Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: vs3F3hQtT4p3g3Pyl3d2mgRWNQ4seDsZmBipr42Ek6g=
Subject key identifier: DE:89:7E:C5:93:F6:56:1E:7B:0B:7D:4C:0D:0C:90:E5:27:A2:50:55
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0194BCA9932B800D11BC766E4FE37BC5AFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: DcHVARP2g5+H4noh+ekNCMZdgfUwkKDL0pNrZic3xoc=)
4: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:93:2b:80:0d:11:bc:76:6e:4f:e3:7b:c5:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=de897ec593f6561e7b0b7d4c0d0c90e527a25055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:d9:d2:06:d4:41:5c:3a:dd:1c:fc:1d:cd:
74:8b:97:37:b2:c7:87:61:08:db:e5:66:69:39:ed:
3e:23:04:04:bd:40:c2:89:81:d9:14:23:db:93:15:
03:4d:9a:b9:84:48:ef:e9:e7:8f:19:75:d0:c8:7c:
fa:da:3d:4a:64:5b:3b:50:44:26:f1:95:a9:f2:c4:
a1:5e:7a:3c:8a:1f:08:d5:24:c2:9b:76:5f:11:c6:
c2:11:01:ad:c4:3f:0a:ba:db:7d:ca:f8:31:47:81:
eb:0c:88:9f:91:02:db:fd:95:a2:c6:c7:39:ae:2f:
82:07:ac:d8:98:aa:fe:8f:cf:e3:1a:30:6e:cf:5f:
26:70:fa:6b:b9:23:74:33:a8:da:9f:65:9c:72:8e:
da:3d:2b:00:b4:08:11:14:43:03:93:7e:00:c0:85:
36:d8:52:e7:29:6d:2e:87:b7:92:30:d3:ba:37:eb:
f5:80:6b:38:30:2c:51:d2:da:58:fe:c5:e9:1a:2a:
60:44:5b:d8:8e:e4:3f:1b:95:d1:b8:00:40:a3:8b:
c4:59:27:da:b4:c1:ec:28:45:d0:5e:3d:89:f2:b1:
cb:1b:bb:e9:ab:b7:7a:00:85:df:74:0a:9e:e5:ed:
cd:d4:d2:a8:ef:4b:3c:e1:27:b5:ff:d2:8d:c9:bb:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:7E:C5:93:F6:56:1E:7B:0B:7D:4C:0D:0C:90:E5:27:A2:50:55
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:ab:33:41:95:83:14:2e:e1:c5:87:51:51:3d:52:53:1b:
7f:8a:a6:74:d8:a5:ce:69:41:ec:73:1e:40:9a:b7:7e:72:ad:
f1:a5:5f:82:1e:1c:4b:7a:62:75:7c:ec:42:0c:e4:66:c4:be:
a4:bf:fc:eb:ac:8c:53:f4:f8:31:f4:97:a8:c7:67:d0:e0:47:
4f:98:a8:9c:9c:2a:4e:25:40:46:00:d6:00:77:2a:89:95:fa:
25:d6:6c:be:04:ed:a2:ce:60:46:fb:b2:40:93:2d:41:38:c3:
c8:30:20:93:93:01:23:5a:b7:ce:8f:ec:3d:3e:ea:f2:25:e7:
98:df:36:94:ba:57:8e:05:70:a2:b0:9b:64:38:2e:87:37:fb:
19:a0:00:29:11:21:7e:39:03:35:e7:f0:60:c7:d9:f8:60:94:
c8:ec:d3:64:34:de:39:99:dd:20:21:cf:5c:4c:c9:7b:f2:0e:
45:16:34:24:ae:a1:9b:c9:3a:9a:8f:dd:f1:ae:0b:8b:38:55:
c4:6d:2d:bf:b8:22:b6:4b:26:f8:83:ac:58:d9:f2:ec:42:3e:
75:49:72:79:6e:7c:0c:b1:1b:ce:79:36:b8:67:25:0e:9e:30:
fa:69:82:09:51:39:41:05:ae:6c:93:53:aa:45:d1:e5:ec:62:
25:3c:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:52 2025 by rpki-client