Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
File: H1PAbKeXbXN7I7xydooijDl_ry8.mft (raw, json)
Hash identifier: TZr/xcniHYghpErNcudc6vMzLgvdlgrK8GYdJo8R56o=
Subject key identifier: 9E:C5:9C:42:AF:7C:0A:F7:F3:33:07:3F:64:65:38:92:6A:D2:E6:99
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 01958995F0A34607CA1E92D689493C0C2000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 09:00:59 +0000
Manifest this update: Wed 12 Mar 2025 09:00:59 +0000
Manifest next update: Thu 13 Mar 2025 09:00:59 +0000
Files and hashes: 1: 3-xEC-0MibMVigbXcbI1gWAUly4.roa (hash: WXUjcMHE+UNYhxHX09cspDFGn5SKJT/8c8IxWa8FaIY=)
2: H1PAbKeXbXN7I7xydooijDl_ry8.crl (hash: pq6WzFIYpQHehdjyi9Nk0Mgu2I7rftstZAeIaWNC1qE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:95:f0:a3:46:07:ca:1e:92:d6:89:49:3c:0c:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Mar 12 09:00:59 2025 GMT
Not After : Mar 13 09:00:59 2025 GMT
Subject: CN=9ec59c42af7c0af7f333073f646538926ad2e699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:93:8c:f9:50:30:f9:bf:87:2b:b5:04:9c:
36:63:d1:28:e1:2c:7a:d4:c4:3e:88:ad:6d:41:ae:
19:09:9d:2e:55:07:02:f4:e6:fc:ba:53:73:3c:d6:
6a:f4:9e:f5:53:6d:7e:93:45:52:01:67:b6:fa:55:
a4:76:7b:a6:13:7f:19:dd:1b:62:e1:68:f4:46:b6:
d0:77:71:fa:2a:8b:da:d1:71:a2:78:d8:d6:96:de:
c8:cc:02:97:dc:f6:c4:11:0d:3c:04:f5:7a:68:95:
5d:43:71:33:69:0a:c9:c8:6d:4f:5d:84:bb:12:10:
41:6a:24:f7:71:46:e2:5e:b9:98:46:51:05:d2:b3:
07:af:46:0a:d2:0a:5b:ec:ba:79:ad:2e:bf:a2:8a:
ca:0e:30:83:86:f7:09:75:e6:f1:08:30:0f:cd:ee:
17:a9:97:55:5e:2e:1a:dc:88:ca:45:c3:8c:27:b2:
af:92:ec:85:dd:ca:49:3a:83:f6:46:8b:04:81:83:
8b:cb:f2:51:fc:1a:78:b1:27:5a:1e:fa:e4:4c:c9:
78:4d:34:43:79:90:6c:66:72:68:05:b6:51:e0:b2:
7a:a7:aa:35:73:b5:28:44:f2:14:fd:63:10:b1:bb:
6a:83:68:59:2c:85:cc:e8:8f:9e:3a:da:ea:b4:ef:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:9C:42:AF:7C:0A:F7:F3:33:07:3F:64:65:38:92:6A:D2:E6:99
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:48:f3:2c:88:03:c1:12:37:2d:f9:8f:23:7a:cc:ee:3b:25:
46:10:ae:f3:50:cd:c8:41:bc:6e:47:61:32:ca:ed:dc:34:77:
85:96:b7:96:76:49:30:cf:57:69:a9:42:b8:34:0a:d6:6f:a9:
42:e9:f8:f4:f5:6a:7b:ac:be:57:5e:7b:7f:5a:af:eb:6b:be:
f4:23:bc:06:2b:b0:56:31:dc:82:c1:06:46:c6:24:08:ec:7b:
ed:fe:a1:e7:5a:9b:fd:4b:e0:82:47:f0:4c:90:b0:01:a2:41:
e8:a6:ba:95:b8:a6:a9:9a:40:26:c0:70:b9:56:16:c5:ca:a1:
7f:c4:a8:c1:19:46:60:be:88:92:44:17:94:9d:25:98:2f:b0:
34:bc:e4:ff:e4:f0:d9:93:d2:b7:1e:53:89:1f:68:99:0b:b3:
0a:33:82:4e:97:49:75:4f:18:c5:bd:0c:6b:0c:82:41:11:45:
90:c8:a8:0a:b5:f3:a3:62:3e:d1:5c:89:0c:23:60:d8:4f:7f:
94:5f:d6:ae:65:b2:47:18:f4:c0:6d:21:41:54:83:e9:d2:a3:
12:d2:4c:51:20:8c:78:7f:ad:87:36:3f:b7:6a:e9:32:83:f6:
a9:28:2f:a7:c2:8a:a6:4b:67:ef:48:96:ef:53:2b:b8:12:65:
e6:ef:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:54 2025 by rpki-client