Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: /ss6X3zswEoWwQQ2CRaVABAFZjN2ZdO2WF3NzH49sfs=
Subject key identifier: 28:D2:56:58:5A:60:24:71:80:69:E1:51:81:E2:2F:F1:DA:45:D2:7F
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0194BCE07F1EFEA6E696AB903FF1714F60CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: a7QPdVGW8MRFzzzQwmPyRqMGNV8QbsxcH+zLStEX1r8=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:1e:fe:a6:e6:96:ab:90:3f:f1:71:4f:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=28d256585a6024718069e15181e22ff1da45d27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:6e:4b:8d:38:66:ca:73:84:06:eb:2a:91:
79:c9:b1:eb:4f:77:38:f5:5c:4f:53:86:e7:3e:8f:
ea:bc:0a:16:0e:44:14:50:ba:7f:5b:e2:95:2f:c0:
01:a7:3b:02:f8:3c:9b:f4:a7:3d:86:87:30:0a:aa:
2c:1c:0e:f8:17:ec:57:06:1b:9c:50:77:4d:e9:4c:
6e:e4:27:f4:8b:22:da:30:3f:36:fa:be:dc:de:91:
f2:d3:ed:72:c7:60:49:4f:d3:3c:35:c6:fb:97:1c:
2d:69:14:d8:f6:c0:85:0b:38:0d:ca:c2:da:86:09:
04:05:72:93:a2:9a:dd:91:e3:4c:ee:3c:59:68:ca:
fb:1b:79:18:15:74:f6:f6:87:d5:d9:92:8a:70:5a:
0c:dc:72:a4:a1:5c:19:60:98:07:d8:1f:40:28:d0:
3c:e0:6e:f5:b1:de:6b:dd:aa:01:f6:1b:64:11:f1:
33:e6:32:a8:dc:9e:98:89:61:1f:27:da:56:f8:34:
f1:3d:41:0e:a1:3a:5c:f8:83:f0:a9:5d:09:1b:7c:
cf:b7:61:70:22:63:90:e7:6e:3e:d3:cb:6d:c9:37:
fd:fe:6b:b5:b5:22:97:45:40:01:4e:50:d5:a9:bf:
0b:78:40:55:a2:28:7f:be:f4:24:ba:7e:39:26:02:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:56:58:5A:60:24:71:80:69:E1:51:81:E2:2F:F1:DA:45:D2:7F
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:29:d8:87:cd:87:57:ca:c2:39:fd:19:57:61:9e:e8:71:
7d:4d:34:29:41:72:d2:47:9f:88:b3:84:0e:1c:5d:13:64:ac:
be:af:51:5c:42:3f:2c:c4:64:db:ab:2a:e5:2c:95:ad:5f:db:
50:0b:dc:0c:8b:48:f4:87:41:e6:54:b2:ac:ab:0f:d4:b0:ca:
c0:a4:5a:89:27:ed:d0:51:1c:06:da:d0:21:b5:d8:75:a1:6b:
5f:fa:61:24:ca:bd:72:bb:36:44:80:c1:c3:cb:22:80:53:a9:
ba:be:08:5d:dd:3f:c6:f0:8d:e5:de:57:15:93:be:30:94:e1:
03:b0:19:98:9e:5a:ab:7d:b1:c1:b7:77:6c:59:2e:74:5f:86:
6b:e2:f0:3d:bf:26:0c:14:4e:28:e4:a9:38:17:51:ae:3a:05:
02:d6:51:19:a6:50:12:ba:e0:4d:a4:50:9e:cc:97:cc:20:22:
81:0e:53:5b:94:17:d3:05:39:39:c4:4a:a1:b0:ab:4c:4b:67:
bc:a2:15:9c:1f:f2:ba:e7:48:d9:78:9d:3b:ed:cb:ba:68:36:
d5:d2:03:c1:16:35:ca:76:4a:8e:02:04:cc:f2:fb:5b:b7:6a:
d3:8d:bd:c5:79:99:d1:f5:38:d6:44:76:31:9d:ed:d4:fe:c1:
06:cd:70:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:47 2025 by rpki-client