Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: Ai+U2ZJ3A80t5owXuUPmj/wnhGMIC0X/v5ezx0LDHd4=
Subject key identifier: 75:DB:99:7E:E1:87:3A:52:5B:6D:2A:6A:DF:1D:CE:62:9B:A8:77:94
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 0194BD17B7FD0791CCAD6ABA04249A161332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 092F
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: 80k4B3Twcq2OlGyvy4CW0twquAfEIKwNqAp7QuCNkpk=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:fd:07:91:cc:ad:6a:ba:04:24:9a:16:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=75db997ee1873a525b6d2a6adf1dce629ba87794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c0:4e:21:8b:6c:07:8f:7e:c0:c8:f4:c9:fd:
26:12:39:39:b4:d3:c9:a7:32:7b:4b:30:88:04:f5:
ee:f4:37:6b:84:48:cb:25:3d:73:41:77:08:78:58:
51:1e:91:81:6a:21:90:06:71:4f:a8:76:06:68:61:
5c:c9:6a:41:77:21:b4:ef:08:a2:da:63:ec:bb:24:
6a:1c:3a:6d:ea:85:19:48:1a:f7:a5:02:26:73:62:
3c:0b:dc:8e:05:2a:13:5d:b6:6e:e1:6c:d0:31:29:
3c:e4:a9:10:f7:ca:45:3b:c1:ec:b3:53:7d:26:67:
a0:96:47:54:c5:2d:f3:96:2f:fc:69:0e:47:e9:fb:
6b:72:61:0d:cb:dd:0c:10:fe:00:23:9e:54:df:21:
cf:56:e2:8a:9b:4a:10:7a:e2:bf:c8:a4:66:37:70:
67:f7:85:34:7d:e7:18:6f:0f:dc:74:65:0d:c5:ca:
1f:c8:9b:1c:ce:8e:e7:46:cd:9f:26:d5:b2:73:47:
19:a8:f9:c9:e7:5c:72:bf:14:a5:c3:58:b5:d9:6d:
90:f6:b1:c1:c8:41:a0:da:e8:f8:d5:32:5d:df:b5:
b1:68:7b:4b:b3:73:8d:f0:9f:5d:ab:09:ba:f1:8d:
5e:5c:45:b5:cd:13:d7:21:f8:c2:51:5b:38:49:94:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:99:7E:E1:87:3A:52:5B:6D:2A:6A:DF:1D:CE:62:9B:A8:77:94
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7f:2c:49:17:57:2e:e7:33:0a:93:5a:a4:e4:86:98:4f:9b:
f6:f0:91:97:d7:05:a7:b6:25:2d:15:9b:ed:f9:0a:8b:d6:04:
dd:89:9b:2e:16:c5:ed:2c:f4:2f:c0:37:c8:8a:b6:43:c7:d7:
5c:02:65:22:08:6a:0c:28:d3:e2:37:68:12:a3:8c:59:b9:8f:
d4:94:b6:7a:0f:b4:63:14:0d:c9:ee:f7:15:a7:2a:7c:8f:40:
5b:c3:06:ee:0a:0c:af:75:01:43:46:9c:e4:0d:e9:30:50:1e:
2f:94:6b:08:a6:bf:e6:1e:33:93:31:09:a9:af:99:68:52:e6:
b4:83:75:5f:0a:01:92:ce:e8:09:79:bb:b2:34:0e:fb:46:c1:
72:61:7c:fd:12:1f:db:bb:78:4e:50:4d:52:1f:a2:3d:4a:8a:
dd:b4:5c:75:96:6f:8a:62:93:77:8d:b0:0d:f2:4b:a3:de:d8:
e7:0d:ea:b0:de:aa:e2:6b:b6:f9:60:fe:b8:c8:a8:5e:5f:ec:
2c:51:00:68:f3:08:f9:bf:32:8e:45:e7:74:e9:cd:d3:c3:95:
22:f9:bf:f5:ac:64:e7:cc:b6:50:ce:bf:ef:f2:a2:05:2a:05:
c0:fe:77:5a:49:56:b5:ff:2e:91:8a:26:3b:f9:1d:75:8b:2f:
e3:a0:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:17 2025 by rpki-client