
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
File: H5UQYGrZTE98emPlwewmxA-0qog.mft (raw, json)
Hash identifier: a6tCj12qRUlS7aLsMrhFrY4/qFT61Sp9oxrUOKTeRg4=
Subject key identifier: 9F:78:CA:C4:BE:81:61:30:87:BB:6C:2E:AA:09:A0:D8:D9:9C:81:ED
Authority key identifier: 1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88
Certificate issuer: /CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
Certificate serial: 01929CECFE0A618E1F66FA6467095DC24A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
Manifest number: 013F
Signing time: Fri 18 Oct 2024 00:00:30 +0000
Manifest this update: Fri 18 Oct 2024 00:00:30 +0000
Manifest next update: Sat 19 Oct 2024 00:00:30 +0000
Files and hashes: 1: H5UQYGrZTE98emPlwewmxA-0qog.crl (hash: fgVyAL/92FPHcGMhTPzJweaKcSySLgufNIDSJ6HSg2I=)
2: dDGfxJgQDEhWRqruzToq6X8nEuU.roa (hash: JnU1eCYRmKhegJDAs13ooRBV55pedHqUqA7hj/wwMwM=)
3: j5MNdfuNQQMbOsQgGZ33Y_QQ1yc.roa (hash: LccVt7voulS6je2wPUOnuLmm4sAJTWJKDhvfQsLRdc4=)
4: yaPKdn8WHVdLbesMuDAkH_fxy50.roa (hash: jcOeVos1WxY9QyFu0f/q9CwSDmvmiCv/vo5FiDzKfuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:ec:fe:0a:61:8e:1f:66:fa:64:67:09:5d:c2:4a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9510606ad94c4f7c7a63e5c1ec26c40fb4aa88
Validity
Not Before: Oct 18 00:00:30 2024 GMT
Not After : Oct 19 00:00:30 2024 GMT
Subject: CN=9f78cac4be81613087bb6c2eaa09a0d8d99c81ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:50:1a:b3:f3:0f:7c:1d:cf:1b:c7:c4:be:a4:
e1:00:ed:2b:2b:5e:6e:86:37:dc:8a:81:af:2a:61:
e1:7e:91:21:66:09:d2:02:3b:c6:0d:1d:71:86:f0:
30:03:0b:4d:a2:45:03:1e:18:08:f3:ba:f9:2a:aa:
40:5c:c5:16:3c:6c:d7:db:7c:38:36:a8:30:c2:2b:
2d:c6:a7:37:18:83:88:4c:43:cc:2e:1f:94:37:44:
9f:fb:d7:c3:f9:79:76:67:04:3c:84:b1:32:1b:5d:
48:c5:99:2e:8c:7e:eb:84:c3:e1:da:d6:64:4e:3b:
c4:a0:fd:8d:49:3c:04:81:d7:bd:e5:53:34:04:27:
72:13:b1:85:58:01:83:41:d1:82:4e:f8:ed:4e:6b:
4a:d9:0a:89:11:fd:40:9e:90:b6:5d:ce:5d:12:b0:
90:ee:bc:8c:39:f5:7c:d1:e1:62:b9:43:65:f8:77:
fe:f6:43:75:05:35:ef:c0:f7:bc:fe:d3:36:e6:17:
0e:3f:2d:92:84:4f:c9:d4:82:f6:1b:37:44:0e:ec:
9c:0f:c1:d4:fa:a5:32:a9:97:e0:4f:c3:66:2f:9f:
61:a8:9b:1c:6f:b6:53:d2:73:3e:61:fb:90:89:7f:
24:25:5c:ac:e1:f4:49:f9:0e:24:fb:a3:65:84:94:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:CA:C4:BE:81:61:30:87:BB:6C:2E:AA:09:A0:D8:D9:9C:81:ED
X509v3 Authority Key Identifier:
keyid:1F:95:10:60:6A:D9:4C:4F:7C:7A:63:E5:C1:EC:26:C4:0F:B4:AA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5UQYGrZTE98emPlwewmxA-0qog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/30bfb7-3c7d-47d7-ac68-9462d4e1cc72/1/H5UQYGrZTE98emPlwewmxA-0qog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:9c:d7:a5:77:dc:bd:b9:73:ba:4c:8c:21:5c:2c:05:bc:0b:
4e:53:27:23:fe:71:a9:b2:5f:70:6c:b7:67:a1:b7:1e:51:a0:
66:d5:78:fd:26:cc:b5:31:2f:bf:36:76:ff:de:c5:2b:b0:99:
28:ff:06:e9:24:e1:3b:64:6c:9d:d3:a4:f1:a6:e3:aa:51:78:
1b:18:76:55:82:57:16:cd:b1:2c:48:1b:46:6e:89:dd:c1:4b:
82:ca:20:f1:fe:1b:ee:85:ec:19:90:a8:70:c3:3a:d1:b9:36:
b8:56:a9:9d:88:43:10:b9:6d:8d:02:2b:ab:e7:00:55:a4:6f:
1b:7b:f4:9f:aa:6e:eb:ab:e3:c2:08:29:c8:73:e6:89:8c:c4:
be:88:6f:9d:f8:e9:26:3e:e2:e6:5e:ed:23:f8:c0:30:bb:95:
28:5c:8e:30:ba:bd:a0:00:ba:ac:41:ae:77:5e:94:93:0d:ff:
2a:38:39:64:fa:4e:db:60:ba:df:1c:d9:af:67:73:55:8c:d9:
26:d6:13:7d:e8:e7:82:48:2d:39:92:61:f7:48:6e:43:d5:b5:
44:26:ad:e6:67:be:ed:01:a1:a8:72:b3:22:5c:1f:1f:4a:76:
3e:e5:0f:31:3b:4c:60:4f:f8:1a:a2:9f:4c:24:ac:a3:88:43:
20:80:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:45 2025 by rpki-client