Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: 1iRnbyM7/rwHa/yPxhJsSZMvRV4UBJ7k72P/rc/2g8k=
Subject key identifier: BD:35:88:31:6B:6B:86:C9:77:9F:B0:CC:63:40:5D:BD:A0:FD:B5:0F
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 0194BCAA1EE483B32095B0ACDC1CEA8E5855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: IlJjZmtU0sm97qB2xNkhNW0xRO4tCktCjcxv9u8Ebqo=)
2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:e4:83:b3:20:95:b0:ac:dc:1c:ea:8e:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=bd3588316b6b86c9779fb0cc63405dbda0fdb50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:e0:5a:f0:7f:17:08:01:ba:8c:e9:79:5e:
cd:bb:d7:5d:05:45:25:bb:eb:5f:2b:5d:a7:25:5e:
04:20:b6:85:38:9e:23:aa:8e:75:da:86:ab:1b:0b:
60:e6:82:64:cc:53:21:7f:72:11:46:0b:9d:30:28:
c6:1d:28:01:57:80:6b:2b:da:49:5a:90:68:2b:e5:
ac:4e:83:fc:d5:dd:b8:e0:90:4a:9e:b9:ce:34:24:
e2:e9:52:5e:b9:ea:da:d2:08:c8:39:84:e2:df:2a:
07:8c:0a:eb:1e:b7:49:54:8d:de:4c:66:94:60:1c:
d4:2b:3e:fa:ed:26:18:aa:9c:23:2e:82:ad:5e:f4:
69:81:98:51:80:a2:4f:ba:4f:82:43:c6:b0:95:55:
32:ed:c9:db:09:c6:40:27:18:de:37:f1:66:e1:a0:
c5:b1:e1:23:db:07:c3:2e:5c:13:9d:f9:91:e9:0c:
bd:71:52:09:2f:3c:47:83:92:0f:66:65:80:23:64:
d4:6b:57:fb:cb:23:dc:15:08:e5:49:0f:70:71:71:
90:3f:23:49:c2:c5:b0:32:cb:07:69:b2:a7:d1:23:
7b:1f:3e:5c:3a:72:70:93:c7:a6:5e:60:c4:4a:ba:
90:c5:c7:e7:17:d3:0c:bb:7d:ae:c9:35:04:77:fd:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:88:31:6B:6B:86:C9:77:9F:B0:CC:63:40:5D:BD:A0:FD:B5:0F
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9e:1c:28:00:5b:a8:8d:21:49:46:6e:ec:60:22:29:58:b9:
74:df:04:80:eb:3f:70:71:dc:02:c2:48:92:03:01:05:c3:f9:
c7:e7:a1:b7:8d:26:ea:a2:b6:85:e3:db:72:4e:fc:25:89:a8:
c9:31:a1:a5:35:fb:34:73:49:3c:12:2b:f6:ad:e6:de:81:51:
a5:f7:2c:c2:3d:c4:2b:8d:93:bb:cb:83:8b:16:9b:c5:b8:15:
e2:6d:64:24:c6:a7:f2:41:d9:e0:7a:55:10:05:99:09:3d:60:
ce:09:8a:db:36:dd:0a:4c:f5:aa:88:f4:9b:c6:8e:08:1e:a1:
49:d3:9d:6f:74:ef:e3:5c:f6:0d:c8:fa:98:f3:9d:12:4b:7d:
7e:32:39:38:e8:fc:d4:45:b2:e3:a1:76:be:09:d7:98:3d:39:
df:64:1c:cc:26:c9:d3:25:fa:b3:fd:2f:b2:8a:0a:10:af:34:
1a:35:b0:df:df:19:b1:0f:2c:09:49:5e:ef:c7:cf:35:64:c7:
d9:08:f2:89:94:99:34:f8:a1:99:e0:92:3a:26:1c:1a:94:85:
71:08:4e:5a:78:13:79:84:51:e4:19:9c:07:f9:bb:b3:aa:eb:
db:c0:12:bf:f2:c2:32:2b:0c:3a:cd:89:fe:e5:1f:ec:6a:43:
44:94:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:31 2025 by rpki-client