Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: Zh/wDjXJ24GeOIjX2ZjdGca4kb4gkuaR3PQLm3jh5Oo=
Subject key identifier: 72:1B:16:BC:A3:10:DD:B4:EF:72:8D:C1:72:15:CD:BF:06:F0:4A:B1
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 0194BD4E76919EBAFBDC51DEFA27177545CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 04A4
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: Ru0vPJpzk9Kf51qHonpxQxgPoWOT76O+xghEaSdNRuA=)
2: vNb5RJ1NWF9KAT0KbsLINglMmW4.roa (hash: jXTgKmQPGBZpjKgqqLkxLQhegQk4xAz/b6i4eexj5wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:91:9e:ba:fb:dc:51:de:fa:27:17:75:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=721b16bca310ddb4ef728dc17215cdbf06f04ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:fa:8f:19:07:11:aa:55:42:53:15:4b:c6:
c4:16:95:ec:b7:97:4b:3f:47:25:ae:ae:20:12:e9:
62:81:63:ea:0c:09:4e:ff:40:45:20:09:b9:ee:76:
10:15:a8:59:1a:c3:43:df:2b:1a:c7:fe:75:6e:07:
7a:d4:06:ee:fd:fb:2d:08:a1:08:e9:96:d2:e6:94:
a2:b7:4d:ae:4f:c4:dc:23:3d:59:c4:a4:fa:b8:1a:
7e:ce:fa:c7:65:27:69:c7:30:a9:67:b7:6d:03:de:
3b:f9:91:41:ca:1d:0d:e0:90:c6:0b:cb:46:27:cb:
61:9b:11:11:47:04:49:32:74:a5:8c:8d:63:db:92:
12:15:bb:1d:aa:62:fd:bb:e6:89:3c:db:73:4c:93:
e9:58:07:b9:70:fc:d0:ad:45:2f:41:f0:8b:bd:5d:
3e:9e:f6:4d:e7:d4:31:96:3f:1c:0c:a6:f8:93:fe:
08:23:cc:e1:5d:9e:ac:82:7c:be:6c:b7:b8:7c:f8:
57:80:7e:74:d2:ab:c0:c6:66:80:79:37:c7:e4:11:
ae:85:3c:77:e7:77:eb:b2:8a:d8:a5:81:11:cd:14:
a8:42:b9:3a:39:85:d5:f8:08:41:a3:02:30:48:3a:
60:2c:99:60:40:2c:fd:7c:0a:83:46:0f:53:86:ba:
d5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:16:BC:A3:10:DD:B4:EF:72:8D:C1:72:15:CD:BF:06:F0:4A:B1
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:ab:3f:11:48:db:1c:e6:b0:40:36:0f:2a:e9:4c:f5:77:
c4:4d:d4:26:c2:f5:7c:40:47:a1:f5:67:bf:54:0b:14:0e:de:
53:ab:8f:d9:7c:88:81:f2:ec:e7:48:6a:94:e4:9d:e1:b2:0b:
33:bd:9a:f9:01:eb:78:4f:4a:f6:d3:10:8a:02:09:ae:ca:1d:
40:6b:1c:04:f5:d1:53:1a:5c:6c:c4:42:20:a0:c6:4d:14:cf:
8a:c4:f7:8d:4e:81:48:5c:5d:31:17:69:fe:a3:31:c7:bd:7e:
b8:77:8d:56:43:2b:d1:d2:26:57:20:1a:e9:68:0a:68:3f:c1:
9a:b3:67:d5:8e:f3:18:0e:a5:34:67:ad:20:36:1c:65:62:ba:
74:b6:31:50:e7:3a:81:13:96:50:c4:61:28:af:70:d5:80:0f:
4e:de:44:7f:c0:20:bc:ae:c7:6a:ed:72:f1:e8:ce:92:1c:96:
41:74:8d:fc:bb:5b:ec:c0:10:60:32:18:54:f5:d8:0b:d1:bc:
cd:46:c6:13:a7:cf:53:ef:6a:42:17:e3:66:8b:ec:e3:3a:70:
7a:f1:be:bb:18:f9:1a:22:77:11:a9:d6:d8:3f:42:3c:f4:db:
25:03:1d:dc:9f:ec:6f:6b:6a:c3:66:33:62:d6:1d:2a:86:d1:
59:86:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:31 2025 by rpki-client