Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: dDQjAuAKcy8zUdsQ/p6luN6RHQ/dP30pixy8szZA5O0=
Subject key identifier: 2F:1A:C2:93:0C:97:49:C9:E6:13:72:9D:3A:0C:98:DD:0D:FB:DA:20
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 0194BDA09B6A9F015103E9C3368572FB603B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 03F7
Signing time: Fri 31 Jan 2025 18:30:06 +0000
Manifest this update: Fri 31 Jan 2025 18:30:06 +0000
Manifest next update: Sat 01 Feb 2025 18:30:06 +0000
Files and hashes: 1: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: qcV4fTBsQqW5yUer+yCP+hMqSQ8jzCcofm3YrTvTx+8=)
2: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
3: iL1epaX81Uq1u1Vt8v_LyUUIIKE.roa (hash: O1duuQqWAaqh3DHxl+OWDb2NFBwVRxAmp4BqT82NJBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:a0:9b:6a:9f:01:51:03:e9:c3:36:85:72:fb:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jan 31 18:30:06 2025 GMT
Not After : Feb 1 18:30:06 2025 GMT
Subject: CN=2f1ac2930c9749c9e613729d3a0c98dd0dfbda20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:28:b9:bd:ba:1b:18:9f:1a:25:bf:41:68:
29:28:26:cc:b6:79:d1:ea:55:31:4e:d7:6c:cc:e1:
c1:28:ea:74:2a:b5:3b:97:70:6b:c8:c4:ad:43:4c:
dd:19:6a:09:c4:68:91:ae:31:99:e0:e0:d0:d6:7a:
97:bd:e3:bd:91:4e:b7:c9:a5:e5:91:7c:69:4c:33:
f8:a9:8d:84:e8:1d:98:39:fe:11:84:a9:f9:cd:ae:
fb:87:a2:f8:f9:0c:c6:fd:85:2a:d6:8b:06:33:35:
de:e6:89:42:57:88:b4:12:76:3d:7c:b1:39:38:71:
d9:cf:6f:55:02:fe:d1:4e:54:3e:5c:0f:7f:00:bf:
bc:51:d2:4e:d0:68:5b:75:85:8d:39:88:7b:a1:49:
9a:1a:5e:0e:6e:64:1d:6a:46:f1:16:ac:db:de:ee:
ff:ef:20:3e:5a:aa:0f:a7:7b:9a:dd:8e:7e:b2:4b:
bf:8e:1a:86:f5:6a:98:0f:11:c7:d4:ee:7e:4d:68:
32:29:84:2e:5a:21:ab:37:50:c5:b7:9d:48:e4:30:
14:a3:10:5e:8a:5b:ee:15:62:86:14:18:d4:8b:98:
42:14:f3:46:eb:fd:63:77:8b:7c:38:8c:f0:a0:29:
a3:30:77:14:36:1a:83:39:a5:14:df:a2:62:8f:9a:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:C2:93:0C:97:49:C9:E6:13:72:9D:3A:0C:98:DD:0D:FB:DA:20
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:a6:fc:d0:ea:e1:f3:b4:12:da:eb:ae:f4:8a:c3:8e:b0:
7d:14:ee:d1:a9:23:fb:5e:f7:e1:ef:26:f8:0a:bf:d0:cc:02:
2a:63:f5:3e:d6:c5:1e:cc:29:22:81:b2:f2:8c:db:a4:de:31:
9d:b0:ae:6e:c2:12:43:4b:4f:51:b9:6c:28:c7:b0:9e:75:69:
d6:71:6a:c5:a5:06:6a:5e:45:e0:76:e3:40:48:62:2f:78:83:
9a:b0:90:9c:73:5d:f8:22:73:82:2c:5b:dc:fb:a8:7b:b0:cc:
70:c2:1b:19:0a:81:b1:10:8d:c5:79:92:e8:c6:b0:05:25:23:
7a:19:ae:09:8f:fe:57:6a:4a:84:d9:eb:a6:35:3b:8d:8b:a7:
10:f5:43:48:fd:b5:13:60:0d:e6:08:cf:e7:4b:dd:56:39:37:
6a:70:56:4a:48:d4:de:53:dc:5b:6b:5e:2f:d2:9d:c3:d5:a4:
8d:4c:c4:6a:40:14:bc:83:09:af:b3:a4:84:1e:60:7c:db:e3:
cd:87:a3:54:fd:2c:f0:ee:e7:8d:5c:ec:c7:7d:b6:7a:f6:ea:
2b:75:57:55:eb:56:fc:be:60:28:1f:a6:31:98:5f:dd:aa:92:
f9:df:8d:87:20:68:51:ab:1f:fd:2e:21:eb:c2:d9:c6:45:f9:
11:88:3d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client