Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: azaJjfSyUfKIGYg+mq1k4RJuynzvM2SpyCFf9Sca2m8=
Subject key identifier: 3E:70:39:05:8A:F3:53:F0:32:B7:E1:66:C5:6A:4F:20:25:48:E3:F2
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 0194BC728C20A520DA50B5E51F307BEFE935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0861
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: aiiIUMkgcA/C9WDV2GlX/oK0jcUSeYImkZ3znSHBFGY=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8c:20:a5:20:da:50:b5:e5:1f:30:7b:ef:e9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=3e7039058af353f032b7e166c56a4f202548e3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:ff:b9:85:68:64:48:c2:1e:9d:f4:e2:15:
71:d6:31:f0:2d:b7:c7:4a:8f:a0:53:59:6e:b4:68:
ef:d5:0f:28:8c:32:6d:6e:0e:56:e9:2b:ba:41:e2:
d4:58:bf:b5:8e:df:ae:2a:8b:ec:78:e6:32:5e:ca:
e3:7b:31:8d:00:83:08:c9:c6:88:5e:da:e3:e8:8c:
70:f8:c4:b6:30:73:70:fb:ec:34:b0:ea:48:f6:bb:
d4:fd:cc:6a:97:f1:b0:7f:e3:87:5b:41:92:bf:ed:
f8:99:2b:d9:1a:d3:55:a4:27:b0:07:a1:97:ed:e6:
43:5a:11:73:d6:8d:ee:01:ae:cb:65:3d:a0:ca:aa:
49:4f:9f:38:bf:4c:b9:db:53:04:e6:f5:ef:91:9e:
14:23:01:31:47:75:be:d6:08:66:9c:06:0e:4e:22:
b2:4d:82:6c:03:fc:80:4b:cc:7f:1f:c0:71:66:7e:
87:75:4d:ba:09:77:b4:06:f9:0e:02:66:13:6a:74:
19:09:28:98:e2:43:43:f9:41:3e:85:ef:b6:b5:d2:
5e:34:97:b0:5f:2b:50:79:3f:13:44:c4:c3:6e:c6:
65:5b:75:79:3a:9e:c3:c3:29:50:d5:da:0e:26:38:
b9:17:89:58:6e:05:90:4d:6c:f9:02:97:b9:ab:91:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:39:05:8A:F3:53:F0:32:B7:E1:66:C5:6A:4F:20:25:48:E3:F2
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:c8:b4:51:53:cd:01:c0:a4:ef:be:91:e7:3c:02:2a:84:
27:da:50:6a:d9:9b:e5:d1:13:64:ee:06:3c:45:d0:1c:54:36:
08:e0:a0:9d:05:bb:81:2e:43:ca:d2:37:61:9b:ed:b1:e9:42:
ab:53:d0:77:c4:51:6a:c2:f0:1e:bb:2a:f3:80:ef:96:63:db:
96:09:60:f7:30:c2:28:90:36:dd:dd:86:c6:4d:fe:f0:83:e5:
d9:d0:45:df:41:4b:af:b2:fe:fe:0d:c7:98:11:13:b6:83:94:
06:cf:f6:ba:de:6a:1e:35:b8:08:0d:21:51:91:5e:be:01:e3:
df:9b:57:84:80:c8:4e:34:5e:f5:b3:b8:20:cc:62:6f:10:2f:
62:27:fa:f4:7f:73:ee:a1:23:8a:0d:a7:2c:a6:f3:73:39:10:
46:72:ba:70:27:48:cb:2c:73:39:46:c6:dd:ce:f9:6a:ba:86:
e8:33:64:2f:97:b3:61:4d:f0:0a:92:66:3a:2e:62:2a:5d:42:
89:db:17:06:95:c2:11:14:18:a9:e7:a5:a9:bc:e8:63:bc:2c:
f9:6e:13:82:03:3e:67:e7:7b:90:f6:bb:2a:39:ef:23:1a:b1:
b1:9b:3c:14:28:ec:ed:9e:df:c0:55:d4:d1:4a:67:da:96:14:
fa:b0:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:32 2025 by rpki-client