Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File: h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier: p/8S0sSetkJ4m4YcqhqzFe8Tyb69v9zPGLlPf3r5BG0=
Subject key identifier: 37:C4:2A:EC:B1:78:A9:53:B9:48:F4:C6:AE:30:8D:24:2C:8E:87:4B
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 0194BBCE7998E946A7D162D17781A69CC3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: E-8vbhQrqOgxDM421GCrllAKNII.roa (hash: i8JO2h6EgpqD2l/z1ws1vhndMFZtWe/14XyRVS+B6/I=)
2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: p8soe8q+FXOiRGKwIKNhZK8et8W3P4lQ6MD8p+qqR/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:98:e9:46:a7:d1:62:d1:77:81:a6:9c:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=37c42aecb178a953b948f4c6ae308d242c8e874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:92:80:af:76:4e:57:48:95:e2:c8:01:0d:
90:63:73:1c:35:d1:1b:55:72:e8:bd:9a:72:ff:37:
33:6e:1e:0b:3e:58:a0:d9:fd:3b:96:6b:c0:eb:4f:
5b:2d:f6:e1:ca:51:bd:57:f1:10:c1:6c:a0:39:25:
d7:96:d6:c5:47:8f:37:9e:7d:fa:ee:67:08:6a:f8:
46:a6:26:a5:91:9c:6c:19:af:30:f9:0d:70:fc:e9:
f6:0f:9b:2e:e9:11:2d:d7:03:30:bc:07:3e:d8:79:
95:45:1a:d9:d1:57:0b:3b:1b:cd:f1:91:b9:5d:45:
a2:0b:79:f2:47:22:1a:81:7e:36:bc:b7:6b:d1:d3:
90:4d:d0:ac:99:7d:a2:f5:d5:1a:b7:9a:36:7e:00:
10:28:03:70:c4:c2:0a:39:18:16:8c:6a:7a:c2:db:
42:40:5c:09:d2:fe:70:bf:cf:a2:14:77:17:fb:3f:
75:a5:6c:2f:12:f2:01:0e:4b:02:90:55:20:1d:63:
08:b4:e1:4b:f9:df:99:75:d9:6f:f3:35:7e:a1:58:
5d:27:20:4d:b9:f8:2e:dd:ff:20:a8:f3:09:55:de:
ee:6e:36:39:a2:b1:bb:5c:2d:1f:aa:48:df:18:f8:
9e:bd:4b:58:96:b4:c0:5d:30:26:58:fb:3f:d2:93:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:2A:EC:B1:78:A9:53:B9:48:F4:C6:AE:30:8D:24:2C:8E:87:4B
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:73:79:67:f2:ad:6e:1a:44:0d:e0:f4:37:0d:f5:6d:d6:
ad:3f:66:9d:f4:d1:17:cc:63:f2:66:c9:cd:0b:54:42:3e:c0:
2a:5c:3f:02:ba:57:97:9c:03:49:e4:0d:5a:5d:a4:f1:70:9f:
e2:6e:44:22:5e:c7:80:14:18:43:68:77:8c:c2:ac:1c:1a:15:
a6:73:2e:82:18:3e:b4:b2:9f:90:23:11:8e:fe:ed:63:eb:7a:
e4:12:38:dc:42:59:92:9d:b6:f3:9f:19:e5:a7:ab:55:36:41:
d2:94:c3:51:f2:76:74:18:ff:c5:8c:6f:08:61:2f:a0:57:61:
d2:11:9a:14:a0:62:b9:8c:e4:32:63:7c:a0:4e:15:aa:e8:16:
0d:7b:ab:92:cc:df:fa:a2:5c:9c:c4:dd:b4:32:02:82:2b:70:
90:09:1d:b3:be:c7:75:dc:37:98:e9:c9:e0:e8:05:7c:74:ad:
c1:81:38:a6:a1:b1:4e:b5:3d:3a:4e:9e:52:18:2a:04:44:6e:
a4:51:98:7d:0f:82:b7:a1:ec:bd:08:c5:19:ee:36:89:18:e0:
33:a6:d2:d9:e2:e9:f6:ae:ed:60:53:68:1a:7c:75:5a:cf:92:
f1:56:78:60:e1:f9:4e:e4:97:ea:03:7a:24:79:e6:96:a7:41:
f3:78:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:45 2025 by rpki-client