Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: au1H2yjMyoykA2911PN+Ted7/p/VcRDg5D+8y706bI4=
Subject key identifier: DE:B2:4C:BE:9B:F8:7D:60:C7:4B:92:37:18:2F:3E:40:1A:AC:D8:D9
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0194BC3C9FA7DA7B2744251E839C959EC749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: qjeYQ+56HS83xTs5bfoXOBWfSOwMgH0wLKwh5n1y+Gg=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:a7:da:7b:27:44:25:1e:83:9c:95:9e:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=deb24cbe9bf87d60c74b9237182f3e401aacd8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:23:79:87:df:80:11:06:6d:37:bf:3e:ab:
2e:4b:88:c2:68:79:f6:38:6b:7e:f2:dc:ed:2c:96:
da:7b:df:d7:60:3e:92:9c:7c:15:87:88:70:0c:6b:
c6:50:67:e1:13:55:7c:c9:08:32:00:04:30:71:78:
09:a1:c1:fa:93:df:41:cd:d6:d4:d2:bb:a2:69:5d:
b4:04:fa:d3:c1:fe:f2:6a:a3:ec:c4:fd:69:84:62:
7f:9d:86:92:e2:23:21:c2:64:ed:88:17:9a:6d:cf:
5d:f9:a6:2e:a0:14:2e:0c:4e:7b:37:57:15:df:63:
86:c9:e2:b3:01:74:c1:88:d7:b1:d4:37:0b:83:bb:
8b:17:1e:16:9f:42:5b:9f:cd:ab:5e:2d:eb:d2:ca:
9e:3c:da:8c:98:12:5c:ed:cd:ec:38:80:14:74:56:
28:ff:c4:17:92:cc:f7:f7:5a:3d:f0:24:a3:09:82:
91:f8:8a:05:e7:5f:2c:9d:ef:7f:9f:85:5b:28:87:
2a:30:07:a1:08:39:95:b4:b5:30:b2:52:53:d7:69:
14:91:6e:53:8e:0f:e1:50:4c:cf:4c:31:4e:bb:23:
a5:04:ec:4d:62:73:49:f4:f0:8a:14:2e:4f:84:e8:
d6:d6:2c:6d:f0:43:e0:e2:02:c8:79:36:c7:93:03:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:4C:BE:9B:F8:7D:60:C7:4B:92:37:18:2F:3E:40:1A:AC:D8:D9
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f6:5f:27:6d:e3:8a:ce:58:7d:16:17:34:57:49:fa:7e:71:
63:ad:5f:69:5b:e3:24:00:99:b6:69:17:bf:c3:cb:86:69:f0:
29:4d:87:84:21:71:8b:17:2a:45:1e:63:1b:ba:3c:b9:45:03:
cf:d8:49:61:ed:00:78:5d:fb:b7:ec:05:90:a6:57:6f:18:1b:
12:17:da:89:f7:36:e0:d8:23:22:2b:04:4d:f3:08:56:a2:3a:
d2:58:c8:ee:ca:aa:ad:89:9d:8e:51:be:34:74:c1:d4:fb:dd:
e5:96:2a:3b:f8:60:03:48:cf:85:6f:02:1c:80:0b:92:c4:43:
f6:13:c8:a3:c2:bb:06:07:87:26:07:58:d0:e6:59:7e:2c:4b:
60:88:ec:27:55:25:86:00:e3:07:87:e4:c9:53:92:8a:91:e0:
0a:90:8a:5b:90:6c:6b:38:5e:b7:67:2f:8e:5c:7b:f4:2e:ea:
2f:34:e7:bf:ef:ca:ad:76:9f:e0:75:2f:83:7c:f0:39:ba:8f:
5a:22:89:9d:76:2b:d7:24:bd:f8:a3:f4:18:d9:48:f7:00:72:
0b:b6:80:95:30:3a:51:ff:9a:2c:3a:0d:45:6d:db:a8:80:85:
33:21:1e:57:98:08:fd:1f:6f:29:78:86:6a:c8:13:1f:41:a4:
6b:4b:e9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:45 2025 by rpki-client