Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: ah54wg3kFFcry9k8Kt2pbOLxs3nk0xIA98H+OjH/oRE=
Subject key identifier: 03:43:BF:C8:E1:CD:B6:1D:5A:A6:B3:A8:32:C7:76:F4:5D:A4:96:AB
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 0194BCAA2667221954EEB5CB01F74D7FF1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: FjIahcKt09OuzmKTy1-sTrhxfJE.roa (hash: vdC0TpdFOFzZCc1CfiRmwTujlsmnztXNdvUzRtn8G+A=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: YXQathkmUKlu+rYhpHhjoi2IHRgvTZW7lVlOzeLkU+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:67:22:19:54:ee:b5:cb:01:f7:4d:7f:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=0343bfc8e1cdb61d5aa6b3a832c776f45da496ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:31:0c:1a:5a:bb:45:40:d9:18:fe:59:20:
39:29:d9:51:4a:29:4f:2b:56:57:8c:97:e9:b1:93:
cb:c7:a0:e3:c9:a9:71:d4:43:03:18:23:b6:4a:83:
b0:f0:e4:85:db:d7:db:e9:69:97:fb:87:c9:0b:ad:
82:38:cd:71:21:c4:d5:ad:e6:be:4b:5c:60:b3:29:
14:28:5d:dd:69:23:cc:8d:cb:f8:12:e5:8c:d8:d4:
e3:26:ac:df:1b:43:90:87:fc:4e:48:14:8a:a8:43:
8c:d4:50:de:53:28:f2:7d:47:6c:31:b9:65:df:08:
f0:f0:d8:05:f0:c6:ed:c0:e8:4f:42:44:6e:ad:11:
0e:8a:92:1e:91:25:8f:db:46:1f:bf:95:87:9f:94:
74:a9:9f:46:e1:4b:48:a3:98:7d:f0:0d:d2:15:3c:
4b:b4:59:06:bc:5a:92:25:47:e5:b3:87:e5:0a:c1:
3c:cd:0b:b3:db:4c:fe:5e:63:57:08:d1:93:70:33:
7c:25:2f:af:b3:7a:79:fa:a7:4d:1c:cd:d7:f8:5c:
62:24:0b:68:89:94:6a:b4:3f:f3:7a:90:23:a5:6b:
34:67:9c:d7:25:98:86:d7:49:28:77:7f:e5:a2:ad:
28:7a:99:d2:22:c2:87:8a:9d:16:8d:04:a1:e1:a6:
c9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:BF:C8:E1:CD:B6:1D:5A:A6:B3:A8:32:C7:76:F4:5D:A4:96:AB
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:08:12:1f:29:0a:08:07:d1:3c:ff:47:eb:22:67:16:b5:4f:
52:56:e9:5c:1b:c2:e5:5f:c7:ad:9d:7d:46:01:9b:56:1c:ac:
a1:ac:9a:f8:ff:f3:b6:18:5b:d2:83:87:ea:ab:ed:2a:58:88:
ca:69:c0:0d:bc:ef:ff:9c:8a:9a:c3:64:3d:e2:8b:2d:18:d1:
93:61:97:91:ae:11:5d:1e:e3:6c:cc:9c:07:e7:80:cd:37:1a:
39:28:c4:0c:d3:16:26:89:d1:ef:44:aa:51:21:b5:e0:39:a3:
8c:ce:e5:89:b0:86:19:0c:b1:8a:8d:00:87:d0:82:59:8c:3a:
46:c3:89:64:f8:35:27:ff:20:e7:82:f9:25:f5:18:c8:5e:2d:
41:01:7c:72:a0:c6:6e:9e:a6:1b:d9:d1:21:5e:3f:a2:25:fe:
fb:46:be:06:01:02:65:06:12:d9:e0:53:d6:00:ec:2f:ea:03:
e8:21:14:9f:98:41:42:88:1d:ec:25:6f:44:fa:c3:4a:bd:6d:
2d:d5:77:05:2d:1d:4c:36:c0:80:8f:96:a6:97:93:54:04:ca:
dd:f8:7d:42:74:f4:60:5e:24:7e:49:9a:d5:91:f8:61:91:51:
2a:f6:12:0a:af:b4:a7:16:78:ee:ad:a6:6b:e4:38:3e:c3:c4:
08:2f:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:27 2025 by rpki-client