Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
File: H9e7sd5oCd9_blc_mrtk5gNhPKE.mft (raw, json)
Hash identifier: +zt+xedSwjpmiS1Fda7OQY4FSvEA8+54bP/rd0qKnF0=
Subject key identifier: E2:D6:9A:E2:68:15:38:74:D6:15:6B:8B:A3:EB:F2:8D:03:5D:F9:F8
Authority key identifier: 1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
Certificate issuer: /CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Certificate serial: 0194BC04BB5D76064CC99EEDB5EBDD13D4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: H9e7sd5oCd9_blc_mrtk5gNhPKE.crl (hash: kVNvkN91JU5td1itlUWSrAbrg9YRPNZeiASQY9oTffQ=)
2: hOjqFzmwDn3h8aF0jh7_FXo9ReI.roa (hash: CNoH2a1MzUmjFlMi/+aHXlooSM/YD9l7gB33O/u52sU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:5d:76:06:4c:c9:9e:ed:b5:eb:dd:13:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd7bbb1de6809df7f6e573f9abb64e603613ca1
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=e2d69ae268153874d6156b8ba3ebf28d035df9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:79:ae:07:68:bc:b3:ad:d1:1e:95:6c:e3:27:
0d:6c:3f:4f:92:92:40:0f:7b:b4:b4:d8:4f:fa:09:
90:dd:ff:15:12:2c:7c:9b:6d:cb:89:e9:a7:02:a8:
c8:3a:54:1f:f1:35:76:a0:f8:bf:db:bb:5a:10:41:
88:c0:8f:93:33:f9:97:e4:64:fb:17:15:bf:58:f5:
bb:bb:8a:bc:26:69:f9:4b:30:7c:33:87:3d:90:19:
99:19:5a:c4:4a:e4:23:24:de:aa:3d:1f:4f:d5:e8:
d4:94:6f:f6:c5:0a:c8:7e:1e:37:50:cd:d9:9c:a9:
56:5c:f6:bd:f9:2b:11:2a:43:8e:75:bc:bd:bf:76:
39:21:c2:1b:76:51:4f:fc:83:b9:56:29:a7:64:44:
9a:33:2f:df:45:ad:54:1f:8d:91:21:14:48:cd:15:
af:da:f6:a7:91:15:dd:21:f4:20:26:b3:d7:5f:73:
b8:f2:1f:8e:74:7b:21:51:04:8d:33:f7:88:54:30:
29:fd:bc:38:24:4d:7f:06:42:63:8c:e0:46:89:2f:
fb:e6:38:0e:ac:a3:b5:58:2c:ef:1a:f4:46:55:d9:
e9:bc:44:17:67:7c:ec:62:7d:28:ed:1d:bb:19:8e:
dc:81:49:d4:52:37:61:42:7e:65:65:f8:be:ff:be:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:9A:E2:68:15:38:74:D6:15:6B:8B:A3:EB:F2:8D:03:5D:F9:F8
X509v3 Authority Key Identifier:
keyid:1F:D7:BB:B1:DE:68:09:DF:7F:6E:57:3F:9A:BB:64:E6:03:61:3C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9e7sd5oCd9_blc_mrtk5gNhPKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f8e803-41f5-4668-afa5-db13abbe4e9a/1/H9e7sd5oCd9_blc_mrtk5gNhPKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:c9:47:50:26:42:8d:69:65:58:9b:8d:56:f0:10:a8:a0:
ef:ad:6a:7e:2d:7b:b6:f6:92:97:9c:7c:df:c4:f1:7a:25:c2:
91:ee:fd:59:52:c0:50:58:1f:4f:ee:bb:6d:01:12:a6:91:90:
f5:99:69:e8:c8:10:b0:d0:f0:c5:59:58:3b:aa:93:17:8e:29:
5e:06:13:f7:86:a5:6c:56:4e:04:1a:b2:7c:08:a9:b2:a4:a9:
55:57:c9:fa:93:4f:5d:02:26:11:81:4d:1b:70:7b:17:5a:7c:
a2:d6:c9:ee:3e:c0:2f:32:53:b6:a8:f6:08:be:9f:d7:50:7a:
13:2c:87:da:6b:f5:09:20:67:ca:16:f1:7e:88:99:12:10:87:
24:61:4e:e8:3b:2c:98:02:66:a7:26:e4:00:3a:6a:e3:ff:65:
ca:a7:09:1e:28:50:35:ce:19:5a:ac:0b:4c:af:f4:d2:6e:4e:
61:43:e2:f6:b0:6f:11:cc:02:62:ff:97:a9:e5:8d:45:6d:bc:
c8:50:a5:16:50:4b:36:fb:fa:d0:5f:bc:62:43:ce:b1:51:4f:
12:a8:9b:af:d2:3a:6e:4a:4e:e5:e0:b3:34:96:a1:1e:a3:7e:
d8:fc:46:ba:c9:23:a7:4f:8d:69:cf:5a:02:1e:53:60:9d:c4:
e0:cb:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:49 2025 by rpki-client