Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
File: hRwTZejd_OV1mPvo3n6oesYD4iw.mft (raw, json)
Hash identifier: UmbnGaDgS30Zrk/9pL2iAlmHg0WwzREVGkxt1W6x+lA=
Subject key identifier: 5D:68:5F:28:73:56:D4:F0:21:3C:CF:D7:44:35:F8:01:63:83:E3:EB
Authority key identifier: 85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
Certificate issuer: /CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Certificate serial: 0194BBCE151B9C98A93F5A958C6DBE7DAC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
Manifest number: 067A
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: hRwTZejd_OV1mPvo3n6oesYD4iw.crl (hash: qki/s9fk0VRJpOp9z/v1HlokFK5POAskzvWo5ohK0YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:15:1b:9c:98:a9:3f:5a:95:8c:6d:be:7d:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c1365e8ddfce57598fbe8de7ea87ac603e22c
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=5d685f287356d4f0213ccfd74435f8016383e3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:83:03:40:cc:d7:de:ea:1c:f1:32:7f:4c:
2a:5d:e6:14:c5:3c:1f:9a:04:aa:1a:21:52:51:04:
09:c8:82:24:17:3e:78:24:4e:b1:23:db:67:1c:a9:
a5:e1:99:87:be:72:1f:3b:62:60:f5:0c:3e:83:c1:
e7:67:b5:a7:b2:cc:24:1f:de:3b:f3:fb:b7:a2:53:
4e:ad:39:97:3b:e2:a4:0d:f6:8b:a2:26:00:88:01:
d5:dd:fd:8f:8c:7e:68:1e:b5:7b:91:cb:c5:c6:ca:
0e:5c:b9:3a:45:94:13:64:f7:a2:18:ca:35:0f:58:
5d:63:fc:ed:f3:bd:69:1c:12:1b:80:86:b3:40:1e:
c3:22:08:37:30:3b:30:4b:cf:0c:6a:41:bd:8b:b2:
46:10:2a:e0:26:6f:69:9c:a8:51:c3:34:8e:a5:8c:
8b:92:21:fc:ab:c0:bd:57:28:15:ff:ed:f1:8a:c0:
3e:84:3a:26:29:ca:9e:ab:46:3f:60:85:fc:82:22:
7f:e5:78:46:87:92:ef:4e:ac:d6:3b:9c:05:24:82:
35:23:2a:f1:a8:1a:be:7a:4c:5d:c2:f7:ed:5b:db:
24:b3:e4:c4:c1:4f:31:02:4c:49:ac:92:b0:0d:ca:
81:c6:95:99:f9:d9:3f:4e:58:ee:07:cd:fc:ae:4c:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:5F:28:73:56:D4:F0:21:3C:CF:D7:44:35:F8:01:63:83:E3:EB
X509v3 Authority Key Identifier:
keyid:85:1C:13:65:E8:DD:FC:E5:75:98:FB:E8:DE:7E:A8:7A:C6:03:E2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwTZejd_OV1mPvo3n6oesYD4iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3522e9-86e0-4b5a-a2c8-00f0601252c8/1/hRwTZejd_OV1mPvo3n6oesYD4iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8e:f8:31:8e:aa:51:82:17:a7:37:c6:be:43:5e:c5:86:22:
8b:31:aa:54:da:b9:58:ae:72:c1:97:e6:5f:c2:f2:97:af:44:
f1:7c:33:b1:f7:04:fb:c4:3b:ba:23:a5:9e:fd:f0:ec:69:4b:
b3:fa:aa:74:94:a0:8b:ac:47:f8:5c:41:ae:6c:2d:bb:03:9a:
bb:96:c2:cd:65:dc:93:f6:df:1c:e5:b0:16:69:f7:62:3e:ba:
32:e6:32:bf:c1:cf:2d:9c:df:2f:1e:1a:3b:2b:84:3a:2b:d8:
69:0b:49:d5:18:e7:1e:79:cd:c1:9f:a9:fb:8c:97:72:57:b7:
2c:18:f7:eb:e4:c8:4d:3e:43:04:fc:78:a6:9d:2e:16:2c:6c:
f2:30:56:70:97:73:82:cf:56:f2:e8:33:0e:23:20:7c:76:ac:
39:4f:33:2a:39:f5:29:cc:14:c0:de:1d:05:9e:c7:cd:e8:f6:
73:cd:f5:d4:b1:da:5f:60:85:80:88:0f:c6:25:3e:a4:76:81:
61:a5:53:7b:d5:b0:fe:a1:74:7a:29:06:5f:00:2f:f8:34:47:
a5:b2:49:dd:9f:44:19:eb:01:d9:85:aa:b6:a5:a4:2c:8f:03:
9f:9e:3b:db:a0:5a:45:1a:55:60:ee:35:34:36:c7:36:2e:02:
52:d6:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:05 2025 by rpki-client