Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: sBCVLBT11sa0Fxye68QkGTJNpXpiR6QfVCxLJLSk6Jg=
Subject key identifier: B3:45:D9:3F:A9:F1:A5:5A:69:C0:CC:A5:1D:35:8F:EA:28:04:D3:A6
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 0194BD4E7074AAF20769A31B5BCCA857D4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: DzjG9YRNWvLXFey/vsq7v1Sl4sF5BAvOirB9xaxWVb8=)
2: lfZO-nWkaoTXZTi4RoQHSm318ow.roa (hash: 9Kr4yTNhbS0HlCD1uQ6QMxvXnJa73wNUTUUE6wDZR5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:74:aa:f2:07:69:a3:1b:5b:cc:a8:57:d4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=b345d93fa9f1a55a69c0cca51d358fea2804d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:c1:b9:71:dc:a1:c6:ee:f2:50:7e:99:3d:
ff:aa:c9:40:35:8a:77:1c:64:76:f5:08:82:eb:0a:
a6:c6:e5:d9:c0:85:db:6d:bf:d2:c3:8c:b1:4c:7c:
3f:28:58:a8:df:3c:29:4b:d3:c6:57:24:14:ff:4c:
b1:c9:e0:b2:52:d6:d3:e1:63:99:b6:5a:97:07:c7:
5f:aa:3b:3f:0a:82:28:6b:38:93:05:03:27:0b:4e:
2a:07:79:0c:8d:28:16:aa:c0:7c:5e:7d:07:99:25:
fc:93:b5:55:81:71:46:05:c1:c8:f9:35:75:7b:ab:
5a:74:01:79:46:ee:af:65:c2:3a:a9:03:4f:ce:a9:
cc:ab:07:04:a4:fc:da:46:9b:a4:76:be:60:4a:87:
d9:d3:f6:48:c8:d2:5d:70:3c:7a:a6:fb:4a:a0:44:
ce:92:00:94:52:7a:c9:20:7c:14:dc:89:03:11:1c:
64:4e:a3:66:29:f2:36:51:f6:51:cf:72:20:7e:b8:
cb:1f:e5:26:03:cb:b4:b5:08:3f:75:95:4b:6d:1b:
d0:7f:53:c1:01:b1:e2:d0:87:79:fb:ce:99:37:3b:
f0:11:05:87:ac:d4:c2:66:a7:2d:4d:fd:39:30:b1:
7d:12:a7:32:0d:84:98:32:2b:57:95:e5:54:ff:87:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:D9:3F:A9:F1:A5:5A:69:C0:CC:A5:1D:35:8F:EA:28:04:D3:A6
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d3:bd:47:50:42:62:bb:db:65:9c:6a:22:fc:92:06:e5:ce:
bf:38:4e:f6:24:3f:71:e0:c9:64:74:0f:eb:9e:ce:6f:69:7b:
67:a9:85:38:74:ff:04:d3:d2:d1:9f:72:a9:44:30:55:64:c3:
a8:18:ba:96:16:31:ad:ef:25:2c:1c:f6:88:5c:8d:f7:42:56:
1b:78:61:2a:cb:8b:d9:0b:16:6d:a3:9e:98:0b:78:f4:cc:7b:
9c:93:81:1b:7c:0c:d5:d1:d9:5d:88:5f:c7:a9:7b:50:8b:88:
8e:64:2a:8a:72:74:77:8c:9c:8b:59:a4:15:ca:5a:f5:01:3e:
d0:b8:e2:16:e4:8b:bf:a3:e2:8b:cc:c9:a4:cc:0c:e6:09:69:
7e:43:79:83:c8:aa:1d:7a:28:59:41:a3:d6:40:7a:a4:55:11:
31:88:c8:3c:84:08:21:d6:84:62:c2:01:b9:93:ea:65:4f:f1:
f1:08:c8:ec:95:0d:9e:a7:36:20:45:c9:8b:7d:84:1f:d3:8b:
2c:f8:84:a8:eb:1e:b7:1b:9e:15:8c:8d:6d:c0:83:58:b4:0e:
dd:4b:ae:d3:5f:e8:95:b0:93:3b:41:88:8c:56:aa:9f:98:b6:
9d:a3:70:e1:e7:7b:73:54:15:89:ea:10:87:56:ec:a6:a0:82:
3c:c3:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:58 2025 by rpki-client