Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: ODTMWME5nYkVmE7CKutI/zWwV+PHcYQpf66WsjT93Ds=
Subject key identifier: 3E:77:CF:68:42:3B:F7:3A:6B:43:8C:9D:41:32:11:97:3F:FD:A3:FF
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 0194BC72DD881522F8794122F8FAC467539D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0844
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: IbAxdedAYlhs3SD9kGVa1WiA3If/9U1qC4ls68swneA=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:88:15:22:f8:79:41:22:f8:fa:c4:67:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=3e77cf68423bf73a6b438c9d413211973ffda3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:95:03:5e:f1:4d:b9:c1:35:20:8c:41:69:
68:b1:f4:e9:58:33:41:56:86:1b:9c:88:85:59:fb:
ea:3a:dd:3a:48:c8:7b:b2:36:e4:40:5e:2d:69:e8:
67:38:50:fb:18:09:41:1a:3e:aa:58:da:0f:f4:3b:
f1:58:c9:e0:be:b4:29:84:c4:48:33:4f:f2:13:0c:
54:b2:8d:32:2b:53:23:39:36:c7:41:6c:c0:fc:56:
24:aa:74:0c:d3:a1:48:be:bc:b0:43:82:d9:f8:3a:
eb:bd:29:5c:13:8d:c8:15:3d:32:32:8f:84:70:5d:
e6:86:4b:23:a3:94:29:83:0f:cf:a5:8e:9c:e7:b7:
74:31:27:16:c6:46:08:7f:5d:57:91:64:d4:02:a2:
76:47:71:1f:f9:5d:9a:41:c6:8e:fe:db:8c:7a:db:
a2:96:52:81:b9:7c:af:e9:88:54:13:f5:18:05:f0:
5b:17:d3:5e:93:ec:b6:03:87:07:2b:de:3b:3b:3f:
76:9a:34:a6:16:6c:16:96:14:1a:b5:19:a6:08:0e:
e1:00:8c:70:c9:e8:2f:84:fa:f0:98:77:49:70:6e:
b4:5d:05:4a:2c:ad:1c:ff:36:7b:c2:00:69:fc:61:
6e:db:99:31:6d:40:32:a2:5c:8c:10:db:f0:9a:78:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:77:CF:68:42:3B:F7:3A:6B:43:8C:9D:41:32:11:97:3F:FD:A3:FF
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:1c:2b:d0:92:fd:63:0a:37:42:6c:9e:b0:0b:7a:80:56:
f6:5a:d4:c8:c8:09:ff:17:d2:66:45:92:93:e6:39:bc:a8:d5:
0c:12:61:24:48:b1:2c:ec:91:14:b2:75:24:35:50:d5:e8:eb:
0e:84:21:32:53:dc:22:6a:dc:dc:a7:3d:e8:b2:25:f3:11:d7:
c9:32:f4:4e:6a:a5:ff:52:7c:99:70:1d:1c:d4:e7:43:d1:45:
7c:05:30:0c:9c:ee:c2:7a:90:4e:55:24:ce:8c:58:0d:19:ba:
99:9a:14:61:56:17:82:14:35:29:0c:d9:29:39:7b:f8:de:d9:
1d:4a:57:38:09:fe:f9:0c:74:f3:d8:3c:dd:77:c9:e2:ae:ad:
8f:e8:63:ed:ac:25:55:8a:aa:ab:80:db:68:63:3a:a1:c6:c6:
e5:84:ff:90:ff:46:6d:30:74:fb:5b:7c:fe:7b:ec:e7:3e:4a:
f0:c1:34:e5:fc:d6:27:23:e2:f4:0f:dd:ff:6f:3b:0a:3b:55:
78:ba:98:c9:73:52:55:54:f9:d4:39:91:15:fa:b9:d7:07:21:
a2:a2:88:d8:70:44:a9:d4:ee:4a:cf:99:ee:16:d4:45:4e:ed:
9e:3e:db:61:d0:11:c2:c3:ae:49:2f:b5:83:cc:7f:5e:a4:75:
0a:57:2d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:08 2025 by rpki-client