Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: hvQXeHW8YDJvPTMw5ols5DhqK4RZ6YioGih5gE9GgLM=
Subject key identifier: 3C:46:63:77:97:A6:74:11:AF:15:E7:F3:A1:D2:70:50:6B:E9:47:E9
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 0194BD4EBA13C626EF3A13BD482C4365BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: msFkC/JGm0yd89UgYwikjRgCLxFDjAP6kx0HC6gSfTg=)
2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:13:c6:26:ef:3a:13:bd:48:2c:43:65:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=3c46637797a67411af15e7f3a1d270506be947e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:93:86:a7:5c:0e:17:72:77:e4:c4:2d:b7:
5b:9d:e8:f3:99:0b:da:1e:ab:d3:a3:61:2a:dc:fa:
cb:90:5a:3e:e7:f5:fd:dc:5c:85:f3:38:16:ec:7e:
69:c1:f8:45:39:9c:a2:98:b2:c0:95:89:30:b4:f6:
4c:b2:e2:20:a8:41:66:be:c0:11:f2:d0:5b:00:44:
7a:2a:36:41:ae:b4:15:1b:bc:79:50:83:7b:1a:81:
b8:8a:e8:95:8f:29:0b:ee:d7:9b:87:8d:e4:c5:72:
95:f8:f0:e9:42:de:f8:1a:68:04:a3:ac:d4:31:c5:
84:6a:7f:26:17:86:d9:0a:a0:a8:57:37:d6:38:20:
4f:a9:0b:82:f8:62:69:bc:c0:1f:d8:35:5b:6a:d6:
9a:d2:46:f3:f1:76:2c:05:58:5e:7e:2a:2c:32:ef:
8c:25:ed:7c:7f:0c:1c:24:26:a3:d3:4b:49:c3:94:
87:e9:54:74:81:9d:6c:76:66:d7:a9:d8:4a:b7:8c:
e5:ad:6c:01:54:36:6e:66:74:f5:68:09:2f:d7:07:
18:7e:e0:a9:18:31:37:af:b9:ee:87:aa:1f:5f:94:
2f:b3:ca:16:66:ea:73:5d:58:76:c3:77:dc:74:be:
a5:c2:74:70:30:6b:bf:5b:ce:dd:ea:27:40:bd:49:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:46:63:77:97:A6:74:11:AF:15:E7:F3:A1:D2:70:50:6B:E9:47:E9
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:76:bd:9e:d6:e6:07:d5:ce:ae:94:17:ec:b9:b4:f4:9a:49:
08:84:d6:75:b3:6e:bf:dc:85:53:ef:99:6c:4e:12:94:ac:b1:
2c:1d:ec:c0:23:c2:7e:0a:64:52:bf:8a:b2:66:c6:7f:76:4a:
30:b1:f2:d4:71:df:c3:7a:3c:6e:06:42:04:62:f3:d7:9a:5f:
eb:e7:6f:c6:9c:9d:5f:71:20:3c:2a:b5:17:32:b8:ce:8f:96:
8d:55:f6:54:77:e5:07:a6:b0:e1:f9:11:b0:b5:f3:0a:d1:3c:
7d:37:c8:90:67:c2:a4:12:86:18:0d:b0:17:d6:f1:68:7b:6d:
df:6f:08:65:c1:77:c7:f4:51:27:ff:56:cf:b0:fb:6d:8e:14:
0f:48:a0:72:5a:43:cf:65:f8:05:2e:11:79:8f:54:e3:ff:12:
e2:05:81:c0:b2:76:78:d1:b1:2c:cf:1d:13:89:93:64:ab:99:
21:06:e3:0d:d6:f7:02:f0:e0:79:03:c9:70:13:ae:dc:75:70:
bb:0c:6f:28:04:46:cc:d5:0f:94:be:31:fa:fe:aa:c3:47:1e:
5e:69:11:87:b7:ad:c3:c7:29:23:1e:74:41:82:c7:ab:92:fd:
5f:ef:f1:7e:74:a2:0a:77:14:b0:e1:d2:a2:fd:e5:43:d0:f6:
8f:61:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:36 2025 by rpki-client