Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
File: RHtl-fh6qPdA1aF6cub4vB5diI8.mft (raw, json)
Hash identifier: J6GnRemo+TnVKDUZUtN7qC+UGpuPAVXMJZfgbJAPau8=
Subject key identifier: 2B:B7:31:D2:E4:54:F5:03:BA:7E:7D:DF:EF:4B:81:E1:E9:19:78:F9
Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Certificate serial: 0194BC72DD9A20256365A5BAF004BC9BA03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: RHtl-fh6qPdA1aF6cub4vB5diI8.crl (hash: kqiJ+Cj1UWXhh7Te3sHAZDYqSnBBR3FDdrcu82gxxhQ=)
2: yVtJV2wHnYYgGKReSCSnZYps7Ag.roa (hash: AsvRlZAtzH1D3I297oQkwJy/CORxgTVcaX2DwwZRFUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:9a:20:25:63:65:a5:ba:f0:04:bc:9b:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=2bb731d2e454f503ba7e7ddfef4b81e1e91978f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:96:b7:10:53:d4:b2:ca:30:47:e7:9c:47:
29:33:5a:05:0c:76:23:e5:14:46:19:33:d2:c0:49:
1e:00:05:f4:4b:57:ff:d2:9e:62:4d:49:4a:d6:83:
10:15:6d:0a:33:89:94:b0:d5:11:eb:e0:f9:b2:62:
0f:69:c6:19:76:1d:8e:f3:ed:9a:70:97:99:e2:5b:
9b:16:67:21:e4:af:89:ae:40:83:4a:4d:ed:0d:76:
eb:bc:c7:98:2a:52:36:ac:48:91:39:49:64:cd:91:
9d:7a:12:4e:d3:83:e1:af:d5:2b:fc:da:80:3c:18:
35:e7:3d:72:d7:ca:a6:65:db:7d:6b:fd:c8:12:e0:
42:17:b2:e6:d9:13:cc:c2:1e:dd:a1:27:da:47:a9:
c1:36:7f:d8:16:23:7d:a8:b5:31:0a:1b:b2:8f:04:
91:1c:13:80:de:64:e2:a0:b7:fe:a4:8d:80:db:52:
ba:80:dd:01:51:69:db:12:58:17:dc:10:47:8c:84:
58:55:f9:62:79:82:36:11:54:31:c0:3d:f2:02:64:
47:f5:64:25:de:5e:d9:33:90:e5:a2:c2:2b:6f:a3:
7b:a0:6b:e6:4d:82:4a:c6:f3:c5:a8:cf:37:92:40:
8d:51:85:73:c5:3e:ed:80:ce:aa:c1:6c:a8:c3:48:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:31:D2:E4:54:F5:03:BA:7E:7D:DF:EF:4B:81:E1:E9:19:78:F9
X509v3 Authority Key Identifier:
keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:aa:e4:62:be:e0:19:a2:07:7e:fb:84:77:23:55:2a:d1:86:
ce:14:5a:1e:71:fa:7e:55:47:9e:65:cf:bb:0d:1a:3c:bc:35:
fb:a1:6b:27:ab:22:10:ed:b0:44:e6:65:b5:14:8f:7f:3a:cc:
50:92:d2:b8:5a:79:cf:16:a3:7a:a7:58:82:6b:50:b2:8d:75:
fb:ec:f6:15:16:df:4d:c4:81:26:9d:1d:f4:a4:5a:44:b1:3f:
f2:90:c0:7d:34:04:10:6e:25:fb:7e:68:7d:dd:9a:b1:23:4d:
a4:01:f3:74:68:93:34:9c:ea:60:9b:5d:93:74:bf:cc:17:cf:
7e:34:40:f8:ef:6a:71:59:1c:e5:39:0f:85:83:44:25:7e:dc:
ba:28:e6:ca:e1:82:18:8d:4a:46:fc:70:4a:a4:f4:0e:d4:a1:
b5:d8:82:31:32:5a:bc:21:78:bd:b6:d2:4d:8e:60:25:85:74:
e3:ec:c3:2f:1a:dc:a5:0d:1f:22:8a:5d:39:c1:a4:1e:9e:71:
1d:48:8a:00:79:96:68:a5:91:99:7f:67:e2:ef:4f:7b:a0:db:
84:1f:f2:de:1c:f1:7c:a7:b2:04:b3:b7:d1:67:47:4d:51:95:
e5:66:a0:43:fe:bc:f7:dc:47:44:ef:da:87:22:3d:91:81:64:
49:27:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:45 2025 by rpki-client