Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: KG2UZACFnEneVANnpc7PQkUUgd3kBdOJVZz6vhVSTtI=
Subject key identifier: 1D:39:B9:E1:8D:00:52:1A:28:F5:73:B4:1C:A1:C5:A5:AA:9D:3E:B4
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 0194BD854E616E53DDEF7BCD9D34E528EC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0352
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 8D4nHWbrxa4LMrteZKswft15Ubc.roa (hash: He/s/LCduWYytOAbci1/a/w6a3udHX5vgmJxc1muikE=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: R9ZOBwKHkUdtR6FHR5qhxdlxvfjjjrDPP/9+93AXImk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:61:6e:53:dd:ef:7b:cd:9d:34:e5:28:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=1d39b9e18d00521a28f573b41ca1c5a5aa9d3eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:17:e5:c9:58:bd:bd:48:fb:6f:4b:e1:bf:
4e:c8:60:9b:ca:d8:2a:7e:fe:7d:21:12:06:b4:b0:
07:15:8d:6a:7f:b5:5f:2d:f5:7a:33:d4:72:ae:fa:
64:b0:6f:b1:5b:d5:be:23:25:b7:a4:dc:0c:73:0d:
23:c9:71:21:4a:0c:07:6a:9b:ab:03:ba:e0:50:cc:
29:21:c3:b7:13:ac:e6:75:79:a0:a7:e1:40:81:42:
6b:7c:fd:6d:78:db:e8:30:a2:a7:9e:93:d4:19:6c:
1e:41:b5:54:95:c3:fe:6c:e8:1c:22:d7:85:e2:a3:
b5:3b:34:0b:34:35:a0:d1:1e:81:de:6f:27:c6:69:
6a:06:7d:9b:73:f5:65:83:ef:94:c2:27:8c:48:d2:
c6:bd:8b:27:dc:40:05:09:b7:a6:13:d3:5e:52:e8:
62:c1:80:48:1f:b6:84:d6:28:90:a8:51:c5:b2:99:
1c:66:db:26:95:d7:3e:8d:90:59:18:63:a7:54:5b:
1b:f2:62:90:5a:bd:d7:95:2f:31:e8:b8:58:10:b1:
a0:ed:aa:92:4a:9f:6b:26:2b:f0:54:de:fb:34:71:
67:9c:51:dc:2f:34:b2:63:04:15:34:87:4f:96:9b:
70:28:db:c4:79:5e:bb:e6:45:7b:4f:4f:35:2c:d9:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:B9:E1:8D:00:52:1A:28:F5:73:B4:1C:A1:C5:A5:AA:9D:3E:B4
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:57:40:57:c8:5b:9c:a8:bf:44:e0:ec:c6:e7:c6:9a:a0:
47:3a:80:a6:31:12:75:cf:3e:be:2b:c1:f3:b9:4f:23:e7:c5:
39:c6:d8:9d:30:35:e7:0e:7b:01:dd:cf:82:80:1a:1c:26:9b:
5e:d6:09:f1:61:d3:f4:f4:e9:8c:5e:cb:ae:93:13:37:43:9c:
b0:1f:ac:d0:9d:31:75:7b:4e:2d:43:53:e2:20:8e:52:6e:a6:
d3:0a:a4:28:4b:86:64:a8:c0:8b:43:4c:7d:cf:92:20:85:81:
e4:95:02:5b:12:a0:ee:07:a6:13:fd:3c:e4:59:b3:88:44:ec:
e7:1e:80:5c:4d:bd:40:a5:14:9e:1e:c0:ad:5f:e5:cb:ea:d3:
bf:0f:88:dd:d5:47:4b:32:1f:dd:9d:a7:c0:3f:ce:bb:0a:ed:
6d:b7:69:e4:1c:b3:b1:45:8e:6b:16:61:67:d5:e8:a1:c4:1c:
e2:30:e2:7e:aa:7e:98:51:7c:82:65:74:b7:eb:22:9e:22:8d:
30:50:db:e7:e3:00:30:24:f4:35:57:49:2c:d3:2e:69:0d:fc:
79:83:6a:e9:cb:ca:b3:33:bc:85:c4:c2:70:41:26:c5:60:5f:
2c:98:7a:97:d8:2f:d4:fb:95:45:12:73:64:13:3a:9c:16:d3:
e3:1f:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:33:09 2025 by rpki-client