Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: 2dikk+MejkvRQfk6A8IyKD7FOOey6mEiqPNhYTDd8UA=
Subject key identifier: 81:D2:D5:96:71:84:8C:1A:58:49:1B:E8:D2:55:B1:48:7B:20:CA:07
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 0194BD4EC026AF9809FFFB6E1934BA033514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0B34
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: MNRH0tbaUnSFuXS5DuxsiKA/EjE3nC7RksnadVyceZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:26:af:98:09:ff:fb:6e:19:34:ba:03:35:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=81d2d59671848c1a58491be8d255b1487b20ca07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:f6:bd:02:d9:b0:a9:6e:98:25:78:3b:af:
ce:fb:c5:85:3c:79:9e:38:dc:e5:46:3f:fb:55:7c:
07:8a:9f:ba:1f:cd:09:76:f3:c3:cb:e2:b3:66:28:
ff:32:01:85:2b:70:17:15:b8:b8:f6:74:78:32:c9:
a9:0f:7a:69:a0:d7:12:e8:2d:81:ec:f5:8a:16:f9:
9d:8f:a9:fb:5d:a5:ec:ae:51:ec:ca:40:d7:0d:6c:
14:b9:ef:79:01:6b:17:05:cb:06:03:ea:47:12:46:
bf:8a:90:ac:22:01:4a:c8:9b:be:93:11:da:74:10:
14:79:da:59:aa:48:ba:bc:51:bf:96:2f:46:bd:93:
24:6a:e8:d9:e9:66:06:59:48:15:cf:d4:65:8a:ee:
95:e1:68:09:8c:b6:23:91:c5:89:27:a7:c0:55:53:
1a:67:e1:48:a9:a7:69:7c:65:59:3e:74:48:49:79:
16:57:e9:9c:87:94:b4:b4:7f:0e:6c:9e:68:79:b6:
b1:63:81:aa:7c:ac:e5:66:3c:81:9a:e0:8a:38:cf:
bb:c6:f3:bc:b1:9e:6b:59:c0:fa:17:62:bc:6a:94:
81:66:ff:b8:2a:43:e7:0f:96:40:7b:66:bd:b2:4d:
d7:95:db:69:d5:e3:e6:ed:4f:9a:ca:6d:ad:ae:d6:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:D5:96:71:84:8C:1A:58:49:1B:E8:D2:55:B1:48:7B:20:CA:07
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:2b:d6:92:92:e4:fa:5f:85:4f:3b:a8:c4:30:91:1a:6e:
b7:c9:df:7d:08:a5:5c:bc:2e:b0:c5:68:1f:b6:64:db:64:11:
52:00:80:f0:f6:db:5b:22:57:9b:d7:88:fe:f5:bb:c5:7b:de:
02:d0:6a:fd:73:65:40:04:a2:c2:ed:72:c8:89:b6:4b:4e:68:
ed:fd:05:d1:6f:13:b9:83:96:eb:ce:15:8d:df:5a:8c:ef:22:
2c:fb:74:43:6a:5f:11:5e:91:ef:cb:a3:dc:4f:14:17:e7:b3:
1f:25:4e:ba:db:3c:da:f5:d5:2e:d4:43:2e:17:7d:5e:6c:bf:
c1:9d:69:15:c9:38:cb:33:3b:12:f6:3c:ef:62:af:50:53:6e:
11:22:81:7c:52:a6:b8:f9:25:73:b7:f9:66:f0:9b:34:21:0a:
6a:e4:ab:44:b4:80:a2:8e:f6:ee:25:d5:3b:43:32:c7:66:87:
e3:c9:2a:f7:d0:6e:4e:a2:18:76:2f:dd:2e:c8:3b:a3:d3:8d:
a0:f5:9c:fb:fd:72:b1:70:10:1c:6d:bd:09:98:c7:e0:28:5d:
ab:73:9f:26:7a:92:8c:47:66:99:80:dd:d5:f1:14:1d:fc:0c:
7f:d4:b3:3f:76:c1:42:50:be:dc:36:25:21:94:1e:5b:89:2c:
73:85:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:24 2025 by rpki-client