:1b:bd:e2:b3:
04:92:3a:87:45:4c:28:4a:a6:cd:61:f5:e6:5c:ad:38:c1:36:
f7:ab:c4:b1:10:dc:b0:9e:59:bf:96:dd:b5:01:a1:54:74:e8:
2e:83:25:6a:a1:85:d9:0e:26:58:26:31:31:4d:e8:f3:25:2d:
8e:d0:cf:18:d3:e4:5c:1c:5c:ec:28:b2:17:00:25:75:c8:07:
90:e6:2e:23:ea:43:21:37:cf:e0:4d:73:90:64:e5:ca:65:e0:
1c:7a:33:9f:19:b8:1b:11:b9:c3:93:74:f3:4d:cc:cb:c5:eb:
b2:fe:38:95:b1:d3:8e:94:9d:69:98:56:00:c0:9a:e6:93:ee:
dd:8c:69:65:12:52:74:d5:98:1a:da:2e:25:14:df:3b:f7:e3:
37:36:ec:83:77:72:ff:6f:d0:ea:52:6b:9a:b5:31:24:d9:c9:
0f:0b:6f:68:1b:e5:2f:35:16:ac:7d:37:55:26:79:70:1f:71:
82:6c:93:9a:ef:a8:91:e9:83:de:a0:1e:57:39:61:62:f9:96:
61:c7:04:1e:61:c9:9a:26:fa:25:5a:24:35:c5:32:a0:5d:53:
3c:cb:2b:b1:99:d0:5b:fc:4a:21:b7:59:6b:d7:75:a5:7f:57:
b9:18:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:12 2025 by rpki-client