Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: kgvmZYzFKKd0t/jTautqghL9R8TaZxB+MaZ+HqJwKms=
Subject key identifier: EF:2F:26:CA:55:7A:7D:08:09:CB:35:CD:88:BD:B0:92:B3:E5:13:CD
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 0194BC3C13E9DD46428CDA3179D464A1CFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: zm0Tib42oV6y5TtFY9iLfpdq/4dKr4L91OzdB3uIj6E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:e9:dd:46:42:8c:da:31:79:d4:64:a1:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=ef2f26ca557a7d0809cb35cd88bdb092b3e513cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:17:a4:79:fd:2a:e9:a7:b9:7f:b0:a9:f4:
a4:2a:ec:78:da:1f:55:ca:f5:2d:0e:69:97:77:d8:
8c:63:3a:a6:5b:4f:d3:26:e9:78:c5:8c:30:3c:90:
f4:5d:a1:21:d7:fe:d3:c0:04:dc:92:27:41:ae:7b:
03:52:1f:24:e4:ce:86:74:b6:85:d4:da:df:aa:d6:
59:1f:d9:6e:f6:13:37:9f:cd:9f:a3:e6:61:bb:d6:
24:63:31:4e:bf:a9:34:2f:ae:28:3d:c2:39:68:72:
c5:5a:f3:23:70:f1:4b:65:98:10:a6:6f:b5:3d:68:
2b:5f:47:4c:08:07:23:40:a1:ce:3d:50:e6:10:66:
c4:fa:8a:1a:05:e3:d5:92:26:f1:84:09:93:2b:70:
f7:63:e9:7a:ba:14:95:9f:eb:d2:ec:b1:78:5b:ce:
77:28:35:52:64:2a:a6:50:7e:85:28:a5:fb:aa:25:
29:a7:8c:70:78:61:4c:34:ef:32:3b:da:d0:d8:f7:
c5:d8:fa:6d:d7:8d:31:74:cb:16:17:fc:39:9a:11:
c8:90:80:4a:cc:de:b6:5f:15:7c:d9:c6:27:a4:e7:
14:92:31:09:99:f2:93:2c:7f:78:c8:fe:e3:d5:54:
50:d2:68:b2:c5:4d:6e:ca:fb:f7:b2:99:71:b1:48:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:26:CA:55:7A:7D:08:09:CB:35:CD:88:BD:B0:92:B3:E5:13:CD
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:0c:8c:71:5f:b2:5b:07:24:22:09:11:a4:19:84:1d:95:
8a:d9:57:b8:3b:d5:09:85:49:26:4d:82:ec:db:2a:0a:b3:cf:
ac:ea:10:e7:9e:15:bb:b8:59:fd:66:37:0b:74:5f:fe:67:27:
c7:5e:47:1f:fa:98:31:c7:3c:1d:07:a6:40:67:04:48:9e:df:
c8:e4:4f:f6:7e:60:4f:ac:33:99:00:a3:fc:93:88:4a:43:65:
5b:62:90:80:cb:67:aa:3a:cd:0d:3e:94:1b:45:a8:fc:32:43:
ec:b5:e5:1b:1e:36:79:99:8a:5e:89:3a:a7:2f:e4:62:df:b3:
ee:cc:39:1f:38:0b:84:a7:9d:0f:d9:d0:2f:8a:43:fd:77:87:
64:d2:97:c9:11:86:91:a3:85:69:14:d6:40:eb:d0:4f:0f:60:
3f:5e:b5:5d:89:35:10:ff:b0:4e:67:d1:28:bd:55:6c:b2:8f:
26:ee:c0:4a:89:bc:d6:4a:e9:33:f8:3d:2a:ac:8c:3e:ad:9a:
b4:ec:d2:87:d8:40:05:34:f5:ec:98:4a:1d:03:4a:23:1b:09:
5f:db:e0:b8:9a:17:6e:4f:db:0a:9e:e8:39:e3:92:d5:25:a0:
42:bc:c0:d6:4f:6d:3f:be:c1:bb:36:00:78:00:19:39:d3:ec:
13:75:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:36 2025 by rpki-client