Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
File: h00SbPtCScNLlJJESW1rSTeJWBQ.mft (raw, json)
Hash identifier: NzGnw3p4lD7RY5FFR9Z7TCKmHy/4bG8uh1g12A2jW+M=
Subject key identifier: C0:FC:7A:E4:F9:5C:B0:86:DE:30:66:75:F3:E5:98:7E:52:90:B5:8A
Authority key identifier: 87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
Certificate issuer: /CN=874d126cfb4249c34b949244496d6b4937895814
Certificate serial: 0195AD350C81D1DE24C751553092BBAF151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
Manifest number: 096C
Signing time: Wed 19 Mar 2025 07:01:29 +0000
Manifest this update: Wed 19 Mar 2025 07:01:29 +0000
Manifest next update: Thu 20 Mar 2025 07:01:29 +0000
Files and hashes: 1: h00SbPtCScNLlJJESW1rSTeJWBQ.crl (hash: FlM5kNKixODDVQm0+XhnL8Fd6lUMYW6IkCmlb2GcSrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:35:0c:81:d1:de:24:c7:51:55:30:92:bb:af:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874d126cfb4249c34b949244496d6b4937895814
Validity
Not Before: Mar 19 07:01:29 2025 GMT
Not After : Mar 20 07:01:29 2025 GMT
Subject: CN=c0fc7ae4f95cb086de306675f3e5987e5290b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:79:0f:db:dc:97:f5:02:24:0f:62:63:a5:
1c:b5:e3:0b:90:12:0a:a5:11:d7:ee:dc:97:f9:3d:
09:a1:81:ef:ef:2f:53:b5:75:62:e8:1e:87:25:04:
d9:65:81:d2:c3:4a:9b:c2:b2:4b:da:fb:ab:49:15:
2b:3f:e9:8d:25:13:aa:78:9d:3b:01:66:d6:b9:98:
49:d5:20:31:93:3f:96:d2:38:27:03:59:63:1a:f6:
e9:43:a0:a7:42:90:09:a9:66:9d:e9:65:c5:64:51:
0a:a6:ca:87:ef:01:79:8c:d3:d8:2c:71:ec:f9:c4:
b9:19:d4:3d:97:4d:0e:39:d1:dc:cb:ee:12:22:86:
90:af:5e:27:1d:3b:0e:ea:e3:6d:d4:39:8e:42:38:
79:90:74:81:9b:f0:b4:67:d4:6f:50:b9:4d:6c:23:
ab:1e:39:c6:05:c2:13:36:3c:1a:5c:b1:0c:fd:22:
27:33:21:4e:d7:a4:f1:36:b8:f6:e4:20:65:24:42:
a0:fb:9b:0f:f5:6f:25:c5:76:e6:25:aa:be:ef:93:
4c:db:77:16:fe:70:5f:2c:a2:ec:90:73:ec:ce:c1:
bd:6c:d5:b2:04:ca:22:2a:7e:6b:58:3d:72:9e:e3:
28:35:a3:90:26:7f:58:28:e0:05:77:8e:e4:6d:d2:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:7A:E4:F9:5C:B0:86:DE:30:66:75:F3:E5:98:7E:52:90:B5:8A
X509v3 Authority Key Identifier:
keyid:87:4D:12:6C:FB:42:49:C3:4B:94:92:44:49:6D:6B:49:37:89:58:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h00SbPtCScNLlJJESW1rSTeJWBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/32a9b3-60da-4a58-bd37-156801464630/1/h00SbPtCScNLlJJESW1rSTeJWBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b0:f7:43:98:ae:f2:71:ed:54:ee:ec:87:a3:ca:a7:34:f4:
c7:5d:87:f4:75:03:6e:2f:5e:78:cd:b6:3f:5f:8f:14:3a:b6:
2c:d8:38:a1:f5:56:34:2a:8f:82:02:40:c5:bd:40:c3:a5:e5:
43:09:66:cc:ea:ad:59:a3:13:40:71:94:cd:aa:2d:d6:d1:67:
d3:d2:68:d5:63:ae:3d:43:42:ab:1d:70:ef:ea:0f:01:a9:e7:
59:15:a7:20:88:9b:a2:07:3f:7b:39:29:20:a0:57:5d:58:26:
cb:b9:f1:95:1f:19:17:22:3a:8f:d5:78:15:16:58:c7:b7:a5:
07:cf:46:a7:35:c2:16:87:72:b3:d4:a4:d9:ed:a2:70:61:58:
08:29:78:93:0b:28:0b:e0:b1:50:31:58:e9:be:74:86:b9:30:
b9:0b:e9:33:90:91:a9:3f:cd:a9:9f:fa:76:df:71:54:b4:73:
0d:5f:e3:70:5e:2e:75:5b:31:9b:31:aa:3e:d4:b6:8b:b8:16:
eb:19:eb:db:c6:fb:50:3b:de:4e:16:61:66:e3:35:83:90:81:
46:50:a3:4c:7e:a8:aa:87:e9:79:cb:0c:19:8e:1c:d0:21:ca:
67:db:8b:6c:c8:88:c2:c4:ff:65:7a:39:51:3e:ae:59:dd:09:
80:64:cf:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:09:57 2025 by rpki-client