Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
File: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft (raw, json)
Hash identifier: btCy+cU+KshHA3/vB5r3lR4J/LWFv6aenVHy26rm3pM=
Subject key identifier: AC:29:24:13:E0:BE:3D:7B:F6:A3:F3:13:68:4B:2B:ED:3C:68:BD:E0
Authority key identifier: 1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
Certificate issuer: /CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Certificate serial: 0195DFD89BE0D2C9F262E0A4BFA81C3B59FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
Manifest number: 14C3
Signing time: Sat 29 Mar 2025 03:01:09 +0000
Manifest this update: Sat 29 Mar 2025 03:01:09 +0000
Manifest next update: Sun 30 Mar 2025 03:01:09 +0000
Files and hashes: 1: Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl (hash: zTIgLc2SYM1OSs5oV3bGW5bxrcGe42jiNyy7bD/gbFg=)
2: hm8rjmqZCrJZozvFKbZ-CBRhQFw.roa (hash: jf5LXKzmjLGSVMgCMBQjibyX3nwWBUg2ykB47z4QZsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:9b:e0:d2:c9:f2:62:e0:a4:bf:a8:1c:3b:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddd15ef2f59abb95f2d9be5cee3303888623b97
Validity
Not Before: Mar 29 03:01:09 2025 GMT
Not After : Mar 30 03:01:09 2025 GMT
Subject: CN=ac292413e0be3d7bf6a3f313684b2bed3c68bde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:39:ab:57:4a:1d:c7:e3:37:2b:f9:77:be:
d2:a1:e5:0d:46:cf:7d:f1:7f:25:00:77:ae:66:06:
c3:b4:71:c8:36:52:ad:49:87:48:dc:cc:7d:89:6f:
4a:96:e1:c6:d2:b5:52:f6:fd:60:d3:8d:ad:38:35:
f7:76:6c:59:70:0f:a4:2b:6a:b2:77:80:4b:52:fc:
87:8f:d4:b5:1a:44:a6:b5:7b:70:4d:b0:97:c3:29:
98:6f:af:05:3c:7f:5a:85:76:e1:6b:5a:a1:10:bb:
06:fa:95:f3:da:96:26:68:01:2c:08:13:f2:68:55:
0f:05:75:d4:16:5c:ea:63:82:45:e8:01:9d:33:c1:
b5:1a:71:d3:94:5f:13:c8:41:ab:73:eb:a4:46:68:
1f:74:1f:7a:3f:bd:6f:cd:75:5b:73:41:3a:df:bf:
3b:21:0a:46:f5:4e:72:7a:0d:f1:97:da:d2:83:63:
7d:34:25:ed:56:a9:28:94:77:58:e0:c3:85:c5:29:
be:9e:09:a3:d1:fc:83:78:da:28:87:e6:e8:f3:3f:
38:d6:05:bf:a4:c2:51:ac:a8:c6:f5:b4:6a:11:e6:
8a:41:90:c4:9b:12:57:2b:f3:8d:15:fa:16:4f:04:
2b:11:e3:fa:b9:2c:24:92:c4:b1:b5:cd:09:22:fe:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:24:13:E0:BE:3D:7B:F6:A3:F3:13:68:4B:2B:ED:3C:68:BD:E0
X509v3 Authority Key Identifier:
keyid:1D:DD:15:EF:2F:59:AB:B9:5F:2D:9B:E5:CE:E3:30:38:88:62:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0afa88-b526-4763-9528-8b60e4b94bcf/1/Hd0V7y9Zq7lfLZvlzuMwOIhiO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:ee:c0:24:f1:ca:c3:b5:f8:7a:10:00:44:f2:0c:87:d1:
db:1b:54:ff:7b:73:9e:be:3b:74:fd:69:b9:50:d9:30:02:42:
c0:39:f0:d5:df:9d:e7:f6:79:f0:29:e9:45:4b:3f:f1:76:5a:
1f:25:9e:cc:f2:f6:76:b9:60:31:4a:d4:d7:af:65:1b:33:ec:
45:b1:98:8c:a4:76:6f:04:6c:2e:1a:a5:bd:24:0b:04:67:ef:
c0:75:c2:a2:20:5a:ae:29:75:01:90:fa:51:96:88:f6:a0:9b:
ae:1c:79:49:75:2d:7d:4a:7e:ad:5b:87:98:a6:c0:e8:04:8c:
07:a0:a9:ac:6e:32:ec:91:15:c9:a0:24:99:67:ea:4d:f9:79:
91:c4:a4:2b:b0:03:7e:bc:fe:10:7c:02:3c:e0:2d:16:28:21:
66:93:10:3b:7d:3c:25:93:b8:b2:62:c6:ac:71:29:a1:48:34:
0f:8c:c6:40:b5:42:6d:81:bd:87:ea:ad:41:fe:7b:9c:7d:7a:
0e:d9:4a:a1:6b:e6:8a:6c:5e:30:93:f3:41:40:d0:89:c0:f2:
18:b2:0c:76:99:c7:1e:a5:09:9d:21:48:b4:44:d2:98:48:cf:
49:2a:f9:39:1f:12:58:9b:4d:df:de:c3:57:1e:24:9b:46:61:
be:2e:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:38:08 2025 by rpki-client