Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: Ta5TThpapbpUU2tuehPLFKLqyo9pMtA/2NEqgMb0AzA=
Subject key identifier: 53:8A:7A:D9:C1:5C:96:3A:74:ED:30:2C:3C:D9:4E:0E:76:13:21:02
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 0194BCAA3734A0281B354A106ACBE7822AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 0312
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: AEctJzqf/hXohcGb3DD8ESIKGzBQXeYGdjZbfp8jsCA=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:34:a0:28:1b:35:4a:10:6a:cb:e7:82:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=538a7ad9c15c963a74ed302c3cd94e0e76132102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:dd:3e:cd:0e:45:b8:31:fa:3b:2e:7a:b2:
97:86:77:ca:71:40:3e:f2:8c:70:53:75:74:07:7f:
fe:cf:77:9d:32:21:d3:43:06:d5:db:13:b9:e3:3c:
64:93:88:8e:9e:18:19:0a:ba:5a:57:05:46:08:2e:
3e:9c:47:0e:dc:24:1d:e6:1b:75:1f:63:81:9a:32:
9d:1d:bf:b0:33:ce:62:46:35:b0:7e:da:41:b2:ae:
27:cc:1f:07:c7:ed:ce:9f:51:30:13:a4:a0:f2:f3:
6b:72:9e:6e:cc:11:1a:ab:a9:a2:90:5b:d8:60:bc:
19:72:15:30:a5:91:3f:e4:75:fe:fa:8a:0b:18:b6:
28:38:8d:06:67:30:36:ba:6d:d3:f4:87:06:74:4f:
4c:86:93:2c:d4:0a:fe:93:be:19:48:1d:1a:6e:5e:
a6:6d:58:3a:c4:6a:91:0d:6b:2a:e5:96:68:06:ed:
a7:e1:5e:05:0b:57:90:90:d4:6f:53:17:37:e6:44:
54:e6:16:c5:6a:7a:5b:2b:1f:91:b4:90:cc:04:f0:
07:15:b9:e2:ea:11:f7:25:97:e6:9f:21:df:ab:16:
cf:d6:9c:f1:40:54:39:27:be:6c:d7:a6:53:1c:c1:
76:03:0a:ac:b9:b0:67:eb:53:2c:c3:38:c5:43:fe:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8A:7A:D9:C1:5C:96:3A:74:ED:30:2C:3C:D9:4E:0E:76:13:21:02
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:07:42:67:f9:da:f5:e7:e2:af:9c:2a:8f:df:a4:94:9a:89:
e4:6a:c9:dc:1c:89:de:cc:44:5b:3d:78:21:4d:fc:6d:ef:a8:
66:e4:51:b1:a7:f5:1c:56:64:c6:94:79:4f:f7:56:90:6b:20:
f5:a2:9c:3c:76:cd:52:0b:19:db:ec:e3:e2:5b:21:96:30:42:
57:8b:92:00:f0:4c:7b:78:ca:e7:8c:ef:e8:53:f2:18:24:da:
bf:f2:e8:54:07:39:5f:92:eb:66:13:7b:e7:8b:94:2d:a3:d3:
3a:93:26:b7:eb:6a:37:fa:99:50:60:b3:da:c4:e2:7d:f2:66:
68:02:74:7e:95:24:81:dc:fc:69:f2:7a:4c:13:21:fa:82:7b:
51:c9:93:a2:9d:2d:f7:84:0d:de:ba:54:e8:3f:54:a7:1e:c3:
af:58:66:32:5c:00:67:f6:5f:66:a7:ab:15:9b:7b:14:b8:17:
7a:f1:12:3e:72:43:3f:df:21:5d:a2:ac:79:38:1b:ec:82:e4:
7e:58:6f:99:f5:1e:92:79:cb:b3:4c:39:d1:19:eb:44:9c:82:
15:f2:86:94:d4:ea:8a:35:b8:9d:3e:96:b9:b5:1e:13:4d:94:
4e:f0:55:ff:d6:d0:ee:d5:30:21:d2:8b:14:ae:4b:8c:c5:9b:
22:89:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client