Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: YqsOg3VpZ3i5n9K+mgYIlho8L3fNL7TmXegXGweKsrQ=
Subject key identifier: 1B:E7:93:F3:C5:6A:6D:F1:81:39:05:70:F2:EB:E5:6E:ED:1B:01:F4
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 0194BD4EA63A3230BF804B33832013F9C0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 10C9
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: 63E5a0D3aNyhJrey/zbPGjGX2I0qNaSrxS4Rrev7Kos=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:3a:32:30:bf:80:4b:33:83:20:13:f9:c0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=1be793f3c56a6df181390570f2ebe56eed1b01f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:23:8d:bc:a1:04:8d:a1:d7:a8:a3:e0:03:
64:27:fe:36:c6:3b:28:39:d2:4c:66:13:d6:97:ad:
b0:fd:fe:7f:24:73:7b:34:7d:ab:8a:22:f8:09:c0:
13:61:e6:95:c4:89:86:16:ec:13:49:aa:43:22:a9:
78:0a:94:1b:7a:85:4b:dc:c5:53:a7:cc:a5:9a:84:
82:ce:40:cf:32:65:77:28:14:f2:54:e7:95:64:05:
28:46:2d:e7:92:e4:77:56:fa:fb:81:42:2d:be:a7:
f2:04:84:36:fe:ce:e3:38:ef:48:25:24:fb:b7:d2:
0d:2f:75:b0:72:1f:34:63:b4:72:cb:d9:b9:89:bc:
3e:14:7d:41:bd:30:af:39:8c:6a:55:8f:5e:a1:60:
9c:11:2e:42:29:a7:f8:e5:48:e3:02:d0:7a:0d:ba:
8c:27:5d:44:29:81:be:3b:31:6b:1f:ca:71:52:8c:
94:a9:9d:f8:44:cf:cb:d1:5c:23:42:80:0c:9c:40:
16:f0:20:12:95:6f:0b:2c:d5:d4:e5:20:a7:d7:c3:
3f:fa:ed:4f:66:b8:7b:d3:6a:17:7e:8d:85:d9:0e:
62:6f:68:be:c8:9f:ba:63:04:96:34:0d:83:9d:9b:
35:51:82:82:03:6b:d7:63:de:f2:84:5c:99:db:47:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:93:F3:C5:6A:6D:F1:81:39:05:70:F2:EB:E5:6E:ED:1B:01:F4
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:e7:36:9f:81:99:0d:3d:ed:d7:25:cd:09:28:85:54:e1:
66:f4:cd:f7:c3:c4:23:17:f0:ef:35:80:75:c4:f1:e3:fd:93:
9d:9e:17:d3:fd:fa:72:80:11:a3:13:52:46:2c:41:ff:1b:98:
6f:ae:10:9f:6b:9b:c8:0d:11:b8:d9:be:71:43:a1:f2:1d:70:
81:6a:35:24:55:1e:72:3e:93:3d:d6:8e:b7:bb:b6:f9:8b:be:
7b:8e:a6:81:1e:fd:3d:1a:41:f7:68:95:7a:13:84:29:b1:cc:
3b:92:36:ac:0b:7e:e3:0e:cd:e4:b9:f1:19:c8:5d:71:e7:db:
07:b7:f8:7d:93:c9:73:32:66:d8:20:7e:19:be:a4:aa:c7:df:
8b:20:45:d2:28:0e:61:7e:97:71:f6:5f:0e:64:ec:d7:3b:bf:
59:26:b3:9e:20:b3:88:74:29:d3:cc:52:7e:e3:03:f8:6e:7d:
14:6c:f2:26:d0:5b:03:c7:86:9d:d4:52:d3:8c:e0:f2:31:a3:
22:7a:8e:f2:5d:35:b3:3d:92:9b:46:0d:b8:16:38:c8:90:2d:
33:9a:cc:be:5f:53:d6:32:5c:67:3f:7b:b5:77:cc:5b:ff:91:
9b:d5:71:19:92:a1:ab:74:76:04:b4:eb:54:fa:18:a9:de:21:
6b:e4:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:17 2025 by rpki-client