Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft
File: hyyq6fD7ed7GhEvqzowiHO9NMsk.mft (raw, json)
Hash identifier: GojBqqbp07ZmD88g5bHas5Hbm2uQrmTda4vTzeuNHzI=
Subject key identifier: 5A:77:45:BC:E2:FC:D5:A9:00:10:F1:A7:6E:CB:1F:1A:A0:05:96:B9
Authority key identifier: 87:2C:AA:E9:F0:FB:79:DE:C6:84:4B:EA:CE:8C:22:1C:EF:4D:32:C9
Certificate issuer: /CN=872caae9f0fb79dec6844beace8c221cef4d32c9
Certificate serial: 0194BBCE43AE879ED4BC66914E5D85C6C897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyyq6fD7ed7GhEvqzowiHO9NMsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft
Manifest number: 0EB2
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: hyyq6fD7ed7GhEvqzowiHO9NMsk.crl (hash: AFzmR592CwCQ3CNj7SKm5bWxt8ire6Bv0b879N7+LAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:ae:87:9e:d4:bc:66:91:4e:5d:85:c6:c8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872caae9f0fb79dec6844beace8c221cef4d32c9
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=5a7745bce2fcd5a90010f1a76ecb1f1aa00596b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:bd:f0:c0:49:70:9f:a9:5d:4c:66:92:51:
9b:b5:de:4b:74:14:64:88:1e:e2:f1:d4:66:3c:c4:
0e:3f:fa:c1:e0:51:19:ad:82:84:e3:16:28:b8:aa:
83:f0:e5:b2:08:88:6a:25:01:42:f3:5d:99:c0:b8:
11:06:09:35:25:dd:89:34:3b:13:c7:a2:08:75:ab:
ae:86:52:44:41:3a:21:51:52:9a:4c:a7:34:97:8d:
3d:94:aa:25:30:a2:96:5a:81:1b:4b:02:e9:c3:9f:
d2:29:f2:e8:71:d1:a7:93:da:a1:4b:ab:df:c0:9e:
b2:f0:09:40:d0:3c:1b:c0:af:fa:17:3e:8a:71:d3:
ba:29:7c:0e:6d:6e:e1:70:77:0b:c6:4a:25:86:cf:
ac:d3:d0:be:dc:b5:8e:6d:a8:7c:1c:40:6c:ef:02:
58:a2:9e:1f:b7:00:b4:e3:f8:ca:bd:ce:70:bf:ed:
df:43:02:24:86:74:ae:70:08:6a:09:2e:cf:64:f0:
2e:a9:50:37:ac:2d:2c:76:73:42:63:12:2d:24:16:
88:a7:21:2d:be:58:9a:a5:08:b3:b4:f7:4d:6f:25:
8b:06:72:e8:99:f4:2e:3d:f0:63:7b:c3:24:33:3a:
2a:b5:06:ff:10:15:84:94:ca:56:a7:5e:b2:b8:36:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:45:BC:E2:FC:D5:A9:00:10:F1:A7:6E:CB:1F:1A:A0:05:96:B9
X509v3 Authority Key Identifier:
keyid:87:2C:AA:E9:F0:FB:79:DE:C6:84:4B:EA:CE:8C:22:1C:EF:4D:32:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyyq6fD7ed7GhEvqzowiHO9NMsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6c791f-ba85-4c03-b791-e5b1672d4b17/1/hyyq6fD7ed7GhEvqzowiHO9NMsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:81:df:44:2b:bd:4f:94:ac:91:f2:cd:62:4c:18:07:31:
51:9f:e4:39:72:7d:c3:8f:6c:1c:26:14:96:1b:11:3a:43:be:
84:6a:78:5a:00:11:10:33:79:ba:82:68:0e:df:62:c0:77:c6:
c3:d5:52:73:6d:da:53:b3:b4:4a:73:c5:78:df:cd:af:f1:dc:
5f:4c:80:7b:7f:d8:1a:2e:1e:ec:7e:13:3f:3d:63:56:a3:47:
0e:81:a3:d6:95:93:2b:62:ee:93:f9:9c:ed:ca:86:1c:d5:2a:
d8:75:4b:52:29:5b:8b:39:c1:62:33:62:e5:bc:6e:07:a3:65:
27:42:32:7e:fb:0f:4a:f2:64:5b:f2:5e:b5:0c:9e:e2:53:8f:
b2:44:96:7f:79:d5:27:06:73:47:d4:d5:de:ec:63:b6:5b:22:
0e:30:21:c1:ce:2a:e1:47:ad:1e:64:3e:4a:28:b8:ea:69:f1:
42:2a:db:66:c1:c0:82:4f:b8:68:77:70:18:03:c9:e8:5b:32:
98:ad:76:4c:cb:8b:76:de:d6:6d:98:7e:ec:5e:00:31:df:21:
01:c6:71:2b:5e:2b:d8:42:a6:1a:00:e9:11:21:52:e2:b9:63:
f2:92:cc:a4:2e:98:50:20:7b:47:fe:93:87:ec:7a:4b:cc:ff:
63:60:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:36 2025 by rpki-client