Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier: D6Jh33n/26ocw3huu4PlMeED3Esq/eMEtdq/BBOXBl4=
Subject key identifier: C1:68:72:94:04:93:FB:2E:9A:17:BD:9E:39:F3:C6:C6:FD:1B:E5:16
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer: /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial: 0194BD1794A19420A3A02B8064D21EAF736A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number: 0199
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: uRusIuLaYYFoI3NQVOmeQdz11/TT9t3NdHS/jhT8PpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:94:a1:94:20:a3:a0:2b:80:64:d2:1e:af:73:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=c16872940493fb2e9a17bd9e39f3c6c6fd1be516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:5c:03:c7:62:9f:e0:c5:92:b9:4b:0c:c5:
55:ed:c8:88:d4:61:d7:89:37:20:6d:49:64:68:40:
33:92:82:fa:11:6c:88:0f:d8:f2:fa:30:d6:0d:35:
44:cf:e4:0f:b2:6e:0b:5b:c2:24:49:31:da:f3:fc:
d9:d4:92:bf:58:33:9d:88:f6:e1:2f:da:36:c4:8f:
8d:e0:fd:f8:17:28:54:70:c8:10:0c:f6:32:b6:6e:
58:0d:36:10:cc:a9:41:e0:b7:91:52:3b:1c:a6:5a:
63:1d:13:57:28:19:79:ba:ea:cd:cf:69:37:f1:42:
d5:aa:ec:49:da:0c:bb:9c:c1:39:b2:60:ca:d9:06:
08:26:75:9c:8e:1b:4e:f6:4c:3a:50:20:0e:5c:aa:
d8:b1:7f:11:88:32:15:07:c5:aa:ad:9d:3a:05:54:
8c:66:6d:a4:df:43:b7:8f:38:ad:98:b6:9f:c1:44:
43:58:4b:ee:7c:63:45:63:f2:38:62:ee:e4:5f:76:
c3:e0:71:39:c6:d8:5c:37:ce:c7:a0:1e:5d:ba:a3:
da:9e:43:90:e8:70:6a:cd:e4:fd:d2:ae:e0:b5:3b:
59:c3:23:1f:cd:95:32:4a:02:5a:0c:26:9e:47:d0:
67:47:6f:7a:4f:56:02:70:5f:77:84:8f:95:c0:7e:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:72:94:04:93:FB:2E:9A:17:BD:9E:39:F3:C6:C6:FD:1B:E5:16
X509v3 Authority Key Identifier:
keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:22:83:37:f8:c8:0a:d7:06:91:dc:a6:fb:20:45:e6:39:30:
a9:95:22:14:9f:93:ea:40:c7:88:b8:69:2a:44:68:78:36:32:
48:3f:3b:4b:22:06:f8:08:31:76:c2:f9:73:df:d0:3d:ff:ac:
0f:5d:3c:d6:4a:de:f3:4c:4a:60:2f:c7:1f:c8:b9:59:0d:dc:
a0:8a:df:c7:5a:12:8c:f6:0a:4a:e7:a2:f5:ab:4e:b5:e5:40:
98:33:4c:ef:1f:c6:2f:07:ab:bf:03:0d:95:e4:04:ed:34:92:
18:e5:71:16:5d:ae:2b:d9:1e:16:fa:e3:96:f5:1a:b0:d2:b9:
c1:ea:85:5d:61:c2:f1:c5:df:33:9a:2a:15:34:e1:43:3e:bd:
b2:42:09:9d:23:a1:00:d3:b7:4e:7c:a6:a0:84:06:92:83:88:
8a:34:da:89:b8:0a:e1:95:60:1d:93:86:45:d7:7c:ed:cc:b6:
8e:22:e5:69:1a:ba:86:65:29:e7:cf:69:93:fa:81:a3:01:31:
31:e7:f7:0e:8d:82:a1:7a:7d:78:bf:eb:7b:ce:db:6f:63:ba:
fd:47:d9:ea:50:0c:f2:3c:e5:2c:a4:a1:dc:e0:2f:cc:39:ed:
86:0d:5b:12:9f:61:0b:a2:f6:f5:4c:4c:2a:63:1f:82:b3:6e:
09:b9:6a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:38:53 2025 by rpki-client