Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: pZIsq5yanxR8eEs7rGlnNx+xq7w9LHxKcBEkC7hH1v8=
Subject key identifier: 98:18:40:BF:7B:61:D4:0A:1E:4E:38:3A:43:80:CC:2A:A9:B2:7C:A8
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0194BCE0C05C6C814A45626F332D2471E22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0724
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: L60FRWMHNJBtl3GU4BgeSol5FCMF9QrHd0S+CwHBDPo=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:5c:6c:81:4a:45:62:6f:33:2d:24:71:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=981840bf7b61d40a1e4e383a4380cc2aa9b27ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:49:8f:9a:e2:24:3b:83:f3:5c:2c:21:ec:
f8:02:61:4a:15:e3:5f:12:11:ad:76:57:64:97:42:
82:b1:97:fd:3d:1f:9f:b7:cb:61:1d:33:a6:f2:c1:
74:a7:fe:ec:a9:c7:21:8e:67:39:4b:c4:81:6d:75:
b8:01:3b:c2:1f:80:d1:38:df:86:21:f4:74:08:3b:
fd:58:95:3f:39:88:3a:87:a4:fc:5c:94:4d:36:a4:
0e:aa:68:11:7b:c0:2b:7d:4a:af:19:d6:c5:9e:79:
e9:20:4b:f9:9a:69:66:10:18:03:b4:ec:fb:8e:74:
2a:af:e9:ed:e9:c1:ba:ea:86:7f:92:2a:83:32:da:
7b:5e:8d:f1:c6:2c:1a:fd:49:e8:6d:92:69:57:5d:
f4:2d:78:0c:28:e5:50:75:20:48:e1:39:db:c0:43:
3e:2d:ef:4b:84:20:5a:31:8e:7d:8f:a1:3f:74:f8:
6b:54:a7:ab:d8:d4:3e:16:f9:ff:cd:89:35:76:df:
78:7b:f0:bc:73:19:49:2f:22:32:11:a2:ac:c0:ba:
80:90:c5:ef:e1:bb:39:9d:d7:1f:23:e1:51:24:ca:
27:63:76:f0:90:f3:8e:87:9e:26:35:26:9b:b3:27:
e8:4d:e7:ea:53:e3:fd:c8:74:2a:02:0b:5a:98:ee:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:18:40:BF:7B:61:D4:0A:1E:4E:38:3A:43:80:CC:2A:A9:B2:7C:A8
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:47:3d:8d:32:45:8c:b9:07:27:7a:20:a5:e8:38:3c:ac:9b:
06:08:fc:01:e3:71:6a:a2:af:fd:6d:a5:5b:45:14:7f:70:5b:
38:21:fb:e5:46:02:f1:13:0f:01:b7:9c:a1:28:be:63:a0:be:
5e:72:d5:e6:59:83:b7:23:d8:cf:2b:af:5d:ee:8f:3a:c2:4a:
7f:72:e1:8e:49:1f:e3:58:85:19:eb:6f:5b:69:94:7f:64:32:
bd:bb:83:ad:15:c0:77:ca:93:f0:8e:e5:8b:a2:e2:dc:6e:ef:
f6:6a:0b:7f:75:55:a9:e3:eb:29:9b:bc:6a:be:b8:dd:52:31:
04:00:be:63:8a:c6:2c:57:28:b3:b9:2c:c2:d8:c2:80:6b:ae:
34:b9:70:85:b9:4a:4c:94:b2:4f:6b:c3:1d:80:b8:44:a4:16:
b5:89:e5:15:21:0c:78:4d:a1:4b:07:64:dd:9e:13:09:e5:7f:
a7:43:04:1b:8b:7a:1e:62:65:64:34:a8:b5:57:f8:31:37:53:
d2:b9:25:3a:0c:a7:e8:ec:82:79:97:f9:f7:c1:47:5b:59:3c:
32:18:12:72:04:9f:55:32:d7:b5:5f:31:90:37:95:66:f8:f5:
ba:dc:08:5c:d6:4c:42:cd:a1:79:59:90:47:f0:00:06:f8:a5:
f1:a4:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:12 2025 by rpki-client