Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: qjAFH9BlvtQacbA9twiCl8beMgty+pe08ry6bSKuoeU=
Subject key identifier: 83:80:12:19:D8:A9:03:0C:35:F9:77:52:A4:3A:CA:90:42:46:F9:75
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 0194BC729C7FE991CF65EBE1F4391AEC5696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: 52RvNo4u0S2JywVQAhJ4TuvnF4BrvqrDNej4gIQW5os=)
2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9c:7f:e9:91:cf:65:eb:e1:f4:39:1a:ec:56:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=83801219d8a9030c35f97752a43aca904246f975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:c2:b5:be:af:16:f8:e9:44:36:a2:95:14:
37:62:78:d5:cf:36:eb:97:ff:5f:75:24:25:20:7b:
6c:78:ec:5a:c9:8f:93:29:25:10:15:a6:9e:ca:7d:
01:e5:00:32:db:a2:59:86:af:a5:a1:f1:83:5f:81:
8b:b3:b8:77:5e:d9:4f:9e:88:79:d8:0b:93:ec:84:
14:de:44:ef:ab:83:29:cf:84:c4:43:d2:f7:a5:c4:
8d:15:31:d6:76:84:c7:22:66:7e:59:b3:18:65:a2:
a3:c8:30:3f:21:10:23:73:88:1e:a5:4f:5c:bb:a5:
a1:04:5d:8a:17:cc:49:5d:82:2b:1d:be:1d:88:1c:
81:a7:51:cc:34:f2:89:96:87:3e:0e:ea:4f:78:ec:
11:13:cc:b3:0a:e3:30:00:a1:5b:e0:5f:29:f6:a4:
ea:7e:3a:ed:9d:8d:2f:54:08:a0:5f:e9:7c:6f:5c:
d3:9e:30:fb:4d:c3:4b:fe:d8:9b:6e:03:72:84:cf:
bc:28:53:ae:6e:7b:b7:a7:04:97:fc:a7:02:d7:ca:
aa:4a:d0:f3:c7:d0:73:da:bd:2d:ba:41:52:9b:d9:
9b:39:bb:96:a7:13:e6:fd:0d:98:08:82:f7:f7:fb:
13:e9:1d:89:6d:b0:af:54:67:7e:98:93:22:92:67:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:12:19:D8:A9:03:0C:35:F9:77:52:A4:3A:CA:90:42:46:F9:75
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:8f:2a:de:8d:71:b4:33:2f:20:09:1e:34:ae:b1:ab:e7:
fb:fe:a1:54:ef:4b:86:31:63:f2:b6:48:02:78:b2:b6:f8:ce:
29:a7:1f:81:a6:5b:2f:61:b8:35:86:41:81:52:da:76:15:41:
ee:9d:09:7b:9a:a8:31:09:74:d6:e7:a9:84:25:1e:a1:ac:2f:
ad:02:6f:17:3b:b1:9c:83:b8:a8:c3:dc:47:8e:6d:40:6e:82:
eb:bf:c9:c2:e3:8f:cc:19:6c:20:d0:c1:bc:aa:3e:a2:ad:90:
63:9a:80:56:57:71:93:18:2e:44:e0:43:0b:81:c1:a6:4c:3c:
c2:1f:b5:05:dc:26:04:23:8c:55:34:cf:b5:97:a4:9f:fb:3a:
60:95:91:da:3a:02:fe:60:3a:6f:78:36:47:61:a5:3a:9b:64:
30:7b:af:c5:93:89:d4:f2:e1:22:d5:73:b0:25:a3:33:e3:17:
76:3f:ac:e2:20:11:4e:b7:bb:6d:e8:d3:da:b4:e9:c6:d6:a3:
96:82:6b:fc:7d:75:f6:c8:73:ef:7b:00:aa:6e:51:78:70:99:
1a:b1:73:b3:ef:5e:84:d9:72:f1:85:13:38:3f:b2:df:32:31:
d0:b9:8b:b5:84:bd:73:ce:b1:6a:13:71:28:29:3a:f4:5a:68:
4d:a0:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client