Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: HzwVeBi4Z/J2OpTzioiYXKqhBv5ZkoN2j2+LgXqXoi4=
Subject key identifier: CF:6D:6F:2A:10:E0:99:88:BE:AF:85:90:0D:54:A2:DD:30:80:30:23
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 0194BD4E6CD2887158192E5ADC662DBF54A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: SSYMGaueVBaunK8JAmor7U/YI7ofLYBJfDD7hQilJbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6c:d2:88:71:58:19:2e:5a:dc:66:2d:bf:54:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=cf6d6f2a10e09988beaf85900d54a2dd30803023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:2d:ff:12:ed:c4:51:67:88:97:0c:fd:15:
51:99:64:30:e5:67:76:89:6d:7e:6c:d4:e2:4e:c7:
1b:a8:04:d7:02:05:e8:86:66:a2:36:e9:a3:7a:bf:
30:62:3e:3d:ed:d5:de:31:a9:64:e2:d1:82:fb:f7:
a8:86:a4:55:75:fd:27:ce:9f:dc:91:0f:de:dd:f1:
d2:21:53:a8:71:03:f0:e7:cf:01:b4:bb:24:47:8e:
08:44:3b:40:31:ab:f0:43:c1:f6:a9:a7:8d:19:0f:
49:1b:32:5c:6e:77:96:61:60:4f:50:0d:0e:f1:d6:
5f:b8:58:c0:cd:ff:80:58:d6:7e:f9:69:0e:c0:97:
ee:5e:00:74:7c:96:6a:90:07:82:86:f0:f9:13:6e:
af:08:c5:3c:fe:8a:58:bb:76:95:aa:ed:3a:3c:37:
1e:d1:23:12:7b:d1:3e:c0:81:f5:a4:12:7d:b5:05:
e4:65:a9:04:a2:2e:77:cf:8f:9d:63:51:19:44:78:
61:94:31:8d:a4:ce:b2:13:2e:9b:b0:68:8f:66:fd:
20:41:02:07:d7:0e:a0:c2:be:a4:d9:3c:2f:a3:fb:
45:a9:f3:d2:bf:1b:73:62:6a:ba:f0:f0:0a:a3:bf:
fc:2b:a3:02:9a:c3:06:6f:d1:37:c4:34:80:b8:0b:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:6F:2A:10:E0:99:88:BE:AF:85:90:0D:54:A2:DD:30:80:30:23
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:24:32:9d:ae:ec:80:34:3b:d2:72:a0:00:00:13:5d:91:
ed:0a:f3:7e:a4:f8:b1:19:ef:08:d1:c8:e9:29:a3:80:e3:4a:
7b:d5:10:1a:b7:9c:5f:99:77:7e:35:e5:8e:a0:d1:09:51:34:
11:16:04:ee:d4:1c:b5:8a:aa:c0:11:a1:b9:d0:0c:71:e5:f7:
f3:c5:8c:ef:43:11:fd:50:4d:9f:1d:08:a3:b7:bb:8d:3d:5d:
f4:9f:e8:f6:a0:d1:e8:ac:1d:a1:cd:f9:9b:6f:71:3d:5f:71:
71:95:fa:19:e8:37:90:2e:f4:6e:28:75:db:55:17:1b:67:9c:
5c:bd:e0:dd:c0:7f:09:c1:69:4f:e4:87:1f:87:4b:3f:8e:72:
52:2c:75:75:55:a8:76:57:95:01:a6:02:db:82:f8:72:53:04:
e4:6d:73:6a:bd:67:1e:4a:53:93:7b:45:b7:99:a5:18:1c:5d:
88:45:c4:57:fe:cf:c8:8e:4b:c3:68:99:4f:d0:0f:07:63:45:
a6:1a:e9:f3:3f:48:8b:9e:1a:00:dd:17:2a:88:19:83:00:50:
a8:9e:0c:0f:b9:1d:a0:4b:b6:be:a6:6c:64:03:0a:0e:f5:1d:
5c:30:73:ee:b5:ce:db:63:39:a2:6c:e9:a4:90:f1:da:fe:1e:
2e:40:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:41 2025 by rpki-client