Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File: H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier: VgETUHUuO5P4epm1D4zA0tcMm1/gsj0RQJb5ATLRp3M=
Subject key identifier: 2C:46:F7:EF:F4:EF:4D:A3:B2:87:B8:81:27:0D:3F:1F:81:3F:6B:B3
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial: 0194BC3BEC71A95AA0974A517075B575A8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=)
2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: 21JkivMj9pCZ3aDL4xejwlAbXcFpUGZpv3iZ9aNKrhM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ec:71:a9:5a:a0:97:4a:51:70:75:b5:75:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=2c46f7eff4ef4da3b287b881270d3f1f813f6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:d2:1e:cb:c9:ba:83:3a:68:c6:e0:87:f3:
17:c4:d5:55:35:75:d6:ba:b3:42:bc:68:e2:e9:88:
f6:85:06:a6:26:48:72:93:10:ca:9b:45:a2:e1:bf:
b4:54:5e:49:66:18:94:de:f3:e8:cb:29:ce:2a:fa:
7d:b6:40:45:ae:c6:f7:e5:e2:37:62:6c:36:1b:6f:
ef:a9:f3:25:f5:78:af:dd:b8:0c:84:2c:ec:52:c3:
64:f5:a8:44:e4:fc:f4:86:a8:22:2c:96:76:9d:c3:
3a:50:52:09:d5:26:e4:03:7b:07:8b:83:95:27:99:
29:91:a8:8f:a8:5c:7a:4d:8a:5a:30:71:e0:90:38:
81:bb:75:b6:69:f9:91:24:df:32:9b:75:f5:ec:a1:
dd:bd:9f:bf:5c:66:32:6d:81:7f:92:38:5b:27:4e:
74:90:d4:b2:f6:87:20:1d:03:c6:81:c9:76:c8:83:
17:21:57:3a:bd:a9:46:79:d5:e9:eb:bd:51:ce:da:
37:bb:15:b5:7f:c0:dd:6f:5c:b5:26:b5:21:f9:1b:
5d:dd:2c:25:12:9e:85:5d:57:89:1c:c1:49:45:16:
2d:d4:6e:39:46:75:0d:bb:4b:2f:06:28:ff:38:bd:
b9:ac:6f:6c:fd:89:c7:0a:1b:47:f6:24:06:c4:ef:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:F7:EF:F4:EF:4D:A3:B2:87:B8:81:27:0D:3F:1F:81:3F:6B:B3
X509v3 Authority Key Identifier:
keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:46:b8:6f:c0:d9:3f:c1:65:0b:6c:ab:95:fd:d8:f3:3a:03:
5b:5f:fc:40:e0:53:f9:80:97:e2:9f:46:4f:ef:d5:d7:cb:23:
55:f7:08:83:a4:b7:84:ec:2c:ae:f5:4c:d7:98:f1:0b:45:ae:
eb:3a:78:c7:b0:72:64:ac:2f:54:f1:51:73:23:44:86:5f:5d:
ba:75:63:2b:f6:e0:ae:3b:e0:53:33:50:8f:cf:45:15:85:38:
02:56:8c:ad:84:3a:49:5f:9b:fa:71:ac:ef:1e:84:aa:f3:09:
84:48:22:94:70:1a:85:fc:8c:38:5e:33:44:cd:13:4a:9d:5d:
df:85:0a:64:49:a9:5d:a0:ed:f5:26:0b:08:c4:5f:6d:70:97:
65:b6:fd:27:45:90:af:d2:43:ba:a0:ed:0f:96:d7:9d:53:e6:
d1:bb:37:45:6e:a3:5e:d1:ae:e5:99:84:f9:7e:58:ff:f2:eb:
6a:6e:42:90:41:0f:d7:fa:a3:f9:af:36:a0:b5:e2:46:e8:49:
4d:67:6b:d0:d0:89:9e:ed:d4:99:b2:eb:06:15:21:c5:6e:76:
4b:c9:db:b2:2d:32:37:13:ee:f6:74:05:93:fe:3c:4d:71:99:
81:39:fa:c6:ed:81:fa:86:2f:d0:31:33:97:31:b5:a6:da:7b:
87:3f:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:14 2025 by rpki-client