Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: oB87Qq/LZiz8lhzbmZNwXxNyPyXNuwz/7qFzd5GNdoY=
Subject key identifier: 3C:6A:8B:94:82:87:49:9D:7F:F7:09:88:79:3B:62:C6:68:20:32:F6
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 0194BC3C31C1DC663A0C0F385593B3FA6EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 12F9
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: yIoTSrUcuxMyZ2lu+JhTfXDFtFv/9pQJEVfwffToV7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:c1:dc:66:3a:0c:0f:38:55:93:b3:fa:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=3c6a8b948287499d7ff70988793b62c6682032f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:8c:b7:33:2a:44:3d:8e:91:1c:a8:6d:6c:
89:83:33:65:d1:36:7c:57:6a:a3:d3:81:64:00:bc:
4d:75:ea:f0:ba:0b:99:de:f4:17:5f:7c:b6:9f:b8:
31:94:1d:95:c2:65:10:f7:0e:53:cb:cb:07:b8:ba:
48:8c:c5:c7:32:e9:e0:e9:03:ba:32:59:e5:c0:54:
d0:88:c9:05:2a:9e:d2:f6:1a:9a:0b:bf:b1:cb:3b:
be:27:24:73:e7:75:b6:d9:5c:5d:f1:c2:fe:0f:9d:
82:40:1b:cf:00:3a:5d:69:90:f8:e3:43:7d:be:ed:
44:51:f0:00:85:f9:80:dc:74:f6:07:ff:44:ba:d6:
d9:8b:51:00:5b:e7:49:46:2c:e8:66:ab:43:82:d5:
ea:23:14:9b:ca:e1:ad:55:e2:5b:ba:6b:00:fa:b0:
98:88:01:b2:45:1d:bb:a9:7e:cc:89:78:02:4f:f1:
bd:86:84:50:40:ee:66:98:35:53:d2:ef:e8:d6:47:
87:74:3b:55:11:ff:a2:ae:ed:4a:d0:17:a3:40:7c:
57:c9:5e:1b:13:76:d3:8e:c7:e9:e5:6f:d9:ad:cb:
92:c1:8f:2b:47:ca:03:be:58:ce:ec:ae:01:f1:f1:
88:5a:45:b8:8e:c5:7b:8b:96:b4:d7:3b:6a:3b:29:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:8B:94:82:87:49:9D:7F:F7:09:88:79:3B:62:C6:68:20:32:F6
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:e2:9f:19:e7:be:04:e3:32:08:c8:93:d7:23:c8:60:d7:
b9:23:5e:79:e7:7c:ae:e0:d2:2c:40:75:02:02:7f:1e:58:3e:
30:4e:92:64:8b:51:c7:5d:b0:71:cd:7b:ef:b6:d2:d3:38:31:
54:bf:fc:01:5c:ea:87:f0:d7:2a:18:4f:d0:38:ed:b7:e7:5f:
53:ae:3c:c8:d0:be:e9:b2:90:16:a4:c9:af:13:cb:dc:d6:33:
9e:fc:26:45:73:28:44:72:37:1a:07:74:40:36:48:e0:f8:4a:
ad:cf:2f:fe:90:e2:c7:38:47:70:b8:24:cc:5e:d9:83:56:b3:
c0:8a:03:d7:25:dc:fb:ea:31:e3:05:b9:7e:c1:99:fb:73:3a:
4e:8e:28:6e:d3:49:b3:4b:b8:6a:6b:ea:7b:a7:19:40:44:c3:
e3:fd:40:97:43:01:36:5c:4b:db:b5:f3:98:a1:e2:f0:c8:be:
77:37:ce:a3:f4:c9:25:55:6f:7a:84:52:67:19:b0:0b:ad:b0:
d3:94:a7:fe:8c:bd:07:5d:5d:59:b9:77:7d:33:f5:50:12:09:
16:8e:fd:41:bb:41:11:66:61:ff:e2:7f:1a:0e:f7:47:4a:84:
ea:0f:a1:c6:3e:ce:c5:1b:6f:6c:20:30:42:60:e7:f8:ac:0e:
54:ff:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:22 2025 by rpki-client