Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
File: H0qus-K3pD3wHzHVGiDvIlXOr-M.mft (raw, json)
Hash identifier: D/y2n7OB1M9wkT/uFhQ7urk4S8tlbnB/ljZX3DbXL9M=
Subject key identifier: 58:73:3F:92:20:EC:23:F4:60:6D:D8:E5:FC:0C:D2:CC:4F:36:81:73
Authority key identifier: 1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
Certificate issuer: /CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Certificate serial: 0194BBCE9E5AC5A705F1C1E942D3FAF93EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
Manifest number: 02CB
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: H0qus-K3pD3wHzHVGiDvIlXOr-M.crl (hash: m7i8sg/UYr+KAAvLHb8R53708QSvhb6sW/a6ifm/RYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:5a:c5:a7:05:f1:c1:e9:42:d3:fa:f9:3e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4aaeb3e2b7a43df01f31d51a20ef2255ceafe3
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=58733f9220ec23f4606dd8e5fc0cd2cc4f368173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:29:af:2d:42:c3:59:d3:b4:8b:2d:e8:e0:
cb:2a:82:b2:bc:91:3b:f5:48:50:96:39:f0:da:58:
87:7b:97:fb:dc:94:b9:04:d7:ff:d0:59:a2:4f:4e:
6b:db:f5:70:40:df:b0:d0:0b:9e:65:bb:3d:6e:e2:
60:76:02:e0:95:58:e7:28:6d:e4:c6:87:bd:25:4e:
e3:4a:a9:5f:cd:a1:af:dd:3e:d6:09:96:95:ec:64:
26:92:39:52:cd:5e:43:b8:03:17:28:60:a7:e6:93:
cb:77:fb:21:26:b5:0e:6b:e2:94:a5:06:30:72:31:
1e:5d:f0:32:fd:b8:7c:ab:8e:31:6e:1a:cc:a3:51:
d2:5a:0f:fa:55:51:60:5b:c2:df:2b:2c:67:38:52:
fe:ee:da:6f:2e:8f:7d:db:f4:1d:08:c9:5e:d8:58:
c3:60:ea:9c:77:07:92:81:a9:e4:62:d6:1e:d4:7d:
52:1d:b8:52:d3:11:b9:43:c6:83:cd:cd:b4:39:ff:
ed:bb:be:e8:74:f9:89:63:3c:0a:c6:2a:d4:7d:a1:
6a:3f:31:4e:87:43:bf:e3:9b:5b:d9:d8:97:d2:5f:
54:5d:f2:fb:0c:34:b4:cf:00:12:43:e3:49:5d:e8:
b5:b6:90:9c:48:6d:ab:eb:76:e6:d4:ec:52:ba:bb:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:3F:92:20:EC:23:F4:60:6D:D8:E5:FC:0C:D2:CC:4F:36:81:73
X509v3 Authority Key Identifier:
keyid:1F:4A:AE:B3:E2:B7:A4:3D:F0:1F:31:D5:1A:20:EF:22:55:CE:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0qus-K3pD3wHzHVGiDvIlXOr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/3f3f50-2f35-407e-b99c-e1842be412d1/1/H0qus-K3pD3wHzHVGiDvIlXOr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f4:c0:a2:1f:a3:86:79:d3:3a:76:35:6c:43:58:36:3a:15:
16:2c:b5:09:c7:e8:82:27:5a:6f:d3:9c:42:3d:d1:23:5e:38:
e6:43:c6:62:a2:de:bc:d7:e5:7e:e4:69:2b:1b:62:31:ef:a2:
bc:50:78:29:f4:90:8d:84:76:11:33:7d:70:a9:82:87:82:31:
4c:f8:05:02:55:a6:ff:90:f3:9a:2b:21:67:94:19:c5:d7:3a:
11:c0:14:cd:e9:47:84:d2:d5:c2:33:20:61:5b:60:4c:eb:ed:
ea:1c:33:fe:e8:5a:c2:35:ca:76:e1:06:10:46:2d:2d:c4:9f:
aa:42:0e:c7:2c:fd:76:c1:77:27:e5:bd:51:6d:1c:31:8e:b4:
4d:d3:d4:b8:14:1e:6c:fc:f7:ee:ce:8a:7e:04:3a:bc:09:e8:
2b:24:b2:b9:ec:d5:a3:bf:6f:ee:a1:ff:e7:1f:d9:93:04:d0:
c7:8e:ee:05:c2:7d:5c:17:d8:c5:70:17:59:06:fa:a9:ea:04:
6b:cf:e9:0c:30:52:2d:3c:62:ec:57:c4:27:c3:28:cc:9e:66:
98:79:68:24:66:54:7a:65:d6:e3:19:08:33:5d:b8:1d:47:66:
ae:0e:ac:47:c0:aa:c8:9e:07:ae:a6:70:80:16:4b:8b:7b:5b:
c5:7a:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:47 2025 by rpki-client