Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: gAPM3QAZ4KiVmsKQZHe6h9BxAeNm2nvSrqGMPafBrho=
Subject key identifier: 7C:33:B2:A0:5D:A5:57:ED:07:0F:22:EB:84:1D:F6:FE:58:B5:16:26
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 0194BD4E4A66A4EB0BF6B025DFAB558511AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: 7OxZBlcFd4IcTWEs+gBz3SMSzQksSJ1pF7snJpwWuFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:66:a4:eb:0b:f6:b0:25:df:ab:55:85:11:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=7c33b2a05da557ed070f22eb841df6fe58b51626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:bd:71:6a:54:24:fd:e2:03:3a:69:e9:eb:
03:c8:1e:62:66:ce:12:ab:46:9b:2a:1f:38:b0:fb:
c4:4b:88:14:67:4e:f8:15:45:c3:9e:ac:96:ab:78:
f6:25:61:5c:12:ca:6e:1d:dc:c4:97:36:9c:d1:2c:
b1:ab:27:1e:2f:81:75:ed:ef:4d:04:b0:dc:3f:36:
20:6d:76:05:34:01:ff:1d:ee:52:67:aa:8e:39:28:
e3:48:6a:10:14:04:f3:78:69:0a:df:50:87:06:a6:
0d:cb:f3:d1:f2:e0:68:fa:45:35:03:17:17:c8:79:
00:dc:7c:aa:be:f1:3e:cf:70:b4:6d:b3:20:9c:bf:
0a:3f:aa:70:2f:1d:d4:14:77:22:f4:a2:fa:62:c5:
7c:86:f1:fc:13:fa:0a:59:fb:b5:af:60:91:dd:fc:
e2:b0:d4:e1:d6:d7:bb:d1:24:37:01:5d:e1:a8:70:
09:f8:0d:c9:23:e5:60:b3:34:fd:2d:9b:a3:a7:9c:
ee:c9:92:5e:34:8e:b4:86:c2:79:32:52:fe:9c:79:
22:d5:e5:bc:a2:09:96:23:60:c6:ba:1d:61:17:01:
11:76:44:dc:25:95:cc:0a:3f:f3:57:56:e1:3c:7e:
6a:b5:f2:e8:26:da:1c:c2:6c:a5:f6:22:c8:52:10:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:B2:A0:5D:A5:57:ED:07:0F:22:EB:84:1D:F6:FE:58:B5:16:26
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ab:36:7d:f2:e6:8d:db:e5:37:58:41:62:6c:4e:d1:4b:a4:
86:a6:5c:97:23:56:d8:65:ea:86:76:52:c3:7a:67:a4:a9:b1:
c4:c6:ab:ae:0a:51:b5:6f:5a:ea:1f:3c:a1:2f:11:6c:65:2e:
7c:b3:8a:2e:90:69:90:7d:7c:f9:eb:97:c1:23:70:f5:c2:9d:
13:49:74:5d:a3:a2:f0:c1:30:6d:41:5f:49:87:ae:24:39:46:
d0:34:c0:53:2b:fe:f0:e8:06:01:05:23:0b:39:ab:ba:1b:a0:
4b:8a:19:90:ad:0e:86:97:d0:10:3f:78:6e:55:f1:cb:d4:00:
c8:6b:89:7a:58:e9:31:0c:d4:3e:c8:39:50:1a:d4:ca:2e:e8:
5a:3a:44:da:05:41:bd:2a:49:bd:24:3a:db:bc:f1:eb:6d:09:
dd:84:77:6f:0a:6c:bc:31:fa:a1:29:d1:c4:e3:53:35:26:93:
65:da:1a:ad:d5:4f:a8:50:fc:48:2d:62:fe:17:a8:27:f3:11:
9e:d7:ba:8e:6d:b9:a0:da:e8:64:12:a3:86:4e:2d:88:6b:86:
5e:04:f3:bf:e8:d7:8d:df:ca:5c:a0:68:81:5a:b7:26:68:18:
96:8b:69:e7:14:f4:ec:43:71:64:d9:65:7b:f6:b7:4c:0c:31:
2a:21:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:58 2025 by rpki-client