Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: TsFxNLqA7G5kIKUXrANpeVuZsoyT20KibWoC6AbbhqA=
Subject key identifier: 05:52:FD:60:9C:5F:87:E4:13:FE:8A:44:02:EA:69:58:C3:1A:3C:76
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 0194BD17E28A1BA7A69E7E53C491A6064331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: DwdwnNYiYszxSFZUvDnifZ1cmVo.roa (hash: z1Ue0CWmwoS4r8rtXwZcldA5j6c831i2ATcqPGIWOrM=)
2: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: ZavmN6QxVgRxgX57pvLzo2PASnFRgALToETW3xP577w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:8a:1b:a7:a6:9e:7e:53:c4:91:a6:06:43:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=0552fd609c5f87e413fe8a4402ea6958c31a3c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:98:71:a7:a4:4b:73:be:fe:5d:72:95:43:
ee:b0:0c:b8:bd:40:c7:7c:a8:4b:fd:8f:32:89:68:
02:6c:21:89:94:b6:12:f5:cd:94:15:13:6a:2e:18:
55:ca:c4:da:94:f7:48:22:00:ba:6e:05:64:4c:b7:
8a:56:f6:fb:86:e2:c8:ee:73:95:26:d2:36:13:b2:
97:64:70:ee:6c:10:c6:cb:68:e1:ff:bd:3b:f6:59:
be:52:a9:0c:16:12:42:5c:88:4e:af:9a:fb:e4:1f:
97:47:fb:be:7e:78:5a:a7:9e:75:18:ce:69:d3:f9:
f4:32:97:05:5c:bf:ae:89:67:2f:81:b5:94:34:48:
f7:fd:d9:be:6d:cd:b2:8a:60:ff:59:5c:e0:27:48:
37:b5:d1:7b:1f:4a:09:86:39:bf:15:e6:21:b1:5c:
c1:b7:d8:b0:85:0f:32:fa:95:04:cb:9e:b4:70:12:
6c:2a:7f:77:6c:6e:36:2c:f1:27:7c:c4:41:a0:42:
4e:b0:5e:9f:40:5a:48:85:90:78:85:d2:ed:00:86:
ed:ad:b0:fa:ce:ff:d2:8e:54:b6:eb:06:87:2b:55:
75:5c:ad:60:7c:81:24:0d:dd:9a:22:58:1c:71:7c:
6f:fe:3d:c6:3e:50:2c:ec:05:6c:e4:33:5e:4c:e7:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:FD:60:9C:5F:87:E4:13:FE:8A:44:02:EA:69:58:C3:1A:3C:76
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:30:3f:44:94:54:fb:6d:75:60:d4:d9:87:8c:37:2f:6e:76:
ce:ba:f2:22:ad:c1:9c:7b:0c:1b:54:f6:1b:12:cd:67:50:7b:
dd:c9:30:7d:06:cf:49:d4:9e:6d:3c:e2:53:82:04:dd:98:25:
0c:d5:07:fe:f3:2a:29:99:8c:21:bd:da:3e:2a:ff:f7:24:b0:
26:51:b0:ff:ad:ea:fc:68:ee:8e:b4:c9:8f:04:56:c9:5f:f1:
c4:9a:fc:ef:37:63:60:9a:af:35:75:bc:5f:db:ff:98:81:9e:
29:67:fc:3a:88:24:37:ff:ea:02:b7:eb:47:95:0c:e5:57:c3:
df:8a:2f:51:bf:36:38:d8:71:ef:cb:37:67:1b:2c:5c:64:f8:
df:20:da:12:78:6f:46:71:6f:b6:3e:10:b8:f2:94:f1:57:cb:
09:55:17:3e:43:ce:35:85:b4:81:48:1c:92:18:d2:ca:03:29:
1d:1c:24:d6:21:1c:c4:59:c4:5c:46:94:cb:05:cc:28:5e:93:
a3:cb:9e:67:28:78:2d:b9:52:80:67:cb:7c:3f:21:5e:1f:3a:
64:ff:f2:19:7c:94:15:35:5b:cf:e7:97:79:03:08:5b:0e:d9:
67:62:73:3a:4c:1d:f4:59:f6:ff:43:fd:ff:a3:37:ef:80:b9:
1d:5c:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:39 2025 by rpki-client