Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: FfRmX/rYOBzRX7wz75/TJqsfpo7i1YDQxiBk5Sbgvs8=
Subject key identifier: 7B:82:38:C9:EE:F4:57:66:53:37:22:F1:75:27:43:19:BB:1D:D1:B6
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 0194BCAA2D5FF7D8E3FB0D1ED845D8A78A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: 7XM8/3d824vLrf7Xfhcs6zuRr0ilhyDy1++dxNIpO6E=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2d:5f:f7:d8:e3:fb:0d:1e:d8:45:d8:a7:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=7b8238c9eef45766533722f175274319bb1dd1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:de:c8:ed:1d:b9:1d:6f:66:74:67:da:d7:
d5:1d:10:94:93:87:8e:08:12:f4:82:f3:f7:01:77:
74:dd:b9:51:af:87:d5:b0:58:c6:5f:0f:52:9d:2b:
bd:74:17:a7:c1:5d:5a:51:28:f3:0e:93:a5:51:ac:
19:6f:3c:c4:67:54:6b:a4:20:cc:ca:c5:c9:d8:1c:
63:94:d4:a5:d5:e5:a4:89:f9:f2:c7:9c:08:77:66:
56:74:9a:fa:33:fd:55:24:07:21:fd:22:48:f5:2a:
b2:72:71:9b:51:1b:db:32:fd:e8:9a:b8:ea:46:6a:
73:78:00:26:37:12:22:ca:b8:a3:7a:be:64:4a:c2:
6c:c4:a3:06:5f:e7:2a:8c:d0:2e:d9:8d:a3:1e:d6:
50:01:de:1d:66:fd:93:50:fe:68:7a:68:d3:a6:c0:
85:ab:ba:32:22:b7:83:0d:ce:48:33:2a:e2:91:1c:
52:a4:db:26:73:ab:d9:e9:1c:91:f4:c2:a1:e2:c8:
0a:3d:3c:86:e7:63:5f:74:0f:f7:3f:8f:39:47:d1:
51:52:98:65:ed:d6:73:42:14:4b:16:05:39:60:81:
78:73:34:f3:c3:47:c3:a8:a0:4f:31:75:ba:f3:4e:
25:5e:6a:d8:cd:86:08:58:83:68:87:ef:05:cf:5c:
54:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:38:C9:EE:F4:57:66:53:37:22:F1:75:27:43:19:BB:1D:D1:B6
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:cf:37:84:3d:cb:79:f5:e8:cc:03:02:30:b8:4a:b3:df:
d3:d8:d3:b9:7b:f3:e8:52:ad:8d:e1:97:ab:c3:f9:a1:ec:e7:
48:9b:7a:6b:05:32:4c:0a:4e:bf:29:ea:70:4f:50:73:8b:18:
69:9c:75:8b:83:91:ad:7d:0a:cc:a5:15:0b:bc:09:d8:d0:85:
24:b3:25:67:e9:bb:b4:81:cb:25:dc:9e:7f:b7:34:ce:e4:39:
95:78:ba:a7:5a:e3:df:ac:f5:40:66:1d:51:45:62:4e:ff:44:
97:53:f3:02:d8:3b:58:fb:cc:be:5b:eb:d0:4b:9a:b7:44:ae:
6a:ec:48:4b:34:98:c7:1c:0f:58:59:e8:6b:a4:16:e0:ff:4b:
1c:27:28:07:7e:68:4f:5f:ed:78:d2:66:3a:3e:f6:4e:a3:f9:
ea:80:89:13:59:1d:29:3b:00:7a:a1:70:d9:ad:b2:47:30:0b:
a7:2b:c8:31:3a:cd:4c:3f:23:5c:79:15:c1:16:38:6a:2a:96:
cf:70:6c:e3:d5:63:d0:64:a1:6c:2e:3d:45:66:e7:a9:38:69:
be:00:87:34:38:31:1f:01:16:bc:2d:4e:fc:48:db:61:30:1b:
4d:b0:b8:02:b3:f4:99:34:ff:72:3c:91:5d:87:28:af:87:d3:
52:f5:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:32:38 2025 by rpki-client