Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
File: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft (raw, json)
Hash identifier: hKmDjt69KXqZqFh8t9FqQzQtZfIsWjZw9o0QqLUFq94=
Subject key identifier: 3F:A1:46:35:E5:BE:28:BF:B1:94:FF:74:D0:63:EE:AD:E4:AC:FD:28
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Certificate issuer: /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial: 0194BD177FC18F15EA183A65FC6ADD792929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
Manifest number: 1221
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl (hash: SYKqnnv8um5WYehakuB6E+DZAVBra0bgMs4aXQcvlaQ=)
2: UK2n5J82Y8mJ_ChH-Mf3D9V405E.roa (hash: tUUMnCPKY1tGYA08Lbr1dGnhLn6RW32Wd2MZ44NLy2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7f:c1:8f:15:ea:18:3a:65:fc:6a:dd:79:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=3fa14635e5be28bfb194ff74d063eeade4acfd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:7e:08:e2:f8:86:18:be:28:d6:6f:94:00:
37:e0:19:3c:80:61:64:03:8c:ee:49:3f:c6:b9:59:
08:b2:ff:19:e4:a3:a1:27:7b:e2:bc:e9:ef:65:72:
16:c9:f6:7d:e2:02:6b:fa:b9:63:d6:db:ca:34:06:
46:bc:91:7a:f7:a9:65:38:26:57:d9:db:8e:28:d4:
fc:4f:a5:af:72:4d:fc:64:de:79:1d:2b:dd:05:64:
9c:54:50:86:34:09:52:5c:7d:1d:ef:cd:26:f3:7a:
36:19:1a:f1:bf:9d:9d:4e:f5:b3:1e:8a:06:ad:1d:
00:83:99:8d:4d:97:30:f2:27:f5:e0:8a:91:1a:d9:
22:d0:7a:3b:50:18:36:5c:73:47:46:10:29:e1:2d:
c2:a7:23:9c:51:d6:54:cd:db:df:e2:84:50:75:86:
d1:83:07:86:ee:e9:cb:30:de:97:cf:1a:38:3d:bc:
01:66:f6:3d:2b:b3:16:e1:31:5a:61:93:8b:13:03:
0f:e8:26:4d:75:b1:b9:d0:32:99:4d:4d:f6:24:fb:
1b:58:59:3c:d5:0f:34:8f:85:9f:fd:1c:0a:8b:a5:
7e:b3:96:da:3f:52:52:e3:e0:1a:e0:e3:e7:8a:49:
28:c1:1d:fc:8f:0d:05:e8:20:21:ad:b5:d9:ab:5c:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:46:35:E5:BE:28:BF:B1:94:FF:74:D0:63:EE:AD:E4:AC:FD:28
X509v3 Authority Key Identifier:
keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:dc:a6:b0:df:38:3c:be:92:cc:63:3d:29:ed:a3:d3:f3:
de:04:11:27:44:5a:6e:fb:dd:c9:21:fa:e8:02:80:50:ae:90:
d7:3c:62:15:3b:88:da:fe:8d:ef:3a:ec:b7:eb:58:c1:58:30:
42:a3:95:23:fc:c0:a9:9f:ae:03:60:54:12:0b:b3:db:8b:bd:
65:24:31:bb:f5:03:33:a2:7c:56:5e:92:29:3e:73:0a:cf:ba:
ad:a2:ea:21:15:8d:8b:8a:a4:33:8c:01:95:51:b4:83:95:c4:
e1:c4:5d:a2:10:65:13:67:18:bc:25:9d:70:0c:0e:3e:5a:9e:
0a:a4:f0:8a:fa:48:f1:1b:0b:ca:a8:7d:ee:f0:4e:6d:c3:dd:
79:75:2f:87:c4:1c:c6:38:ab:b8:0b:34:56:f0:8b:d7:db:a7:
35:ed:a6:66:38:fd:80:5b:b1:f6:58:92:bc:56:6c:d2:82:46:
f1:e4:9e:d2:72:15:6f:b3:1d:42:5c:6b:2f:fa:52:1d:e7:b0:
7a:9c:c9:49:f8:b9:6e:c3:bf:ac:ce:82:f0:73:72:1c:43:91:
61:d9:76:ce:c7:b2:ec:db:52:df:cd:08:92:a3:50:a3:42:08:
16:18:34:d9:2d:cc:4a:d0:ab:70:8b:0b:03:5b:43:d6:0e:6b:
ce:3c:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:17 2025 by rpki-client