Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: aF8H3kUynfas0+ZfEZcerZfzNMCnXnR5qtPollEoIHc=
Subject key identifier: 3D:B5:9C:D4:20:E4:AB:5A:A9:22:D3:89:5D:EE:A6:CA:39:A9:A1:82
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 0194BD1788D72B2E6911DD1F3613558966A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 04BE
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: LeauqIgA77Guz7NTqsqggxkb3OM.roa (hash: kn3sF5o0HTuBHvbByMR9Dn62yBg3LuqPb4rgaycQgmQ=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: V4vJ0RTY8c4ixfxs3fAJdbtck9IGhE+2oSJ7KbMhKNg=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:88:d7:2b:2e:69:11:dd:1f:36:13:55:89:66:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=3db59cd420e4ab5aa922d3895deea6ca39a9a182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:9e:b8:47:f8:97:01:73:ad:2f:84:38:37:
ae:8d:62:a7:f7:74:22:40:de:9d:00:f9:10:59:27:
71:54:19:47:aa:1b:d2:63:a5:3d:38:27:7f:79:c0:
a3:88:ec:28:d5:45:b7:0c:d1:82:27:e9:89:c9:92:
c9:43:75:ea:10:a2:cb:6d:47:34:2c:3c:8e:d3:80:
1d:b8:3c:7b:db:62:59:f0:6e:4e:68:43:68:53:38:
2e:a3:2b:15:4e:ed:14:53:55:ea:77:03:ba:59:9a:
d5:31:b7:00:3e:a5:77:39:87:93:0a:d2:93:47:59:
36:06:6c:a3:d8:c3:82:3f:91:b6:4c:59:b5:11:12:
10:3a:e0:82:64:c8:98:ae:bb:05:d9:40:4b:4d:a8:
04:9a:30:28:82:4f:52:bf:ee:6e:e7:7e:12:fe:de:
82:a1:e6:ba:a4:3a:b0:14:1f:0f:00:6f:4f:41:77:
5d:db:9b:2a:bd:cc:46:47:df:0d:37:a2:d2:7e:52:
18:b8:f5:f5:0f:74:ee:43:3a:34:73:90:e3:8a:2b:
da:7e:e1:11:b1:0a:2c:a4:08:69:4b:23:a1:15:2f:
e5:5b:44:c3:69:ff:0a:7e:28:83:72:2c:fc:71:07:
47:15:a3:95:28:e2:00:8e:58:28:a4:5f:41:4f:f3:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:9C:D4:20:E4:AB:5A:A9:22:D3:89:5D:EE:A6:CA:39:A9:A1:82
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:67:6a:e3:c8:a7:27:05:e3:79:f1:6f:28:e6:49:40:96:a1:
5f:80:eb:70:c1:cb:47:6b:c3:23:af:65:b1:c0:e0:ca:2c:ea:
8c:40:0f:bb:52:d6:82:0d:d7:eb:e9:17:67:26:11:8f:dd:9b:
77:9e:16:2b:0e:d9:9a:10:86:71:98:ce:7b:8a:fe:da:13:35:
9e:ed:56:e4:67:c2:6e:c9:78:12:0c:f4:b3:78:22:25:68:9c:
7d:2b:7d:33:d8:28:40:53:53:4a:78:82:6f:2e:32:b9:99:5a:
cd:0d:a3:31:c9:a6:fa:4d:1d:24:f7:a3:0e:12:f7:e2:a0:37:
da:35:5a:7b:17:d1:10:2c:58:2f:9c:c0:0b:81:3c:c8:c0:95:
94:56:d0:b7:d4:bf:73:9b:51:ba:eb:b3:f9:7f:17:66:db:b6:
f5:e4:bc:17:f2:b3:e1:e1:1f:b7:2e:4f:f9:a2:91:bf:fb:92:
39:37:85:5f:5b:90:1a:a4:6c:74:0c:89:97:6d:62:fa:24:31:
cd:c6:00:9f:5c:89:8e:e8:b6:8d:50:92:f7:d3:0e:b1:a7:72:
4d:31:b1:4d:5c:9c:7f:07:f0:f9:0a:fa:ab:54:e3:93:56:82:
4c:5b:bc:e4:6c:b7:3c:c8:1a:f1:af:54:64:41:72:af:8c:54:
4d:bc:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:42:53 2025 by rpki-client