Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
File: HR3nlQkjqWQxniwzg0m9Emh75K4.mft (raw, json)
Hash identifier: 0z++Ziae/rKnGCYazGnm0O8HCE/x8gWpTRfe2/7K45o=
Subject key identifier: 82:32:C5:49:D3:CB:15:11:35:D6:7E:4C:E2:BF:F7:9F:5E:05:D9:FD
Authority key identifier: 1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE
Certificate issuer: /CN=1d1de7950923a964319e2c338349bd12687be4ae
Certificate serial: 0194BBCDB87EACB9244B82FCF3BF56D6B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: HR3nlQkjqWQxniwzg0m9Emh75K4.crl (hash: qyqpvQLxk/HMOfwODg8be4GpNfizHFVqB+o4cNdSOs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b8:7e:ac:b9:24:4b:82:fc:f3:bf:56:d6:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1de7950923a964319e2c338349bd12687be4ae
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=8232c549d3cb151135d67e4ce2bff79f5e05d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:b0:87:d3:2b:51:77:9a:89:ac:4c:94:f9:
05:a0:c2:2f:55:01:76:79:a8:69:eb:14:e2:86:a0:
c5:45:34:af:20:2f:c5:af:17:7c:93:cb:6d:b7:a1:
0b:73:03:74:bd:4b:cb:5d:da:54:08:65:48:00:a5:
c6:47:af:b6:a3:82:e2:a7:63:a1:43:cb:4c:5d:17:
70:e1:d1:d7:b5:b3:e5:87:c1:4b:f3:13:bb:f4:c4:
be:e7:54:1f:e2:29:af:cf:16:a5:e8:d7:38:5b:59:
a1:8f:bd:55:7b:ec:4a:0f:27:95:c1:73:fc:08:ba:
72:f6:09:ae:4c:7a:c9:3b:42:3a:d3:dc:5e:6f:7e:
e5:af:a8:69:5f:18:59:9d:17:84:b5:cb:72:55:e4:
53:08:a5:c9:f9:ec:82:ce:25:9f:7f:4d:24:9e:9f:
93:17:d4:86:00:b0:19:04:4c:1c:59:51:fd:1f:48:
61:9f:09:20:8f:07:08:27:30:81:87:67:6a:85:40:
50:ce:6d:db:78:cf:80:1f:db:f6:ce:51:15:dc:4f:
82:36:c2:c8:49:46:31:fe:4f:0e:33:39:be:a5:d0:
93:31:16:45:07:a3:03:3b:f8:f3:d4:5a:4b:09:fa:
f4:6d:d2:d7:d6:d2:79:bd:da:39:2f:bb:c1:35:41:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:C5:49:D3:CB:15:11:35:D6:7E:4C:E2:BF:F7:9F:5E:05:D9:FD
X509v3 Authority Key Identifier:
keyid:1D:1D:E7:95:09:23:A9:64:31:9E:2C:33:83:49:BD:12:68:7B:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR3nlQkjqWQxniwzg0m9Emh75K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bbe160-d9bb-4b4d-8737-d8d00e16c590/1/HR3nlQkjqWQxniwzg0m9Emh75K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:24:e6:4b:f4:d1:65:d7:6b:a0:01:d5:72:aa:98:f6:e2:cf:
17:96:53:bb:f5:3d:84:ae:0f:ac:da:de:0d:3f:29:3c:ba:10:
ff:89:f7:d0:d2:d7:1a:85:e2:5a:3b:20:e7:1f:e6:8c:0f:1d:
a9:4e:8f:d7:f9:6e:e4:f1:b0:0d:b6:13:e4:db:0b:7f:31:94:
61:de:33:b1:a7:d3:8a:de:c8:d5:4c:16:58:0e:a6:d9:53:3d:
ed:b8:38:82:7e:7e:08:fa:bb:d8:eb:8c:0f:8f:96:68:c7:19:
86:56:f0:19:93:10:24:09:98:c8:fb:8d:b5:96:a0:46:25:5a:
90:78:52:a6:91:31:4d:c0:9a:aa:fe:40:52:93:55:a7:29:8c:
47:21:21:35:3b:d0:2c:c1:39:cb:a1:2e:c5:b1:24:04:6a:32:
e5:de:aa:99:9d:9a:2d:03:b5:54:d3:42:0a:85:02:17:54:71:
58:43:ea:db:55:f8:15:9e:5c:32:84:b7:8b:7d:11:29:68:a5:
13:0f:99:bf:cf:4b:c7:4d:b2:40:15:87:e5:27:70:a4:8d:61:
a9:b0:fb:fa:fd:bd:01:87:19:46:1d:cd:d1:18:c3:fb:4b:85:
95:f6:77:0d:b5:c0:0c:49:56:6c:d0:f5:18:0d:6a:2d:d6:ff:
68:98:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:21 2025 by rpki-client