Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: hhp2MFi2fJ/8bEY+EAle1708OLu/+h/2RTfno6k5yzs=
Subject key identifier: CE:03:0E:1A:1E:85:9A:B6:2A:D0:82:B3:B1:8F:82:25:DD:0F:DF:52
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0194BCA97C9EAD9E398A4ADD606C83F3D652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 0FB1
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: Y8RHohZvo9vxRmny0/PejwcdT5/gFrnjoTrmVOrZIG8=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:9e:ad:9e:39:8a:4a:dd:60:6c:83:f3:d6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=ce030e1a1e859ab62ad082b3b18f8225dd0fdf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d8:d0:9a:29:7c:64:05:8c:8b:d6:6f:25:cb:
ad:55:37:76:42:51:3f:61:96:91:70:0f:40:7a:79:
87:12:88:28:16:b6:8f:7b:f9:23:37:b4:57:61:2a:
6f:cd:fe:d7:d1:f1:0f:4b:ee:2b:76:bf:16:43:42:
3e:a2:4a:8c:ef:69:92:1b:43:3e:3b:32:73:ed:dc:
e8:20:15:93:55:54:21:06:f8:0d:7a:aa:1a:02:e5:
99:63:6d:cf:9c:ff:dc:90:05:ab:f1:68:e2:09:d0:
7f:9d:1d:33:6a:5f:81:8b:0b:5c:13:3c:c8:40:d0:
f7:14:f7:2b:22:69:11:97:f1:7a:e1:bd:38:ad:cc:
4e:ea:85:c3:51:e1:e0:01:32:da:6f:b1:97:a2:ad:
d1:3d:4d:f2:02:08:d8:ac:65:53:57:64:2d:62:f6:
54:31:33:2d:f4:ad:8f:12:8f:cc:b8:a7:4e:5f:62:
1d:2c:8a:a6:e6:f9:31:5e:ed:5f:97:ac:40:15:5f:
1a:75:47:4d:2f:96:d5:3b:cd:9c:c0:71:9f:1b:37:
3e:07:6c:b9:15:4f:1a:a0:0a:d0:ed:b8:1d:30:71:
5b:40:0c:3f:42:6b:96:7f:d7:65:b7:84:ea:90:3d:
7e:1f:2f:71:b2:2e:54:97:39:5b:24:1f:9e:78:2d:
ed:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:0E:1A:1E:85:9A:B6:2A:D0:82:B3:B1:8F:82:25:DD:0F:DF:52
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:d2:07:fc:3f:fa:d7:4a:35:0b:ef:fc:4b:de:c1:62:14:
95:7a:02:c4:1c:f7:d3:b9:4b:28:db:c3:fd:20:09:71:38:93:
0e:a6:b3:37:40:02:ce:e1:4f:d2:d1:ef:fe:66:e3:fa:3f:e0:
4f:45:2f:b3:76:70:b0:66:64:d9:d5:1e:a8:e7:9f:5c:29:72:
0e:2e:ff:2e:8d:fc:11:36:ae:83:69:4b:85:48:2e:85:99:c3:
79:02:b1:42:58:a3:54:ba:e6:cd:3d:40:8f:13:36:21:b1:60:
0a:b1:f8:27:8a:5c:5c:49:75:c0:41:35:2c:5c:b6:36:0f:b2:
b7:81:cc:6e:77:4f:41:7c:73:ee:e6:93:53:57:37:13:3a:ba:
dc:76:9f:99:38:e1:c7:b7:fb:e2:53:88:d3:73:e2:13:4a:ad:
53:60:50:13:b1:a8:22:4b:c1:b5:30:ba:35:dd:25:90:69:10:
dc:ce:c1:d0:8e:e3:65:b5:28:d2:b9:8c:ff:ad:92:08:bc:c0:
d5:27:7d:e7:01:14:33:01:3f:a0:9d:4b:41:f1:fd:ee:5c:31:
d8:3e:6f:a4:bb:28:3b:90:4a:d7:b0:4e:27:a6:35:33:86:40:
21:6f:da:0f:b9:99:94:c4:05:b1:fe:a9:c5:c9:d2:09:61:d7:
f7:5f:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:54 2025 by rpki-client