Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: lXRezOlQuOFH2czWXhmDvMQ3J5W74/5BujItXxHZ90I=
Subject key identifier: C9:9E:D7:B5:62:89:2F:27:CA:4C:ED:4E:68:28:9D:B4:25:50:27:0A
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 0194BC3BF2A5A005B8DA8430079723687AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0341
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: tGtdLiVewVZgH66cKjEe0uNNjqvrrHcpSUGFgk/TicY=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f2:a5:a0:05:b8:da:84:30:07:97:23:68:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=c99ed7b562892f27ca4ced4e68289db42550270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:9a:0a:69:e2:31:f8:97:c9:6f:e2:c9:f5:
1d:ee:9c:b5:51:d0:cf:36:55:5d:c7:f2:b4:5d:9d:
93:51:cd:a9:7a:d5:55:15:97:2b:5a:8d:6a:40:61:
7e:9a:db:9c:68:4f:9f:70:7d:87:66:d9:2a:f1:80:
53:9a:23:3e:fe:93:9d:f4:1d:92:2c:4b:70:80:86:
af:be:30:b4:07:7f:77:e1:a4:78:47:0f:65:c9:33:
43:ab:42:52:dc:4b:9d:06:89:03:77:d2:46:64:6e:
ca:99:73:b0:8c:b0:ab:e4:d1:2b:de:33:61:73:62:
aa:ac:cf:54:ad:11:ce:d2:1f:18:8e:a1:2f:b5:00:
a9:6a:54:75:a3:95:50:5c:c2:08:f3:36:bf:a9:fe:
af:44:aa:b7:aa:9a:83:e5:d3:3c:41:5a:fa:5c:f4:
ae:0e:82:7a:0d:02:89:8b:c0:db:c1:af:c8:f3:f1:
c9:94:bb:23:a1:37:b3:a4:23:dc:05:b7:42:3f:00:
a2:f4:49:48:8c:11:9e:36:30:e8:fc:81:2f:b5:42:
e8:d9:98:8b:c9:98:fe:f5:c5:f0:83:6d:4d:69:28:
07:51:16:0f:92:9e:01:9e:61:c0:5a:d6:b4:d1:91:
5c:69:2e:16:2c:70:ee:df:85:cf:13:7a:e8:d3:57:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:D7:B5:62:89:2F:27:CA:4C:ED:4E:68:28:9D:B4:25:50:27:0A
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ab:57:2b:46:5b:f4:cb:67:22:86:c5:82:48:28:4e:d1:8e:
7c:cb:e5:50:9e:b8:df:33:96:48:e8:3a:3c:8f:09:80:d5:e0:
5c:a3:31:bc:5e:9e:ea:45:97:83:53:4b:37:14:9b:69:4d:80:
da:d4:83:55:96:27:b6:31:9f:47:fd:33:b8:71:f8:58:e1:0b:
23:31:00:8f:0a:b4:48:0c:91:a9:f5:04:d8:e0:f1:9e:7d:2f:
38:e3:85:9b:bd:4c:ec:9a:d5:b4:46:96:f9:b3:10:2f:2e:50:
89:56:22:5b:07:5a:86:f9:42:25:88:a5:76:fa:6f:50:9a:0d:
3e:d5:46:ba:67:ed:ab:9f:44:08:32:da:af:8c:6f:0d:92:68:
31:64:24:7c:1c:45:fb:7a:9f:f6:68:6e:2c:ec:f3:62:96:37:
bd:41:3a:94:ba:a3:b6:c2:b7:9d:15:3d:f7:49:83:2e:a5:34:
8f:29:01:8a:c2:2d:cf:e3:90:38:66:5a:4b:94:1e:76:48:54:
78:24:a1:c3:ef:75:c3:96:d6:03:cc:56:c6:6d:3c:e1:97:ab:
f9:23:7c:83:fd:82:f7:47:3e:73:13:df:5e:03:f7:48:69:fe:
5f:f5:93:88:09:ff:89:19:8a:d2:c9:a3:02:f5:50:68:62:43:
4b:db:70:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:50 2025 by rpki-client