Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File: H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier: XkQPTPH4ApONNj21qa6/335SMFVuxvHDmDRNc84PFtk=
Subject key identifier: 0F:97:BB:97:7F:A3:53:35:A9:97:78:AB:77:DA:1C:50:CF:5F:A9:B8
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial: 0194BD8547D77077BB1E21F262AB3BF40789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number: 02F6
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: g7HExecnBOCMljXuVy9iFPAwVvFUNDDzSKRLdIkbPzk=)
2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:47:d7:70:77:bb:1e:21:f2:62:ab:3b:f4:07:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=0f97bb977fa35335a99778ab77da1c50cf5fa9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:fa:25:7b:09:ba:27:b1:8d:70:1e:d1:31:
0b:a5:7f:9c:d6:80:86:8b:4a:6c:ca:b3:78:82:d0:
d0:84:ab:14:ea:c2:6d:75:ad:4e:a3:c0:0b:6e:c0:
98:db:b0:1a:61:0e:92:39:af:18:79:d5:63:65:66:
42:24:26:1f:14:f0:76:89:51:09:f1:0b:e9:64:cf:
f1:ad:a2:1b:c9:7b:f7:e2:65:ec:45:24:8a:29:3d:
ad:79:6d:63:4d:c7:fd:a0:73:f6:15:5b:b1:5d:7c:
68:60:5a:ac:8e:78:31:f3:3c:a6:9d:ab:f8:fc:fe:
6d:eb:f7:9b:c6:49:d5:91:28:c2:c6:fe:b6:a9:8c:
77:9a:e1:01:71:e3:46:8d:d3:19:98:de:52:a9:22:
c8:b7:88:d6:54:48:13:2d:b9:28:53:38:82:98:ab:
f5:06:48:aa:22:da:a5:24:6a:34:d6:8e:69:d6:92:
bf:53:fb:19:b5:63:8b:2d:6d:9c:a6:bc:db:49:a2:
e0:02:ff:00:76:5e:95:0b:99:53:d5:3c:16:c5:de:
9d:a0:ae:eb:7e:3c:fb:e6:74:dc:c9:ac:6d:d1:89:
ed:0c:62:a5:b2:44:c6:e6:c4:46:cd:ef:14:0b:ff:
75:41:84:ae:aa:26:8c:68:d3:2f:6c:53:f2:1a:fd:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:BB:97:7F:A3:53:35:A9:97:78:AB:77:DA:1C:50:CF:5F:A9:B8
X509v3 Authority Key Identifier:
keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:28:48:f1:bf:5d:02:30:2f:fe:a5:43:97:b8:43:3b:f2:
a7:c5:97:58:85:93:1e:cc:d2:38:05:87:17:bd:f4:ac:bc:df:
ee:93:0e:b5:89:e6:6b:1c:63:a6:c9:33:3a:f4:a6:85:14:c7:
47:af:43:93:4d:95:a0:e3:ea:45:76:40:52:3e:54:e4:f1:a1:
fa:5c:b9:84:39:b2:1f:bd:30:9a:34:2f:25:82:24:72:ca:d2:
25:94:76:7e:18:3d:23:88:72:55:ef:de:32:50:73:2e:a7:db:
06:10:ed:81:b5:b8:fe:0e:55:4d:72:1b:e0:71:c0:e7:d6:28:
94:78:ff:eb:d2:0e:c0:c7:1b:11:f9:7f:38:9b:12:87:8e:aa:
a0:de:b4:9b:bc:56:62:e6:c5:4d:b1:2f:9d:17:13:51:ed:b8:
6e:e2:13:b5:3c:26:2e:db:5a:06:6c:6f:8e:fa:2d:2a:06:54:
f3:06:3e:65:c0:8b:d1:15:ac:27:21:4d:da:1d:85:8c:0c:dd:
ea:d8:50:cb:41:1e:26:8f:9a:a6:89:f1:52:74:24:f2:d7:d9:
78:93:76:68:2e:13:49:fb:00:d9:bf:06:c3:80:2c:74:5b:c1:
a6:99:51:a5:45:6f:da:1c:79:0e:8c:d0:d6:96:ab:3e:ae:f4:
f6:b2:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:22 2025 by rpki-client