Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft
File: HrwURUFHAQyh700E0hASXh7X0ho.mft (raw, json)
Hash identifier: SPf9/qoOuP559BBhnb4wSjhzHAG8fQzgaBbO/YtBi8s=
Subject key identifier: A7:AF:C1:B7:BD:1B:9D:4E:3A:8E:69:4F:33:F1:35:0E:24:31:C6:AA
Authority key identifier: 1E:BC:14:45:41:47:01:0C:A1:EF:4D:04:D2:10:12:5E:1E:D7:D2:1A
Certificate issuer: /CN=1ebc14454147010ca1ef4d04d210125e1ed7d21a
Certificate serial: 0194BD17DD63F42029F19BCC71969BE65D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrwURUFHAQyh700E0hASXh7X0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft
Manifest number: 05EA
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: HrwURUFHAQyh700E0hASXh7X0ho.crl (hash: rVoPJ4HNJThF9RaINUmWTIMgSMjqwk5C36FARWv8o4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:63:f4:20:29:f1:9b:cc:71:96:9b:e6:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebc14454147010ca1ef4d04d210125e1ed7d21a
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=a7afc1b7bd1b9d4e3a8e694f33f1350e2431c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:1e:6c:6b:bb:1d:29:62:45:67:12:36:d7:
de:df:07:a7:88:10:2a:d0:99:34:3b:cc:7e:8f:1f:
9e:1b:a5:33:2f:36:f7:f0:f5:2a:87:09:85:c3:7e:
98:2f:6e:e6:55:fe:4b:a7:7b:09:a1:ae:01:1f:a3:
6d:4f:62:20:ec:5b:29:77:43:09:9d:52:37:c5:8c:
12:ce:d0:cb:9a:fd:00:a8:b2:6a:6e:e6:e1:f5:fb:
4c:8d:75:b0:5c:df:bb:86:6e:f1:fa:0c:79:79:26:
2f:59:28:77:ef:4e:ff:57:18:db:79:4e:8b:ea:63:
42:bf:d3:d0:01:a9:52:c6:49:4d:34:ca:b7:17:ad:
e2:2a:80:67:76:8f:ef:e8:ef:c4:9e:74:b3:a2:13:
b9:e3:84:9f:e1:21:cb:04:15:9f:72:59:9a:bb:fe:
35:89:d2:07:55:10:8e:64:7c:14:b0:e6:d5:e7:0c:
d0:21:e2:86:c5:4d:34:b2:d6:91:ad:1e:6b:50:41:
50:1e:96:80:82:96:32:c7:3b:a8:a0:d4:be:99:de:
77:e4:be:7e:e0:d2:a0:ee:e0:a2:50:2b:06:50:fd:
aa:5d:c6:34:d4:77:b1:e9:9a:72:61:7f:7b:c1:33:
4b:70:55:d5:57:fd:49:e3:56:61:33:d8:84:ab:d5:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:C1:B7:BD:1B:9D:4E:3A:8E:69:4F:33:F1:35:0E:24:31:C6:AA
X509v3 Authority Key Identifier:
keyid:1E:BC:14:45:41:47:01:0C:A1:EF:4D:04:D2:10:12:5E:1E:D7:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrwURUFHAQyh700E0hASXh7X0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/48bf98-7e15-45be-bd39-205079e51c13/1/HrwURUFHAQyh700E0hASXh7X0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c4:d6:9e:8d:e5:15:8a:ff:d4:47:e7:f1:4d:86:de:82:8c:
35:14:4b:a8:17:16:db:94:b2:76:f0:84:0b:06:b6:2b:d9:a7:
9e:e8:8a:1e:34:62:98:0b:28:31:19:59:c5:45:8e:b1:e1:e3:
13:b4:80:bb:cc:ba:53:d4:a6:f9:3b:31:b0:0b:03:5d:10:a4:
45:d3:5d:ac:c1:e4:4b:51:11:bb:dd:28:9b:5c:c2:ee:80:af:
a4:3f:6c:0f:7d:b2:32:f9:58:3e:99:fa:42:74:be:89:4f:b7:
34:2e:f0:15:7d:35:c7:82:d7:3a:ff:aa:d3:8a:50:30:60:1c:
37:ab:d8:08:c6:18:f6:be:5c:b5:74:87:68:5f:27:9a:3d:5f:
d5:2c:a7:35:b5:4d:6b:a3:d2:11:40:d5:36:8a:52:17:c8:82:
c2:0a:87:4f:05:3f:f6:bc:2d:63:9e:9a:02:78:47:30:54:d9:
f8:8e:32:e3:f8:8e:11:39:d5:95:8e:06:a3:c5:2a:e6:ae:4b:
49:03:d4:aa:ce:55:89:57:a6:c6:26:c0:a9:16:fc:f9:45:34:
54:3d:b1:8c:ea:0a:50:7b:a9:7b:b4:2f:60:10:22:6d:7c:bd:
9b:35:01:c7:f5:9b:3a:fd:37:8d:bf:34:ab:10:b7:2c:cc:45:
b7:50:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:41 2025 by rpki-client