Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: XncWiJ9UzY5t3D7fyaQiOniumLSy+/OMz8jQ6ZhiRbo=
Subject key identifier: B5:D6:FF:F4:D1:26:9B:AC:2A:C8:F2:76:F7:2D:77:1D:11:AD:78:87
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 0195E00FA27677A85994F83D491A85F7448C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 08DB
Signing time: Sat 29 Mar 2025 04:01:15 +0000
Manifest this update: Sat 29 Mar 2025 04:01:15 +0000
Manifest next update: Sun 30 Mar 2025 04:01:15 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: 1BkOPAaIZk6F8uZB8owXpUXw9f3gges/6R22Rfw1bQY=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:a2:76:77:a8:59:94:f8:3d:49:1a:85:f7:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Mar 29 04:01:15 2025 GMT
Not After : Mar 30 04:01:15 2025 GMT
Subject: CN=b5d6fff4d1269bac2ac8f276f72d771d11ad7887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1b:eb:af:f6:28:d2:b1:31:89:39:25:ca:48:
0d:9b:04:ee:ef:1c:ba:29:42:fb:94:56:86:f6:b0:
d6:0e:c3:f7:86:29:b8:41:4b:98:96:f7:8f:71:5d:
6e:e0:91:6f:5a:3f:2d:9d:d0:8e:f7:47:ec:e6:4d:
01:e8:bc:2a:97:85:bf:fd:02:c4:62:8c:5d:b2:40:
e0:93:d7:20:10:09:11:5a:57:43:fd:66:e2:6f:27:
b2:fd:da:8e:7a:f1:06:64:3e:d9:44:fc:02:50:8b:
e7:8f:00:bc:52:7d:07:bc:05:d4:7f:d6:16:3f:72:
67:1e:8f:c8:64:89:04:1f:4e:bf:e7:6e:a4:25:17:
5d:d1:56:22:bf:89:9e:21:1a:d8:9a:f2:f4:70:cd:
42:7f:d5:9d:18:8e:7e:d3:a1:dd:0b:26:48:30:17:
0c:1a:37:8f:49:e6:ac:1d:97:c8:74:4d:6f:3d:51:
b5:f4:19:13:6b:b4:bc:d8:fa:8d:52:4c:b0:c6:d4:
eb:f3:f0:86:3c:43:2c:30:c2:1b:48:45:d8:4f:a6:
95:b7:8c:67:c5:04:91:e6:48:77:3a:e6:b3:48:cc:
9e:43:e5:ec:1e:d8:0f:e3:c3:4f:e0:62:ea:1d:34:
56:85:3a:6c:06:7d:66:ca:6f:3b:a7:98:4f:8e:cb:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:FF:F4:D1:26:9B:AC:2A:C8:F2:76:F7:2D:77:1D:11:AD:78:87
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ec:e8:b9:cf:1a:97:e7:2f:33:99:b7:20:6a:47:c9:4e:cc:
8a:2c:13:51:3c:b6:e5:4a:2c:a2:d8:25:46:f1:ac:03:33:4b:
15:a2:91:4b:0d:b4:9f:ba:14:57:57:1f:cf:16:be:3a:57:6c:
6c:e1:0a:b9:5d:48:e8:fe:18:85:6b:61:4a:dc:41:73:e2:d9:
75:9b:d7:a8:00:d5:de:32:bc:b2:84:74:d5:67:ab:76:fc:1c:
53:d3:a2:a3:d1:38:24:69:85:c0:3e:97:6e:42:83:2e:32:bd:
22:aa:ed:38:a8:06:79:f8:54:57:b7:92:62:2e:70:2b:09:5b:
c6:10:62:1b:53:7a:67:af:68:a5:95:d5:18:94:14:1a:66:9f:
4d:c2:5d:1d:4c:05:1d:77:fd:bb:42:4c:03:c6:cc:ff:69:01:
32:b0:7d:fd:07:68:7b:cd:b7:ff:3b:64:e7:0a:aa:ce:89:eb:
0a:f0:0e:4c:d2:09:28:77:74:6a:e9:7c:f9:93:e6:9c:0c:7f:
da:1e:cc:b1:74:f4:f0:e0:9f:db:46:a6:86:49:c1:36:56:fa:
66:9b:91:3c:05:21:84:f2:e7:ea:f7:8d:db:90:ef:8c:eb:36:
05:aa:f5:4c:a7:12:e5:7f:cd:17:9e:75:cc:4d:61:e1:93:eb:
29:d1:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:13 2025 by rpki-client