Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: ufkDcGhqKY4Oyfc+Y/R9uMbb5E2DjA7IV0STKxvDnfo=
Subject key identifier: A9:4F:EB:6B:33:50:9E:B1:81:9B:6C:42:25:E2:C3:A9:21:23:4E:61
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 0194BCAA080A78FE5A42D041517AF417D763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: fXsi3YIQTqETgppVAoTmXbXdN7tE+MI3rYM6QFYnSGU=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:0a:78:fe:5a:42:d0:41:51:7a:f4:17:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=a94feb6b33509eb1819b6c4225e2c3a921234e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:fc:f7:d5:c2:9e:c7:d5:8b:a4:a3:8b:ed:
ff:ac:ce:37:40:c1:b8:72:43:7b:31:6d:6d:ff:55:
e2:55:d4:44:65:ae:00:2e:98:ee:51:7e:d3:55:b7:
78:27:95:9a:be:fc:eb:62:78:c3:a7:a5:77:a4:0d:
83:6d:a7:94:e7:af:2b:9e:17:2b:2d:ee:6d:50:4d:
0f:de:0e:a0:83:32:c4:50:84:bb:de:25:44:21:de:
35:60:15:52:3f:73:10:4d:11:9d:47:2e:1f:9f:ba:
db:b6:74:4f:fc:5e:07:5c:46:e5:67:2a:4c:5f:6c:
f0:81:03:25:b5:05:b0:34:07:c3:38:18:1c:30:f8:
53:4a:24:02:6d:d1:81:99:3a:76:20:06:67:0d:33:
17:a3:43:67:81:7a:e6:f2:7e:c8:0a:19:d5:e7:20:
a0:ca:02:1a:6c:42:48:44:77:69:c8:7c:45:95:22:
68:43:c0:56:57:15:47:9d:88:38:4c:ac:6f:c4:bb:
39:f3:79:e6:55:d6:41:15:5c:0e:74:d0:f9:81:3d:
56:b1:32:cc:f6:d5:e0:5c:ea:0c:86:51:b5:c5:09:
1f:db:a3:7e:0a:66:06:29:7d:5e:6f:70:f4:77:81:
97:20:4c:4b:2a:55:b6:f1:c5:a6:5d:cf:24:e6:af:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:EB:6B:33:50:9E:B1:81:9B:6C:42:25:E2:C3:A9:21:23:4E:61
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:f2:2f:f2:4e:59:1f:c4:c2:2c:e3:36:c5:bf:c7:55:94:
94:6a:93:7c:b2:9b:6d:00:dd:2f:2d:32:1e:ba:02:83:a3:39:
a3:8a:50:ab:cc:b5:23:f6:e9:aa:66:69:62:86:07:34:c5:3c:
3f:3c:a0:ad:65:8d:e7:84:de:af:1a:d1:37:d5:72:f4:35:6b:
0c:32:61:07:25:40:b1:e7:72:58:7e:65:e6:d3:49:36:3d:f5:
ca:02:cb:1e:98:13:f1:0e:d6:bd:d9:a4:10:cd:1c:38:7b:be:
87:e7:db:f7:a0:6a:79:71:18:fd:60:b7:0b:9a:e3:98:b1:f4:
b4:a0:2d:12:20:62:d3:43:a3:be:6d:7b:17:88:b7:82:c0:54:
74:44:68:2c:ec:11:8a:88:34:4d:1a:1a:36:5b:7e:2b:8c:21:
be:49:71:c0:1b:de:f4:0b:3d:a5:1e:93:b3:50:f9:a9:0e:68:
fa:63:e7:58:70:7d:82:1f:67:00:62:fb:65:0c:0b:e7:25:87:
ec:0d:20:de:91:92:b2:86:21:7b:9b:dc:b8:6b:7c:b6:ce:05:
a6:d3:a9:f9:43:e1:3c:da:b3:05:34:a7:66:a3:3e:f0:7a:17:
3d:b0:ea:f6:72:1e:15:64:10:66:f2:84:20:2e:46:3a:7b:84:
35:fb:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:49:27 2025 by rpki-client