Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: UmGMHHJtAbUHaVeAq8m5fK636XcHOgotA3YW02+aMdk=
Subject key identifier: 56:81:23:33:65:8F:D1:80:D4:F5:0A:2E:22:93:06:C7:AE:56:42:B9
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 0194BBCEAC2466A4E3685F5F2E4187B7AB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: v6q9CAGlByAhOaUIPSNqlR1cSzehyUgY2kL6c6S9g1s=)
2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:24:66:a4:e3:68:5f:5f:2e:41:87:b7:ab:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=56812333658fd180d4f50a2e229306c7ae5642b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:c0:1e:39:33:3d:92:89:c9:7a:31:29:9f:
ca:8e:51:db:53:91:4e:a7:cf:ea:cc:98:52:24:0a:
80:e2:84:b2:c2:16:9c:dc:1a:30:eb:e9:36:ec:35:
ad:12:ff:a7:56:22:f4:28:f6:86:f3:29:a2:f1:d7:
06:9a:35:6c:b4:7c:9d:88:ca:36:0d:73:fd:07:90:
d3:8f:01:4d:4e:db:1b:88:d5:fe:b1:1c:0f:9c:0e:
0a:ed:ed:39:24:63:9d:ce:de:4a:0a:cf:e7:a1:57:
f0:d1:4c:a7:a9:e2:fc:67:ae:43:e9:b4:83:a7:f9:
3f:3c:3f:88:5c:e3:93:5b:11:ca:ad:2b:62:fd:22:
3f:7a:94:bc:f1:fa:ae:9f:ca:01:53:96:a9:80:c9:
1e:04:79:0d:cc:23:40:68:f5:fc:a0:2d:00:ae:00:
fa:f5:1a:68:be:6f:a5:e4:25:95:b7:a2:31:ba:9f:
b9:be:0d:ad:24:97:dd:b5:f0:3a:e0:31:d4:33:c2:
ae:0a:4a:66:85:a0:a3:09:1c:c4:23:83:7b:a8:9f:
dd:4b:9f:75:8b:52:81:98:08:1a:2a:09:1d:72:39:
75:fa:86:57:bf:4f:6c:2e:71:3c:4e:94:8b:29:da:
3b:0d:e2:af:36:82:05:da:c6:d9:e8:8d:0f:bd:2a:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:23:33:65:8F:D1:80:D4:F5:0A:2E:22:93:06:C7:AE:56:42:B9
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:79:49:32:11:71:56:6d:49:94:d5:d3:0b:3d:c2:e0:eb:6f:
f3:b5:91:6a:de:4a:c8:a7:40:b9:3a:21:2f:99:7e:f0:3e:e9:
df:b3:56:56:71:81:f2:e6:cc:0c:e7:93:42:36:ce:f4:a7:5b:
fb:05:43:c1:ec:f3:a9:99:b1:ad:70:30:2c:77:59:c4:d6:4a:
35:12:2d:33:4f:92:be:3b:b9:19:40:1b:2e:8f:be:f3:d6:7c:
f1:7b:56:1c:cf:2a:23:58:aa:da:11:6c:9b:3b:a8:cb:4d:91:
1c:b6:e2:b3:dd:33:5e:21:0b:38:5c:44:c8:3f:40:2b:9a:a9:
ab:08:5c:53:29:dc:0a:3d:d1:0f:4d:c0:6c:7e:d6:51:b8:97:
27:a9:77:b2:9c:fe:20:82:af:b9:3f:1a:60:85:e1:df:88:af:
c2:90:92:75:70:29:58:47:7c:f3:01:ca:cf:7a:07:c1:c9:de:
07:f3:37:87:8a:d3:00:0b:a3:29:9f:b7:56:5e:3c:8a:0e:1d:
58:46:51:ca:7c:4a:51:ab:07:70:79:9b:6a:00:57:3d:a9:18:
fb:f7:e5:4d:7b:07:ed:d7:98:9b:7b:f4:33:bb:0c:e4:88:f8:
84:f0:38:8a:e0:0a:3d:52:6f:0e:3f:14:c9:61:59:05:97:27:
cc:74:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:01:22 2025 by rpki-client