Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json)
Hash identifier: CUp5eclzpd2Ck8ifSELhX/Zas7NdeWiOwNuSerh7fVU=
Subject key identifier: 89:CE:4C:39:C6:20:C3:95:20:D5:E0:81:10:F7:47:63:ED:C4:1E:D3
Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Certificate serial: 0194BBCEC77650B1FAE8273AE2B79BE2CE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
Manifest number: 0150
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: CuKWCLAiVZ+N7j1jltnN9Fd6hDwdguSfS8H2vrtajVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:76:50:b1:fa:e8:27:3a:e2:b7:9b:e2:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=89ce4c39c620c39520d5e08110f74763edc41ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:d8:e3:c9:58:fa:2f:1b:9a:c7:39:5b:bf:
d6:d4:ac:9c:e4:e7:0c:f5:d9:fd:86:dd:f9:17:5c:
04:b5:e4:ce:94:fe:65:fd:da:43:8c:36:fe:85:5f:
49:3f:60:db:44:15:b6:bd:7d:0e:07:92:c5:bf:d2:
60:1b:fd:4c:9c:7e:09:85:40:9d:39:38:69:45:06:
cc:5b:c3:ef:5d:f9:0b:42:10:d3:5a:78:48:61:41:
53:36:36:2b:a2:25:c5:2d:fe:27:12:ac:60:a1:8f:
95:8c:50:9f:cb:57:7a:dc:d2:70:5c:8c:14:3d:22:
f0:55:03:c5:a6:43:d6:f1:e1:cd:3a:83:81:8d:4e:
ac:c2:db:72:52:17:a0:b4:90:20:2f:d6:52:f2:b0:
39:dd:81:09:d0:46:52:72:95:61:2b:c4:75:cd:a4:
6f:92:a5:77:e0:f7:e6:44:9a:18:82:9d:97:84:cd:
ac:97:b5:85:1a:59:b3:47:56:0f:83:08:87:58:24:
24:33:a3:81:06:cb:ff:32:76:04:13:04:6b:97:5e:
cd:e7:31:d6:ef:ec:83:16:06:5f:e0:8c:98:05:76:
e3:c3:f8:ce:71:eb:80:39:4a:ac:1e:45:03:a7:7e:
e2:fc:2e:2c:be:df:39:1d:0d:74:de:3d:cf:e1:11:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:4C:39:C6:20:C3:95:20:D5:E0:81:10:F7:47:63:ED:C4:1E:D3
X509v3 Authority Key Identifier:
keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:e5:50:0c:a8:1d:b3:cb:3d:04:d5:aa:99:fb:46:ed:03:
dc:83:77:72:9f:b2:08:69:13:74:ee:dd:72:7b:0f:58:9d:ce:
65:c1:95:64:94:f8:a8:38:e0:40:d8:73:a7:ae:66:ea:56:36:
61:bf:98:9f:b6:14:19:58:df:95:98:39:e9:e8:38:56:ec:3e:
7d:2a:13:7c:0a:35:52:1b:a5:e3:10:ec:f2:88:e6:df:0d:e2:
82:6e:d8:46:d4:63:7d:d2:66:84:32:4c:cd:7a:18:fa:74:27:
2f:76:3e:5b:66:43:cd:dc:66:0a:95:0c:6f:ca:24:14:bb:a6:
df:38:f6:b7:98:7d:ef:d6:9a:7a:03:37:9b:28:2e:e9:b7:da:
24:16:99:05:72:2f:6a:4d:ae:1a:d4:b2:07:ca:9d:fa:f5:ff:
ff:dd:36:3e:87:fb:84:fc:01:79:64:b4:b0:f9:71:64:1e:e7:
32:6a:ab:c8:dd:ce:73:97:02:a9:d0:ce:af:81:db:76:7f:d5:
c1:43:8f:3e:c2:36:49:4e:35:63:53:77:00:50:4b:09:e3:e0:
be:24:d4:e1:9b:4d:55:47:e9:44:5c:5a:3d:9d:d8:13:ca:ec:
d7:34:20:ec:41:a2:d7:54:c5:32:0e:dd:38:ab:91:bd:27:26:
92:02:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:33 2025 by rpki-client