Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: qAINgyc01iuyx5FAEZAQNMJls+q588YXScX4G0K996c=
Subject key identifier: 1E:85:CF:F9:EA:AB:FE:BA:CC:52:CF:BB:D4:61:AC:95:8B:BA:8D:B7
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 0194BC72AA8ABA2A972334F284CDEEB902C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: DgiayxzMgYPSdkIshnnnb636wFJEHG+86sdMduEX6Pc=)
2: yqQz2IsKQ7pg4y2EENErlYnu65I.roa (hash: 3bFflKEwuUHPYtPrbotsuT6N+1ZC/V/hbgoTc6FAPLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:8a:ba:2a:97:23:34:f2:84:cd:ee:b9:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=1e85cff9eaabfebacc52cfbbd461ac958bba8db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:7e:1e:64:a8:83:27:7a:07:9f:79:df:ae:
10:d0:0e:a9:e0:7b:47:31:47:14:3c:ff:07:0c:12:
0f:7e:3f:2f:97:a9:33:46:72:dd:00:69:24:58:24:
7d:08:1b:30:40:a9:2b:e2:a2:93:2e:ab:fa:ef:65:
70:59:07:11:cb:4e:60:7b:05:75:01:4a:9a:76:2c:
c8:ad:5d:41:bc:a0:de:16:36:37:70:82:83:d3:57:
5e:d6:fe:a3:d7:26:91:97:d8:c6:c4:c9:4b:9d:bd:
53:63:b1:c9:77:8d:88:ad:b3:3a:67:72:7b:64:81:
7b:3e:34:da:ca:f2:0c:ec:e9:6a:cc:4b:df:04:6b:
d8:86:a2:fb:e8:04:a2:4f:92:81:6f:5a:af:bf:1a:
6f:61:b7:65:2a:85:82:40:0d:5f:c2:97:c7:a8:80:
5c:84:5e:34:08:9d:67:4a:5f:4a:4e:78:98:a8:87:
83:77:b7:26:76:bb:0b:7e:b9:d1:5b:08:e5:0f:44:
07:1d:1e:57:fa:f4:8a:e6:43:3e:48:d9:38:d1:86:
d7:e0:d6:07:80:35:0b:f0:d9:e2:2d:a7:9f:6d:ef:
7f:81:4f:f9:7b:cb:f8:e1:4c:2e:0e:81:d6:85:95:
8e:2c:b5:cf:77:fc:37:1e:7f:ed:30:54:af:e5:de:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:CF:F9:EA:AB:FE:BA:CC:52:CF:BB:D4:61:AC:95:8B:BA:8D:B7
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:df:a1:43:a1:ad:a7:c9:59:13:6d:a7:be:87:40:f7:73:
d8:91:87:3c:70:b4:46:aa:07:c3:c2:69:46:d6:ff:96:63:d3:
89:a7:f5:9d:c3:1d:fe:a2:43:83:fc:15:00:ee:d8:0c:b2:88:
1d:ce:fe:84:8b:31:76:ad:25:c7:11:c0:88:53:ee:62:21:46:
3e:73:fa:e3:55:34:c0:05:31:64:3b:5a:0b:44:00:3d:dc:6f:
e6:b8:50:a6:5d:1e:0e:1a:9c:74:b7:d4:c2:c8:3d:5e:5c:4b:
33:f0:9d:aa:98:4e:aa:af:1c:ec:23:27:b0:a0:6e:91:ec:00:
65:46:b6:88:51:24:e0:85:33:be:5d:30:86:60:b8:e5:67:14:
17:2e:76:e5:f2:93:c2:cb:36:ab:5c:f5:85:f8:63:50:dd:42:
ff:27:b2:f3:5e:b9:ec:f3:91:24:d9:58:bf:30:81:ae:5e:71:
d3:2e:27:bc:d1:59:c7:55:28:d1:a8:6d:b4:1e:f2:c9:26:e0:
43:76:aa:f7:f1:c8:9b:d2:d6:9e:97:ce:d6:47:3e:22:35:34:
be:6a:c3:7f:ec:5b:94:80:c1:8a:d4:32:cb:f7:c0:1c:f4:c7:
f0:a8:ae:b1:68:9f:48:fd:94:49:db:4e:e4:8a:9a:18:b6:c3:
df:ce:bf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:20 2025 by rpki-client