Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: umZmFC/xFKo7IwrLkkhYKnw/AqleApvkTI1+2LsxrMo=
Subject key identifier: 3C:99:C6:4C:44:88:52:18:33:E3:65:FC:97:6F:C1:85:26:EE:8D:BB
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 0194BC3C346FC843841D5D7C621C9735735D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 0252
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: Oq6UN5VFdQ/D/k2Yb3Bh+Hd9PQ718snkaO+4P67BC84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:34:6f:c8:43:84:1d:5d:7c:62:1c:97:35:73:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=3c99c64c4488521833e365fc976fc18526ee8dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:f0:68:d6:c0:92:16:b1:9e:3f:ed:04:a2:
35:d3:99:5e:15:43:62:89:74:5b:2c:d3:9c:d8:1f:
56:65:28:35:dd:94:68:c1:08:c6:3f:c6:b8:cf:84:
a8:58:8a:fc:8f:ac:44:91:61:62:2d:07:db:7a:df:
0c:88:01:f2:31:8d:2e:e6:8e:94:9f:21:78:ae:94:
b4:e7:0a:30:92:e7:92:00:ae:2f:36:b6:14:49:62:
c2:40:cc:4b:5c:bf:cf:2d:b5:55:fa:d9:cd:39:33:
fe:37:60:05:da:9a:8d:39:62:54:e5:31:25:d8:26:
d0:4b:02:62:92:dc:12:61:ac:45:d3:a3:93:c0:0d:
7e:ac:60:e9:f1:23:27:9f:bb:d2:e5:07:6d:a3:e1:
57:a8:b7:ea:c8:28:89:de:e4:5f:80:12:54:37:ed:
60:35:08:e5:37:7a:13:56:75:9d:6b:8b:bb:42:83:
ea:d5:a8:53:05:b4:40:6d:13:2e:d3:01:6d:6e:c5:
74:2f:c5:21:71:db:73:33:63:43:ed:01:dd:ea:34:
88:ab:d8:0e:ca:bf:d7:ce:46:75:10:18:f8:b1:b5:
96:52:c4:fe:7a:9d:40:ee:3b:aa:8e:fd:ad:91:a4:
e3:aa:87:79:9e:7a:f2:a4:0b:3f:8c:c9:5e:28:d9:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:C6:4C:44:88:52:18:33:E3:65:FC:97:6F:C1:85:26:EE:8D:BB
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9b:6e:bd:48:9b:e8:98:75:d8:4c:ac:e0:af:ab:91:60:19:
43:75:8d:e6:b7:4a:c4:11:47:ca:79:7d:ea:c8:83:b9:eb:da:
f5:a5:35:c6:e5:35:bb:32:be:4d:8b:2e:df:fe:ce:63:37:2b:
4f:7a:f3:ab:ac:1d:27:42:43:c7:a0:89:60:a7:0a:42:c6:48:
42:39:02:19:94:78:5f:ba:7b:92:6e:43:00:12:01:cc:40:ed:
f9:a6:6e:e4:c7:d0:04:1e:fb:80:4c:18:88:a7:57:5c:76:c2:
ba:4f:88:76:b2:3d:74:10:77:4e:91:aa:df:31:1e:68:bf:35:
40:dc:3b:49:82:5f:09:26:89:d3:ca:43:d3:be:17:2a:1f:28:
17:7e:6d:96:d5:eb:9a:69:4d:0e:f5:cb:81:bd:7c:fa:64:ad:
1c:61:3d:f1:c9:6e:ed:dc:ec:13:84:b0:79:9f:31:71:68:b0:
fd:21:57:f8:2f:66:5d:95:f9:91:cd:b2:b5:ad:c6:7a:e5:b8:
b5:5a:de:7c:65:8a:b8:fa:9d:b4:de:99:a2:b9:8a:d2:94:10:
0a:5d:aa:da:89:d9:fe:c4:8e:46:fc:bd:87:9d:73:99:99:f7:
8c:dc:0c:c2:89:fa:4f:20:a2:a9:e7:65:15:2c:d6:b1:4f:0a:
6c:4c:7c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:30 2025 by rpki-client