Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: Fsh3pH+l6EHDSNjpHkNmwKTAh7laec4WrjP8Y2v8b/k=
Subject key identifier: 6F:52:03:08:E3:44:8A:43:85:D8:7A:86:C6:22:B4:D4:5C:BF:6D:19
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 0194BD4E9F5993C2D3FCE2ACD5DBF4C3B10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: Dk5BhXJ_gIsgQ0utb4gvZ39LMIc.roa (hash: 9IdU4NLUHr5S9QPXNXQfwW6+YPaEhUYFtSNkpxSH/2Q=)
2: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: H061SLrUqpPCYINwwI9YLSGP5xOmqu/t2u3GIV+6PeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:59:93:c2:d3:fc:e2:ac:d5:db:f4:c3:b1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=6f520308e3448a4385d87a86c622b4d45cbf6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:9f:f1:4a:24:a9:56:b3:cd:84:50:a7:d5:
a6:c8:4e:55:2d:2a:07:4c:79:60:00:66:2f:12:84:
27:22:e3:13:f8:8c:43:bf:91:c8:59:36:08:95:9b:
67:6d:f0:1f:bb:e8:19:18:72:7c:2d:12:47:34:d5:
89:12:51:2f:c9:c4:34:8c:59:b0:12:eb:44:14:fe:
b9:fb:b8:03:3f:b1:a7:87:05:56:92:a5:e6:53:ba:
f2:8f:42:f3:72:2d:59:48:3f:ab:26:21:a2:84:d6:
b6:c3:08:60:ac:4a:31:5f:67:04:e0:73:f0:43:c9:
25:d7:2a:dc:a3:72:3e:ba:f3:e4:0e:7d:1d:a1:5f:
b3:1f:36:d0:1b:e9:6b:59:a6:b5:74:d9:a3:69:e1:
b0:ad:ae:fb:21:5b:b8:01:20:fa:5b:a6:43:5c:6d:
fa:64:a9:59:9c:17:5f:72:a1:7a:68:e2:69:86:eb:
33:f7:88:0e:d6:b4:95:05:ca:21:6f:51:32:1e:b0:
46:4e:19:c9:9f:31:61:25:33:63:b4:ca:8c:29:23:
06:b7:47:0f:2d:d7:db:0d:7d:32:97:b4:fa:67:87:
d2:89:84:63:fd:47:11:e4:ce:79:27:fc:72:36:06:
b3:d2:7f:ca:18:8d:4d:c5:2c:38:4e:31:97:2a:d3:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:03:08:E3:44:8A:43:85:D8:7A:86:C6:22:B4:D4:5C:BF:6D:19
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bf:cb:0c:b3:47:2f:3b:b5:06:97:4f:35:c0:80:d2:9b:0f:
fd:34:0f:64:b9:85:3f:a7:6a:26:c5:8f:9d:cd:3c:b3:53:00:
60:11:84:de:51:6b:8a:2a:fc:4d:70:88:75:4d:4f:0a:3d:51:
56:2d:da:6a:e9:d0:75:62:e0:e5:b0:40:65:4f:36:7c:f3:50:
13:09:7e:9e:a4:5e:8f:c9:4c:f5:bc:34:3b:8d:a1:37:4b:44:
45:f8:d9:9c:72:77:6c:58:3f:a1:0a:ff:23:c0:53:04:45:25:
07:a2:00:2a:68:18:b0:63:5f:32:e6:96:96:5d:9c:4a:5d:76:
94:7d:28:60:94:c5:15:bf:f4:8a:6b:a3:c4:59:07:9b:c5:89:
ef:cf:65:7d:5f:5c:dc:4e:ed:39:b7:be:64:40:02:72:64:69:
a2:67:c7:34:b9:de:e2:4a:27:ba:b8:73:a0:c3:94:e7:64:76:
48:5f:d1:8e:4e:e4:86:44:d1:64:89:28:3a:c0:81:c7:30:e7:
ef:9a:7e:7f:1e:2f:55:5f:e5:ac:de:49:c1:15:af:47:d6:cc:
7d:18:ad:03:ec:8e:37:af:a1:c1:9e:fd:90:2c:95:59:30:f4:
06:c1:4c:4f:55:45:3b:1e:e1:87:c4:ca:1f:1b:33:63:16:b0:
5f:21:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:30 2025 by rpki-client