Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
File: Hzspn37Z9UTXv5ALWcz4iadk30g.mft (raw, json)
Hash identifier: +vy7ZwsTi9sgebPkmLMDa7iX0cGvImwDzGPo8emr/hY=
Subject key identifier: 7A:6A:3A:6F:DF:51:92:73:D5:31:8E:AC:61:33:06:0B:DB:50:F6:49
Authority key identifier: 1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
Certificate issuer: /CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Certificate serial: 0194BD17E87C78CD7CF61B6E33AC8981AC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: Hzspn37Z9UTXv5ALWcz4iadk30g.crl (hash: WCmCbcjkRMleKM9WLfYJo3qNfdgNTbgPlB4//PaopbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e8:7c:78:cd:7c:f6:1b:6e:33:ac:89:81:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3b299f7ed9f544d7bf900b59ccf889a764df48
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=7a6a3a6fdf519273d5318eac6133060bdb50f649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:66:77:4f:d4:df:fe:67:1e:3c:81:a2:0f:
f1:e6:20:36:6e:f0:af:60:97:31:74:b5:59:e4:5b:
7d:53:69:1b:c2:f0:b2:0a:96:3c:3d:78:06:2f:fd:
a2:1d:ec:66:14:ca:1e:55:69:33:32:2a:48:99:88:
fe:3a:56:34:0a:55:d7:ff:8e:75:70:f3:bc:0b:78:
9a:28:0f:67:cf:7e:04:87:b6:a2:5b:38:ba:8e:19:
05:2a:cf:bc:57:34:19:e2:7c:18:a8:82:d3:47:7e:
e2:7a:9c:0c:e7:51:5c:50:c6:85:24:b2:c9:0a:6a:
53:42:08:f9:08:d4:68:67:ff:15:26:3e:46:16:f1:
48:4e:6c:fc:97:92:72:bb:3e:b2:0f:5d:f7:fa:63:
68:4a:a5:6e:c3:64:47:c2:a5:c6:83:0a:29:20:f6:
4c:0f:b6:5c:e4:85:7e:81:d1:f2:dc:b8:b7:8a:0d:
47:d6:6e:00:35:2c:23:e0:8d:bc:f0:a4:25:94:a4:
60:7b:e0:9e:26:c5:f0:9e:f0:c1:34:d5:f4:58:18:
7f:18:5f:96:e9:54:88:b9:d6:3b:16:6d:4f:3b:e1:
39:79:cf:08:18:1d:e5:db:75:df:cf:60:cd:04:f0:
c3:b8:35:69:33:ee:92:ef:5c:17:52:c4:a8:84:53:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:3A:6F:DF:51:92:73:D5:31:8E:AC:61:33:06:0B:DB:50:F6:49
X509v3 Authority Key Identifier:
keyid:1F:3B:29:9F:7E:D9:F5:44:D7:BF:90:0B:59:CC:F8:89:A7:64:DF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzspn37Z9UTXv5ALWcz4iadk30g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/614631-6314-4933-a76d-75cdc2d57262/1/Hzspn37Z9UTXv5ALWcz4iadk30g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:56:31:c1:a7:fe:3e:95:b2:7a:f6:c7:e4:e0:75:c6:1d:
7e:75:a8:54:d5:e1:a5:0b:61:ac:c9:97:43:1d:0b:6f:1f:9d:
98:33:e4:69:7b:37:21:08:a7:51:2b:61:e5:98:44:d0:28:00:
ea:50:bf:e4:28:e1:be:71:d5:37:6f:f9:b3:23:98:ca:24:4b:
93:40:5b:eb:05:0e:0f:1f:38:4a:50:c6:3e:93:79:df:d3:3b:
6a:f2:53:56:07:22:89:15:29:fd:ed:75:70:e9:3d:31:41:ff:
2b:5a:82:3c:56:ea:94:96:18:fb:f2:f3:15:00:1f:aa:0f:71:
5e:81:c1:78:96:59:d7:78:40:63:da:e0:48:28:71:4c:e4:77:
c2:27:01:75:bd:c1:ad:c9:3c:7a:65:62:7a:db:b9:a3:82:b0:
74:2b:e1:3c:cd:20:2f:f6:bb:f3:52:58:a1:72:6d:2e:b3:cf:
f3:0c:85:7e:bd:69:65:95:86:62:06:7e:83:b3:1c:56:b6:1b:
15:34:19:0b:34:7b:85:cd:0d:68:80:fa:62:31:a9:b6:9a:05:
99:ed:23:51:68:74:3b:b1:c4:8b:ca:ee:97:8e:59:d0:3f:af:
ed:53:b5:ca:ba:3a:1f:bb:28:90:80:29:28:9b:bc:d9:6d:c0:
28:fa:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:25 2025 by rpki-client