Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: l0bGbv8Bos6U/eAswF02tOB+OiPZcGfkkMv8R0sslw0=
Subject key identifier: D7:77:4D:41:D3:BF:B8:14:2E:1C:F6:AB:A6:25:C0:01:0D:14:8E:47
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 0194BBCE0703FE7E9BF8B5AFD261EB8EAE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: O9GTRbKtvA9AWPN2Vvwpy3YdCEMrG5YQhIZ8qbwufdA=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:03:fe:7e:9b:f8:b5:af:d2:61:eb:8e:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=d7774d41d3bfb8142e1cf6aba625c0010d148e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0d:93:59:23:1d:32:d9:47:f2:54:f4:7b:d1:
3e:e5:d8:96:94:d3:c6:c2:2c:ec:c7:25:ed:10:c9:
c1:19:f5:8b:f5:a8:45:5b:02:f3:3b:a0:bf:94:c6:
e5:5b:f2:5f:73:72:79:02:0e:b1:66:51:69:0e:09:
5e:52:f4:07:db:36:d1:32:15:78:01:eb:ae:23:6f:
92:35:9b:b8:81:64:27:8d:96:72:de:c7:d3:af:cb:
e3:b6:ec:de:57:18:c1:db:b4:65:ec:06:d7:63:c1:
b6:86:52:e9:39:c6:69:b7:e0:5e:2c:83:ba:96:79:
7c:0b:21:19:91:eb:66:2e:7f:c9:12:da:70:cd:6c:
23:78:6d:0d:f6:4c:cd:6f:c6:35:31:56:8c:6d:2a:
57:e0:6d:6e:b8:27:6d:22:42:bc:05:ee:e8:e5:16:
4d:14:64:9c:33:93:08:8b:8b:73:fe:b5:a4:75:e6:
36:23:28:60:a7:63:8e:83:3e:bf:93:46:63:79:52:
56:f2:f7:dc:b5:83:31:48:8b:9d:8a:7f:5b:6c:55:
7d:2b:26:8e:41:1c:0e:ba:c8:b1:54:90:d4:61:71:
ca:c4:e0:33:38:62:01:37:ee:2c:31:92:8f:39:70:
8e:b5:42:8e:b3:d6:a4:c2:ec:90:25:94:93:29:81:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:4D:41:D3:BF:B8:14:2E:1C:F6:AB:A6:25:C0:01:0D:14:8E:47
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:5a:47:7b:3c:4b:d3:4b:ba:33:8c:09:12:56:91:8b:85:
13:21:de:18:ff:1e:b5:64:1e:00:cf:9c:ac:7a:ed:58:bb:4b:
3c:f5:00:87:cd:f7:e3:50:8b:55:82:0c:27:62:01:d2:be:99:
c1:ea:7a:bc:2a:0a:ea:c8:d5:db:3c:ec:8a:00:7f:df:74:eb:
88:8b:a2:bc:aa:b9:1c:e6:f3:e6:16:33:d0:29:4a:cb:86:9f:
9e:5c:f6:6c:13:f9:2f:97:21:02:bf:d5:bc:19:13:fe:1e:c8:
a5:66:0b:83:2a:cf:b3:96:7f:ba:f2:a9:90:be:1c:8c:b4:be:
3c:75:8b:04:02:63:74:61:8a:c9:0d:5b:9f:f4:2a:a6:c8:90:
ea:24:cf:8b:9d:c6:48:bc:d7:90:88:cd:02:b3:15:c2:a3:ee:
f2:a2:9b:c5:62:3a:c2:8e:ac:c4:b7:ed:b7:85:ff:77:64:21:
09:92:2d:94:5d:9e:06:bc:b5:11:93:a0:be:9d:1f:77:e0:00:
9d:cc:b7:67:75:f0:58:3b:6a:8b:9e:91:dc:1a:ba:4d:56:7f:
5b:af:60:66:d3:b5:81:a7:69:a1:30:a6:29:da:de:96:3e:fb:
cc:74:ef:20:37:20:1f:28:27:50:72:4f:ee:75:1c:03:7b:19:
6c:ce:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:14 2025 by rpki-client