Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/03d175-30f2-4913-99b2-ffc409c503d5/1/HbaQYGGZpdSGeJxD2__QwGW93OY.mft
File: HbaQYGGZpdSGeJxD2__QwGW93OY.mft (raw, json)
Hash identifier: JRCnhvvAr4Vi2/dWXKRfC8NprHH2Fi48yqY4ruG/zic=
Subject key identifier: D2:CF:B1:B4:0A:0F:F3:05:3B:AF:B7:2A:14:9B:EC:AE:BA:04:F7:E3
Authority key identifier: 1D:B6:90:60:61:99:A5:D4:86:78:9C:43:DB:FF:D0:C0:65:BD:DC:E6
Certificate issuer: /CN=1db690606199a5d486789c43dbffd0c065bddce6
Certificate serial: 0194BD17A3E5D8CF65F0101A6EA773F8BC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbaQYGGZpdSGeJxD2__QwGW93OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/03d175-30f2-4913-99b2-ffc409c503d5/1/HbaQYGGZpdSGeJxD2__QwGW93OY.mft
Manifest number: 0260
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: HbaQYGGZpdSGeJxD2__QwGW93OY.crl (hash: mBwceAyU6jjZaAT9ST2iGUYKwh4HpYhk9Mxf8maI7rU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a3:e5:d8:cf:65:f0:10:1a:6e:a7:73:f8:bc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db690606199a5d486789c43dbffd0c065bddce6
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=d2cfb1b40a0ff3053bafb72a149becaeba04f7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:dc:b6:1b:42:a2:e4:c7:6f:e4:c9:ca:bc:
04:ba:aa:77:ea:db:7b:97:ef:3c:c1:08:11:88:39:
a7:5c:df:e8:a3:dc:62:c9:2e:9e:d4:b0:95:7d:b2:
90:05:13:e6:ec:e9:ed:e1:d6:d0:9a:0c:7e:ed:18:
dd:31:e8:56:eb:80:32:31:95:cb:9c:b3:a5:50:8e:
3a:64:14:9c:8f:ab:f8:38:d4:8d:0d:79:4a:fe:8e:
32:50:a1:b1:10:52:cb:48:4b:00:f5:cf:5d:42:5c:
ba:b8:c0:00:62:c5:ce:28:08:e5:44:bd:e7:6d:4e:
f2:6c:69:b5:c4:27:be:c3:56:b5:ce:bb:8a:bb:4f:
be:e5:76:8f:f0:ad:08:26:04:8c:97:48:a2:71:99:
c1:78:8d:2e:2f:af:a9:0e:ac:b3:80:64:b1:7d:b0:
f2:da:54:22:ce:b8:1b:8a:8f:6e:b0:ce:c9:42:43:
20:73:d8:c0:8e:e4:87:6c:e7:02:f6:ae:3d:30:78:
35:e7:a7:a1:3a:2f:dc:2a:7a:7c:1e:35:66:c9:f8:
5e:62:76:d1:a9:d2:03:94:a9:94:5c:ea:42:7a:67:
4d:9d:83:44:94:af:5f:94:d1:84:dd:65:e8:7d:d8:
43:7c:17:72:1f:34:64:2d:b8:3a:f7:c7:ba:c6:98:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CF:B1:B4:0A:0F:F3:05:3B:AF:B7:2A:14:9B:EC:AE:BA:04:F7:E3
X509v3 Authority Key Identifier:
keyid:1D:B6:90:60:61:99:A5:D4:86:78:9C:43:DB:FF:D0:C0:65:BD:DC:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbaQYGGZpdSGeJxD2__QwGW93OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/03d175-30f2-4913-99b2-ffc409c503d5/1/HbaQYGGZpdSGeJxD2__QwGW93OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/03d175-30f2-4913-99b2-ffc409c503d5/1/HbaQYGGZpdSGeJxD2__QwGW93OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:a4:e1:46:7c:8a:0e:e2:15:3c:da:0e:28:87:c8:ad:b2:
2f:fb:c7:1d:da:7b:10:00:73:96:ea:ef:a6:8f:1d:60:94:29:
24:90:ee:c2:19:eb:b6:55:9b:02:fe:01:07:03:74:49:1d:80:
78:bf:49:ca:e8:e2:fb:43:c0:79:b7:2f:18:ee:fd:84:84:eb:
7e:11:ef:ed:aa:ea:7d:c5:24:f1:67:9d:2e:df:85:b3:2f:d5:
31:a8:4e:da:18:6c:e3:6e:10:73:96:7d:d9:a8:44:1d:3d:d4:
db:34:4a:7b:d0:85:6f:5e:31:eb:88:92:0e:2b:46:ae:35:4a:
5e:e3:4d:f9:49:4c:08:d2:67:9c:8f:96:bd:82:e9:76:dd:0a:
e0:d7:b5:89:6f:1c:98:97:6f:39:39:d6:99:2a:0e:7b:d0:70:
50:ae:64:ab:04:fc:30:a3:b0:af:bd:9f:cf:d2:f1:8e:86:cf:
80:be:09:b0:d5:20:ad:50:af:96:7a:2f:97:13:0d:7f:02:40:
b9:bd:0f:dd:7d:9a:ac:87:d6:64:08:db:e6:b0:8d:c6:2c:9f:
36:1a:a9:7a:1e:84:e6:a4:f8:dc:c2:17:6e:a4:66:17:ab:21:
43:ff:62:8c:e3:91:a8:08:83:0f:14:84:a9:f4:21:56:80:2f:
b4:ba:7a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:01:47 2025 by rpki-client