Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: a04YpJW18MJLdqIvdPO/XIa+x4wS54rSwamVkhwJGYA=
Subject key identifier: 3D:C7:AA:7E:13:9D:B9:8B:F9:B5:D1:14:70:34:DD:04:38:40:10:49
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 0194BD4E6ECC98A2E7FFD213166B6CD142C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: Dz6a71jRLB499HcslP7q9Z3ESoPLIbvQs2nr1/DWTWI=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:cc:98:a2:e7:ff:d2:13:16:6b:6c:d1:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=3dc7aa7e139db98bf9b5d1147034dd0438401049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:04:5a:32:df:96:a0:53:0e:61:23:e6:db:
28:1d:c2:70:24:b7:4a:b4:4f:7f:3b:e7:2f:53:13:
77:b2:17:23:2c:2a:61:63:61:ff:5a:c8:f2:39:44:
cd:dd:89:b8:d9:ef:2f:7a:b9:e5:4d:29:11:65:bc:
19:ff:97:c6:4f:80:fc:a0:16:62:33:70:2b:2a:ca:
ac:b8:74:e7:82:63:c5:be:ef:11:09:c1:9c:c0:54:
7b:33:55:95:d0:e0:09:e7:c6:62:f7:05:93:32:12:
c2:cd:3e:9c:af:bb:22:ec:89:bb:80:0f:b8:5d:e1:
69:8c:31:9b:f4:9a:aa:bd:a6:13:88:88:b9:68:dd:
20:e3:5a:2c:d0:1e:5c:a6:0e:7e:74:c3:3c:63:94:
08:18:c7:f2:c2:3d:81:ad:0a:a4:81:28:0b:d6:c8:
6f:0a:2d:01:fc:17:1e:e5:8c:99:56:c5:d2:fc:03:
2c:04:7b:42:a8:ac:3a:14:1d:a9:02:55:b3:cf:8f:
3e:21:34:12:fd:16:e0:3d:f1:44:a3:8e:4c:27:27:
66:98:96:6f:a0:ac:ca:72:e8:fa:cc:c8:4f:98:16:
b9:bf:1f:73:0c:52:93:bd:8d:c7:59:1b:d5:55:65:
76:50:46:19:71:c9:c4:eb:d4:0f:3e:f3:d0:fd:e7:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C7:AA:7E:13:9D:B9:8B:F9:B5:D1:14:70:34:DD:04:38:40:10:49
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:36:e1:55:e4:7c:a3:38:45:da:04:7d:c1:1b:50:56:6a:3b:
40:f1:20:06:c6:f0:46:d4:f8:90:e7:98:ce:39:57:19:29:5e:
dc:66:07:ad:88:4f:39:5e:98:46:07:8f:9e:b8:20:52:9c:bf:
0b:f5:db:a4:9b:59:b7:87:a3:0a:fe:09:49:07:b2:3e:0a:4e:
10:8a:24:d3:2d:a5:c5:5c:34:e5:3d:8f:f9:6e:39:20:14:45:
d5:91:56:48:9e:c2:2f:a3:c3:57:10:5b:19:60:9a:f0:16:78:
77:68:b3:65:0f:a3:31:6b:a3:39:2f:f3:85:45:79:eb:bd:47:
ac:7b:75:98:da:5b:02:5a:87:29:2e:4b:df:84:0d:46:bb:13:
3b:54:bf:4f:4a:58:f5:0b:bf:7e:1c:37:fb:b8:7d:d5:6c:8b:
c6:92:f3:d5:61:05:fb:aa:9a:fe:43:e2:86:4f:b3:93:1d:85:
a1:48:5f:99:9b:a4:21:c1:09:12:d3:a6:36:8d:4d:45:cf:8f:
d3:cb:b7:34:1b:7d:7f:41:57:87:15:97:c8:02:9f:e0:b8:69:
2a:31:78:a3:4b:06:24:95:c4:e1:ed:22:88:18:74:f4:9d:45:
54:dd:39:3c:51:b9:c0:7e:cf:06:7a:77:25:49:b2:da:8c:24:
b4:11:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:37 2025 by rpki-client