Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: 4fKain3gVIgC6S983WGzXqb7TIecnaFpYU98VBXXkzc=
Subject key identifier: 1D:EC:56:F6:D2:9C:F0:46:FE:AA:F2:FA:BF:E3:3C:30:B6:62:7C:3B
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 0194BC3BE0D8A84765A9297251727E68C9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 1005
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: EbxytKlJuwrq2drYn6mh+oWpHRSCwDt1bygEpCscISM=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e0:d8:a8:47:65:a9:29:72:51:72:7e:68:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=1dec56f6d29cf046feaaf2fabfe33c30b6627c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:e0:fa:35:2c:be:07:01:33:95:f6:ea:8b:
6f:7e:00:a1:4e:00:61:27:c0:5a:ea:a1:54:18:1f:
1a:e2:ea:01:c2:a2:40:03:58:90:f6:43:27:29:8a:
c0:00:75:e1:cf:09:b7:d3:f3:24:d8:f4:ae:e8:e9:
61:c4:23:7e:33:f1:d2:29:0a:56:0f:c2:48:d9:2c:
b1:c8:53:5d:c4:0e:45:3c:ef:ed:a6:84:b0:45:c6:
9c:05:41:12:91:55:bc:e9:27:0e:c8:eb:16:5e:1f:
f3:65:50:c6:c2:4f:2c:0f:e5:89:44:5b:9b:6d:e6:
dc:93:7a:fd:71:8b:e9:98:33:65:29:31:8d:79:02:
ad:79:35:3e:7e:c7:54:61:c6:04:74:55:e6:57:4d:
77:64:91:c2:1f:e4:a2:e7:04:03:f2:18:ee:f0:1f:
70:2f:93:99:34:9f:da:71:69:25:30:60:17:9c:d4:
1b:3e:ca:7a:ca:1d:0c:2a:30:3e:5f:a3:0b:81:3d:
f6:0e:8d:19:70:1a:c9:35:4d:3a:b0:ca:44:85:e3:
37:0d:bb:2f:3f:cc:b6:e9:38:00:5f:80:0a:45:fb:
c9:7f:88:2a:9d:de:c6:f1:34:7c:29:eb:c4:8c:d7:
51:60:0d:e5:cd:f0:3c:36:1c:29:5a:b6:9c:92:3c:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:56:F6:D2:9C:F0:46:FE:AA:F2:FA:BF:E3:3C:30:B6:62:7C:3B
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:47:f1:25:d3:e1:1e:aa:37:09:05:b1:60:41:55:b8:34:36:
3a:a1:7a:b4:ec:19:bf:dd:da:ed:99:02:98:e3:e6:23:af:ba:
20:da:63:96:57:3d:2f:9b:b9:33:0e:f1:df:0c:5b:3c:ea:60:
36:78:95:19:bf:ef:f3:a2:0e:5a:27:49:f9:e3:d9:c0:a3:d3:
fa:0d:b9:9e:25:34:b3:52:24:2d:d2:31:a6:f3:73:c6:a4:97:
08:71:67:08:5f:fe:aa:ce:3b:46:52:32:06:f5:32:f5:2c:a6:
a8:27:3a:7e:c4:4b:aa:d3:c2:0e:fb:af:e3:a6:8d:b1:29:5a:
c9:74:d6:3f:e4:6e:75:22:26:52:35:00:f1:8e:4e:9c:83:5d:
14:24:76:19:3e:29:52:08:d0:44:fb:03:45:04:c4:f7:ab:d9:
62:8a:2b:92:47:df:49:82:57:fd:76:45:2f:07:91:67:5d:f3:
7d:b6:cf:6d:8e:1a:75:08:c7:a5:c1:29:40:cd:45:b8:53:62:
7c:60:98:ad:56:c4:09:ee:24:c2:74:fc:4b:07:82:de:32:f8:
18:13:ef:95:3a:22:2b:2c:5e:fd:46:19:7f:2b:f4:df:cb:95:
bf:ee:36:2b:f9:7d:f4:3e:e4:5a:65:73:7e:3d:49:a1:cd:16:
ed:2c:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:17 2025 by rpki-client