Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: 38L1sOt3VyvYnwbvo07xnwwN85/oJiWLk174yKx7R+g=
Subject key identifier: 04:3B:DB:C8:6F:7D:9A:3E:E6:D8:87:59:05:5B:F0:66:02:44:B0:0A
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 0194BC72CAA9E3A6B27CD94617A49EC6FDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 0275
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: h6gnRjPUQVKWF2bAnwIJvBAmxx0rFjuYZEoibI+Gojs=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:a9:e3:a6:b2:7c:d9:46:17:a4:9e:c6:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=043bdbc86f7d9a3ee6d88759055bf0660244b00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:88:75:9f:11:5d:d6:0a:37:69:6d:23:b1:
a0:ce:34:9b:6e:32:57:07:50:ac:81:3c:bf:82:04:
32:9d:5f:5b:c3:84:46:17:cc:bd:fe:58:5a:2e:80:
81:1c:15:3b:f3:12:e1:af:e9:ea:ce:32:76:ea:1d:
c5:eb:e3:26:09:69:f5:8a:a1:38:10:ae:16:16:ae:
50:94:de:d7:1f:57:8e:76:d2:d8:6f:2e:e1:b3:00:
85:c5:b3:1a:ff:43:f3:d7:b5:fa:d9:5c:9f:de:d8:
8e:9e:9d:43:95:b5:a5:b2:f1:4d:40:40:e4:ac:23:
93:e5:8d:3b:e8:cd:55:05:ff:5c:93:b1:0e:36:f3:
5b:21:6c:79:b2:ba:4c:83:1a:62:ef:b2:f9:62:c4:
a5:b4:01:1d:ce:19:a9:15:83:78:aa:76:64:34:2a:
89:0c:86:d1:2c:6d:d4:24:f1:a9:f2:61:17:ec:56:
98:88:43:c0:8d:11:a3:66:27:0b:ef:ee:c9:39:6d:
bf:82:57:4c:a1:1e:0f:e6:4b:eb:17:01:7c:f8:ca:
89:be:88:c8:6d:39:9a:ce:1e:7c:bc:c9:a9:4f:dc:
b3:14:91:92:8c:1b:07:53:c5:0f:06:e8:d6:e9:ac:
73:d0:2e:05:a0:9e:8b:5c:ac:9c:cf:31:c6:60:c2:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:DB:C8:6F:7D:9A:3E:E6:D8:87:59:05:5B:F0:66:02:44:B0:0A
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:47:8f:fd:d9:3d:43:f1:29:ed:3c:b0:75:6d:72:5d:5c:4a:
0f:22:c3:88:71:98:f6:2c:3d:5b:9a:2b:bf:dd:17:f8:e9:54:
0f:9a:4f:d9:35:08:9a:53:47:a4:86:07:fa:83:58:cc:ba:7e:
b0:85:15:ea:22:fc:fe:10:9b:52:6b:48:67:98:7e:4b:9d:19:
2f:12:6b:ad:57:05:8c:c6:ac:88:48:75:0a:f6:27:c9:03:3b:
5b:c9:55:22:bf:64:f9:6a:62:fd:5e:cd:bc:be:35:5a:32:ff:
b2:6c:a8:34:8c:7a:43:49:6b:83:10:10:f4:0e:ee:b4:45:e3:
72:81:4a:6c:98:9a:61:ec:0e:29:e1:0c:af:a7:39:c2:71:88:
74:8f:77:58:a3:be:64:a7:06:f5:86:7d:18:07:ad:18:e1:79:
88:3b:95:d9:22:65:37:fa:77:78:e9:9f:a3:34:df:65:12:0e:
43:05:fe:d9:1f:aa:b2:0c:e7:b1:cc:29:8b:ac:20:e8:a0:d6:
8f:29:60:f7:5d:9e:d7:ac:b7:a8:6b:a4:fe:b7:fd:4e:d3:37:
6d:18:fd:d1:66:07:ef:ab:c1:48:5f:36:8f:38:01:1a:36:db:
1c:23:c5:5f:62:d1:2d:e1:30:7a:97:05:eb:f4:14:11:b6:07:
77:a4:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:48 2025 by rpki-client