Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: 7W7cxUUrNQgWlwvZkP3viMVQWvUZ1wcYkYeuyMXM0zA=
Subject key identifier: 4B:99:25:BA:27:56:3E:C6:E1:46:BC:A6:C1:A5:63:62:1E:5B:CA:44
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 0194BC72D67526F69EFDB9C8C676390D6C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: FkYQevlu1aTCvMq3NCdUJJB1RUFaJFra/f4YcDTzk14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d6:75:26:f6:9e:fd:b9:c8:c6:76:39:0d:6c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=4b9925ba27563ec6e146bca6c1a563621e5bca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:7a:ed:72:5f:c5:d8:c8:e2:b0:75:f8:60:
79:fc:61:19:6b:ce:d0:3c:87:2d:db:b1:d8:00:2c:
2c:21:b6:49:ef:53:4a:06:08:55:16:59:ae:54:b6:
f4:31:bb:a2:2b:0f:39:91:ff:76:44:30:b7:7a:f0:
63:a5:fe:a6:94:77:58:18:42:a2:00:fb:09:5d:0e:
85:6c:c6:81:2f:24:ce:3a:81:5d:aa:74:9d:09:88:
0f:b5:7a:0f:b8:db:ca:dc:d1:39:da:8f:32:ce:c6:
de:9c:30:75:cf:28:7f:fb:8f:a0:ad:d8:c9:73:2e:
15:2a:79:75:61:84:0e:18:17:4e:3c:b6:86:d9:7a:
d6:9d:0d:54:ee:6b:ad:d4:98:51:15:48:bb:6c:d9:
88:45:2e:be:93:a7:ea:90:ae:13:c2:42:14:fd:0e:
07:82:04:90:d8:89:8c:bb:b8:bc:23:09:2e:d4:77:
08:60:d7:46:86:8b:35:28:36:e4:a0:54:a7:27:9c:
ab:02:e8:9b:06:b9:eb:d8:d8:21:5a:af:59:c0:95:
cc:d9:8a:79:3f:d7:d9:04:dc:e1:fb:36:90:9c:da:
1d:3e:17:74:bf:2f:22:e3:ad:cb:fe:4e:34:08:b4:
2a:99:6f:d0:0f:f7:8a:75:e4:66:87:b5:5a:1d:25:
f5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:25:BA:27:56:3E:C6:E1:46:BC:A6:C1:A5:63:62:1E:5B:CA:44
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:ed:00:31:f6:d4:57:14:62:66:d4:0c:52:07:d3:22:54:
cc:4f:bd:17:d2:f9:63:a7:f7:7c:ad:a7:ac:20:4b:79:a7:62:
c7:d7:f3:55:8a:f0:b5:9d:1f:74:e9:a6:88:fe:8b:6b:cb:98:
1e:cd:cc:fb:4d:9f:4b:86:06:de:55:8c:18:5a:aa:67:a0:03:
c1:a8:eb:8e:6a:84:95:eb:18:d3:7c:f4:cd:77:bf:9c:ae:3e:
91:20:3d:80:fb:05:f6:d4:7a:55:e5:7f:60:81:5e:3d:fb:06:
fd:29:92:27:d2:cb:25:c8:16:bd:0d:c4:e1:8f:f2:63:8e:5f:
7e:30:dd:77:e5:80:24:d2:b4:68:02:47:83:25:0c:f1:59:6b:
30:f5:0d:2f:55:e7:a4:cf:13:9f:8e:db:ef:14:bb:d6:6c:ce:
c7:6f:bc:ff:e6:b5:21:07:3b:1b:a5:cd:f1:84:cb:08:1c:fe:
5e:64:af:9f:59:41:e1:15:41:95:8b:06:a6:00:5e:70:11:d3:
ce:9c:08:0f:6b:6f:41:3a:d4:e7:5f:78:c0:e0:71:16:2f:9f:
2f:c7:a2:30:4f:82:97:f0:09:6c:c5:58:fa:3c:87:22:e0:87:
c6:89:ad:ff:73:15:f4:3f:af:f1:24:37:b6:98:f3:9a:80:a8:
3f:d3:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client