Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: 2QFmx8xWcltkQchheynMi65eo+pzoo3re2iXQZUkGpo=
Subject key identifier: CC:F1:7A:B6:5B:C9:7C:F3:77:46:24:8C:47:6E:E7:23:AF:15:FF:F8
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 0194BCA997CB57F3D070BAE0F8EA57F8FF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0673
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: ffH9+tEa55cgTanoCnA4fDtNx3TdjlktBNM5opYSjzQ=)
2: rNGuPSJft-Vo3aMmE_0SHixDFYs.roa (hash: RB3m8yl02sm8Z1EZzBwUHBfxuJzfyJEgz7CGmiyldWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:cb:57:f3:d0:70:ba:e0:f8:ea:57:f8:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=ccf17ab65bc97cf37746248c476ee723af15fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:b6:6d:89:64:8b:38:c3:61:04:d4:dd:33:
76:f2:e3:7d:be:94:39:6f:6d:e6:8c:41:df:9e:49:
1c:5a:e9:3e:47:fd:71:eb:76:9a:37:a7:a1:8f:65:
81:64:10:c6:ee:c1:31:96:29:84:9c:41:0a:6b:d3:
07:50:2a:13:32:c1:98:10:a3:e3:43:f7:2c:81:73:
84:ed:c5:0a:47:e0:7c:cd:89:bb:bb:cf:e5:92:0c:
2e:09:47:0b:fd:aa:1a:2f:7c:47:2c:e2:cf:d6:ba:
fa:07:17:ce:82:35:c7:cc:87:ad:60:95:a9:c2:ae:
5c:e4:fb:91:1a:e9:bc:b2:c5:1a:53:37:49:c4:79:
7d:99:85:10:19:0f:6a:e8:49:40:61:e9:83:6a:ac:
df:8c:e4:56:d7:c4:a9:16:52:72:5a:50:6d:f1:9c:
c4:37:ff:35:81:6f:95:18:db:e4:e6:7c:86:7b:7f:
5f:4e:c0:e2:b3:2b:58:ff:d5:a1:f3:52:7d:41:a2:
a8:c6:59:e7:c7:fd:23:2d:e6:3c:a1:d6:93:d4:a4:
9a:8d:04:2e:7f:00:0e:ac:9c:9c:6b:b9:27:43:24:
3d:7d:32:3c:57:06:40:d3:7e:2b:b3:17:fa:16:56:
13:bd:f0:b4:63:c5:e3:0d:f7:24:e3:c8:3f:39:f0:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:7A:B6:5B:C9:7C:F3:77:46:24:8C:47:6E:E7:23:AF:15:FF:F8
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:84:82:2a:5b:e6:2c:e2:8c:df:f6:43:ce:61:69:40:b2:80:
1f:18:b6:aa:e1:31:e9:28:79:d8:e1:89:a7:25:4b:3f:bd:75:
7c:63:95:63:cd:84:e1:2a:da:67:69:d5:b2:34:d3:2c:0c:f0:
de:e9:02:4c:98:ea:26:b0:c8:25:8d:55:d4:4c:b1:46:43:61:
aa:68:ab:79:2f:b1:f3:e4:64:4d:f2:c5:13:0b:20:ac:09:dc:
89:fa:75:df:07:33:12:8a:60:d1:a2:3f:dd:e0:4f:0b:d4:36:
37:46:41:e5:b0:31:75:81:43:c7:4b:92:3b:6f:52:78:f4:2d:
31:e3:a2:05:15:1b:fa:f4:2a:05:1c:e2:97:32:3d:ac:75:b1:
f3:1d:a7:1c:5e:8b:e2:88:79:e8:3f:4f:60:e1:a5:c1:0b:be:
c1:a3:ad:93:48:7a:da:03:be:6b:60:3e:1b:f0:19:7d:98:bf:
61:62:ba:62:20:fe:8e:f7:b7:f9:9a:0d:d0:8a:37:78:b2:bd:
ea:23:0f:3a:5f:9f:fd:97:2a:5b:7a:df:e8:93:2f:08:19:09:
1d:c0:e7:1f:db:2f:53:f1:32:1e:43:60:11:2d:b3:98:e1:e8:
dd:23:ef:65:7e:dc:a8:4a:26:e3:55:f7:8c:7b:f5:37:47:0b:
f2:73:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:04 2025 by rpki-client