Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
File: hLBJ87D-hTTmNyFjXrZivHazkrs.mft (raw, json)
Hash identifier: GBtAREOxoyQPuZCFDyJjx8+PZY0be1FQ2h+hQt4XrBs=
Subject key identifier: 70:C5:DC:51:97:E5:B5:E9:BA:1C:13:12:9D:D3:10:D4:BB:31:63:CB
Authority key identifier: 84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB
Certificate issuer: /CN=84b049f3b0fe8534e63721635eb662bc76b392bb
Certificate serial: 0194BBCEACFE749D039C2E95D0C8FF1998DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
Manifest number: 02A6
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: hLBJ87D-hTTmNyFjXrZivHazkrs.crl (hash: A8zVv7OqKp3+dn9rTtfkr3X6V06Dg+Wlq4w4hmv2FWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:fe:74:9d:03:9c:2e:95:d0:c8:ff:19:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b049f3b0fe8534e63721635eb662bc76b392bb
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=70c5dc5197e5b5e9ba1c13129dd310d4bb3163cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:3d:59:f4:e3:6b:0c:07:57:46:83:f9:a0:
43:09:9b:51:18:a0:a5:ea:2b:9b:5a:21:cf:90:d0:
d4:e3:c5:5d:e3:5e:78:27:cf:25:cc:a3:02:ac:f5:
f9:ac:01:6c:60:c9:69:7d:fb:eb:0d:39:e7:33:6c:
73:56:f4:77:2d:be:40:9e:81:ad:7f:70:69:d4:94:
94:20:24:80:9e:c4:24:98:4f:48:9e:73:3c:fe:35:
3b:0e:fe:92:78:a0:ec:e7:7b:0e:96:bb:5b:e7:9b:
d1:2b:c5:16:5e:f4:36:1a:d9:ac:91:a9:bf:8a:51:
63:9a:3c:8f:90:af:e2:5c:70:1c:f2:7a:65:07:ed:
c5:79:ea:8a:8a:29:3e:a4:3d:01:9d:8e:99:d7:58:
cc:fa:6a:e3:c8:3b:ad:c0:0b:55:ca:e9:a0:07:da:
77:b0:10:15:fb:08:72:38:c3:02:b7:eb:dc:2d:35:
6d:39:5d:c0:46:a6:61:ec:52:39:1e:40:36:58:86:
f7:9d:e6:2c:45:dd:42:13:53:5c:d2:20:ad:50:d6:
ba:b6:3a:05:5a:5d:9d:d8:d7:79:8c:f3:9c:f5:90:
4b:15:de:c7:a5:fe:2a:24:b6:99:b8:b8:61:ef:f0:
2d:8e:b9:f4:a8:9b:c6:29:e6:f2:10:a2:ea:1e:17:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C5:DC:51:97:E5:B5:E9:BA:1C:13:12:9D:D3:10:D4:BB:31:63:CB
X509v3 Authority Key Identifier:
keyid:84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:52:73:cd:0a:59:0f:04:57:9b:9e:6d:d6:19:0b:b6:68:5f:
fa:a4:18:36:08:39:aa:89:74:5f:3c:62:ee:b9:d6:97:8a:e4:
da:8d:76:31:fe:81:94:6a:5f:e3:39:24:40:3d:e5:ba:ae:3d:
57:63:19:01:ee:e8:1e:6c:14:ad:d2:14:d2:5a:98:a1:35:4a:
8c:1a:54:0a:fb:78:a1:e4:b3:cc:04:c1:e1:b9:cc:70:7a:bf:
eb:53:43:0e:4e:05:ce:c9:4d:32:79:6b:f6:79:c7:03:c6:51:
d3:db:39:ec:f0:38:3d:26:ec:07:05:5a:a0:d2:d4:ce:c5:46:
40:af:1a:3d:f7:dc:d4:2a:62:04:3c:eb:10:e0:8a:de:1b:b1:
4b:b2:4d:b5:00:05:1a:24:93:6f:59:0e:aa:7b:95:33:cc:91:
37:47:68:71:4a:93:c2:46:26:5a:d8:3f:59:5c:be:b6:71:98:
1d:5c:a4:9d:2c:ad:63:b8:9c:20:e9:c1:ab:2b:09:83:5f:86:
f5:57:3a:44:5e:6c:d2:74:8a:64:dd:8f:bf:01:98:c4:01:2f:
20:3e:73:b2:9d:31:2d:82:f8:bc:58:b7:31:18:01:24:57:3a:
22:66:6a:17:b1:0a:d2:e0:ce:75:3f:01:11:2b:cc:7d:66:58:
1b:a4:ec:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:45:08 2025 by rpki-client