Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: q3zmzatZKRwAD2nGRWyni1iDLexniRlOUDtQ3SwiKOU=
Subject key identifier: 9D:16:6F:2E:27:AB:34:D0:F5:CE:D3:C0:08:15:63:C3:88:68:57:C1
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0195E07DA3697C2EDA37770E5C9FA227548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 06:01:24 +0000
Manifest this update: Sat 29 Mar 2025 06:01:24 +0000
Manifest next update: Sun 30 Mar 2025 06:01:24 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: r/CCjHY+7xs+c/SZ38IBEbXQmVvSUD2NdXbtvHF/vQY=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:a3:69:7c:2e:da:37:77:0e:5c:9f:a2:27:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Mar 29 06:01:24 2025 GMT
Not After : Mar 30 06:01:24 2025 GMT
Subject: CN=9d166f2e27ab34d0f5ced3c0081563c3886857c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:5b:22:05:0b:9a:d4:a4:04:e2:3b:ff:ad:
f4:c0:c8:c4:89:28:ad:cc:db:bc:de:be:ed:90:bb:
50:2f:31:a3:15:40:35:6b:83:f1:89:51:45:8d:a8:
31:09:db:6d:c4:ee:3b:17:4d:c5:2b:2a:85:5f:be:
b8:49:a7:e4:dc:96:d6:5d:cf:74:4d:2d:83:6a:35:
a3:e3:1d:63:76:83:60:d6:56:ec:09:88:c2:bd:bb:
f3:55:05:87:b6:5f:69:29:c1:f1:f1:34:f8:66:18:
7a:a9:62:59:63:59:cb:33:97:7d:02:fe:f3:19:2e:
a5:8c:9c:e9:00:d7:ed:b3:54:97:84:c8:6f:39:67:
c3:13:20:ff:c2:33:4b:f6:de:9a:87:74:6c:22:65:
7c:0d:68:c3:8b:f9:d6:14:ca:aa:08:b0:6f:5b:9a:
78:80:66:f8:f4:6f:ed:46:c0:c9:16:8a:0b:cb:31:
67:18:8e:16:96:8a:06:20:9c:8f:8b:f7:a2:8e:6f:
aa:f5:61:3b:ff:4d:6f:f9:03:15:47:a5:bd:f0:64:
71:13:14:e2:31:75:08:c1:a4:35:7a:c7:a1:0d:5c:
e3:43:35:ab:d4:a8:7c:35:73:71:c3:26:f0:93:2d:
f7:eb:da:95:40:22:79:2e:e3:15:69:70:2e:66:ee:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:6F:2E:27:AB:34:D0:F5:CE:D3:C0:08:15:63:C3:88:68:57:C1
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:54:c8:62:aa:f8:d3:f3:61:7f:b1:2e:48:28:9d:c2:6f:
64:51:d0:52:5c:78:d1:1a:55:d6:16:a0:a9:8d:aa:ce:e3:1d:
78:18:b7:1f:fc:15:91:44:1d:5f:9b:b6:27:0b:19:22:5d:26:
17:7f:da:1c:98:9c:8e:e2:ec:e5:aa:9a:ba:ab:2a:68:4e:fb:
94:c6:9b:f7:a1:6d:58:e2:59:d9:e5:90:5e:d2:f0:90:c5:fe:
2a:d5:98:3e:11:9b:a6:e2:aa:0f:0a:5a:83:f6:4c:b2:ab:5c:
34:10:65:05:27:a5:b9:ee:86:30:37:c4:a8:8f:08:10:59:e3:
ef:be:69:a7:ef:b7:ca:c0:41:ab:0b:d6:9c:30:cb:3f:7a:31:
bd:7e:66:ee:a5:c6:83:19:8a:56:35:c6:37:d3:fe:fb:bd:8f:
e3:14:c7:37:9f:a5:5c:4f:d5:72:9a:67:ac:a8:43:69:69:f1:
29:5a:50:65:75:22:c9:ed:6e:dc:e2:f0:06:40:6c:8d:fa:c0:
16:70:ec:fc:c2:d0:97:a3:15:75:ea:c8:c6:85:7c:d3:58:19:
71:30:9b:64:60:f0:b1:d7:eb:b9:1f:06:e1:fb:b2:1c:3f:7b:
df:ba:66:50:5c:28:7d:86:89:48:ec:fa:40:a7:50:67:48:98:
6e:30:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:21 2025 by rpki-client