Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: EGFSz/Bj/ftWE3HOXiW5iiU/0WRURJZeaf4EZprOe7w=
Subject key identifier: 17:1A:E4:4E:49:EE:D8:86:AA:A3:6C:8A:16:6E:F8:3B:F9:9B:72:F0
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0194BCE09056FAD51755744AB3D4AE09CB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 05
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: B-Er3iFbDhKHgZepd9cohq0cVQk.roa (hash: jtx1vXImr7yVpzKZUudCNhlkYJibcaWuKGAsJwBSbxY=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: 2thaM9MugSSU8WRlN6bJlHMkTjCmGjsHuP/LQgYknd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:56:fa:d5:17:55:74:4a:b3:d4:ae:09:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=171ae44e49eed886aaa36c8a166ef83bf99b72f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:30:59:d0:4b:74:ae:89:60:e8:13:07:21:
41:c4:cd:32:c3:cf:31:0b:c0:6e:1b:6c:b7:8c:8a:
2e:67:f6:c0:a7:64:2b:e5:e8:ae:75:82:41:a0:b7:
50:ae:a2:a6:0e:e3:73:b7:e1:e0:a6:3f:ac:b9:f4:
23:1e:e4:df:ad:07:9a:a5:0a:66:56:72:4a:d2:ce:
bc:8c:ef:91:e2:46:f3:23:74:09:f8:a2:c4:dd:37:
91:09:43:b1:0b:53:00:9f:59:87:28:03:38:56:7b:
38:9b:34:8e:45:ca:cf:2c:3c:79:32:f0:90:5b:9f:
73:6a:40:b9:ba:38:27:7a:02:dd:4e:12:b5:34:a0:
a4:3c:8c:b0:10:55:ba:8d:f3:58:77:db:33:76:12:
b3:b4:d5:bc:c7:93:9d:63:22:c5:45:15:dd:6d:28:
91:6e:86:6a:28:fa:b9:ff:e9:71:1c:12:37:31:3a:
59:9f:8b:b9:10:ac:1c:03:9a:82:4c:09:56:20:f5:
e3:2a:4c:2e:b2:2e:13:7c:23:65:68:46:5c:de:ba:
99:ed:5c:d2:da:50:53:70:83:64:40:3d:8f:af:47:
c6:54:85:85:54:57:35:1a:dd:84:7b:6c:63:17:f3:
3e:78:a6:fe:bb:0d:50:cd:2c:29:05:ae:4b:d0:70:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1A:E4:4E:49:EE:D8:86:AA:A3:6C:8A:16:6E:F8:3B:F9:9B:72:F0
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:63:7c:fc:f1:c9:64:96:aa:03:90:6e:4b:1d:d0:ef:a7:b5:
c8:5b:10:90:6f:ed:af:38:de:87:b7:e1:7e:fb:65:35:b0:11:
c7:c6:54:c6:8b:aa:3d:8a:5f:44:49:23:01:f7:6d:29:8f:3d:
1a:cd:f9:b0:03:09:ca:08:50:ed:8f:7d:3e:ec:95:be:00:f3:
4e:ef:18:d8:b2:60:0b:3b:7c:5d:3d:72:de:a8:b9:1a:d7:13:
7e:37:5d:a9:c6:b7:ed:b0:3e:41:32:3c:77:09:09:e8:2d:24:
8e:bf:67:3a:e7:87:d7:bb:de:c0:2e:4a:63:43:03:34:05:03:
9d:52:19:12:cb:5f:cb:f8:a0:0a:eb:3d:db:f5:60:e2:f0:ef:
cf:06:c8:7e:f2:48:09:1a:2e:bf:9f:8a:37:c3:b8:59:15:39:
90:7c:03:fb:ac:ea:7c:4a:67:ee:94:73:c4:9c:ae:27:42:4d:
4e:45:5e:b0:f5:dc:f3:d4:05:f4:2c:1b:d2:27:28:44:76:2e:
51:60:3b:2f:9d:21:c5:26:0a:10:3c:5d:89:75:d3:aa:ab:24:
c6:84:b4:cd:e8:16:12:f8:71:dc:97:90:f3:f7:c9:0b:2b:6c:
f5:4c:08:40:fb:26:92:ca:53:09:a3:cf:29:39:46:07:3b:0a:
92:74:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:06 2025 by rpki-client