Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: VDCQrN+ZutybslO3lTTd52SFGEMb4YKdSw2ILhK3QL4=
Subject key identifier: 4E:97:A0:17:F0:66:8E:B9:D1:DA:CA:3B:DE:C9:F4:36:1C:17:35:87
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 0194BBCE1A7369CEA2B35C88A9F81136D965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0566
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: OSWRbbjHDCGOtb8ZiB/AGSyNUP38DaoqtyWixqPyzoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1a:73:69:ce:a2:b3:5c:88:a9:f8:11:36:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=4e97a017f0668eb9d1daca3bdec9f4361c173587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:11:5f:da:07:87:bd:48:a1:05:7c:85:a8:
00:46:78:24:40:43:7f:f4:9c:2b:8b:17:69:6e:53:
bc:b4:c4:78:01:34:54:f1:d6:22:c4:cb:8d:b9:c4:
5b:05:74:78:65:19:d1:ad:b1:01:79:a7:15:27:68:
94:47:e2:00:33:dd:81:3b:dc:e5:ca:e2:a2:52:c9:
b7:2f:ca:d9:38:c4:3a:9d:4b:b2:04:10:16:25:64:
c0:70:55:00:aa:31:5d:0c:da:0a:17:78:3e:48:97:
9d:f4:4f:d5:cb:57:c0:f6:d9:0a:e6:8a:ce:cb:dc:
4a:3e:88:89:54:ba:78:fa:03:9a:c7:44:80:e8:25:
b1:86:1c:4f:10:ee:b7:70:f0:7b:14:36:d1:f5:dc:
6f:b5:30:fc:41:0f:2c:8f:17:84:31:0d:64:e4:0c:
08:c6:92:49:cf:29:ed:5e:41:70:19:2c:98:3f:c9:
1b:a7:9c:0b:db:43:bb:41:7f:9d:a0:0c:61:40:bc:
f5:73:26:1a:2c:af:37:00:4f:65:93:86:1e:14:e0:
1f:38:e1:8a:eb:a3:18:a8:12:50:78:99:b6:7f:06:
2e:14:b6:9b:1c:37:36:eb:81:35:c3:8d:e3:3a:c8:
5b:9d:95:0c:07:b3:d7:53:5a:68:66:aa:8b:f9:36:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:A0:17:F0:66:8E:B9:D1:DA:CA:3B:DE:C9:F4:36:1C:17:35:87
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:e7:88:37:3e:3f:43:03:06:60:78:0d:eb:ad:12:8c:c3:8d:
78:9a:64:58:5b:fc:ec:37:9f:95:15:bd:06:46:22:7f:42:e3:
e1:7c:92:52:ce:3c:b9:13:ae:4f:0d:81:cf:eb:f6:92:f3:c1:
c2:e3:7c:c1:60:2b:50:5e:d2:5a:59:d8:d0:0d:0b:91:6d:09:
7b:bc:bc:fa:df:a1:49:79:26:99:ae:0c:32:09:eb:59:01:ff:
e1:5f:14:8a:d1:d0:f0:28:f1:3e:bf:9d:bb:4b:95:9b:c2:fb:
ce:05:ae:c7:94:85:9d:2e:a9:03:f3:fc:7f:bb:dc:e2:3d:13:
f7:30:8f:26:83:e2:3d:80:03:e9:69:7d:da:82:04:c4:69:23:
b4:d9:eb:b6:3b:ff:f0:96:28:69:44:4f:9e:d6:9a:38:9d:87:
4d:a9:d6:a2:53:7e:4e:11:c7:7c:21:07:f6:06:69:9e:08:e6:
ee:90:89:bd:4f:77:a4:a7:8e:e5:fd:67:a5:2e:b3:fa:8d:03:
22:54:b1:73:25:a6:62:30:85:ee:63:32:df:f0:ce:ae:cd:ae:
7c:1b:49:e6:15:40:f5:c6:d9:db:e4:dd:85:4a:e5:52:07:9c:
e9:fb:ef:bc:c7:23:ea:5b:08:35:8f:7a:39:e5:12:a5:40:8f:
de:e4:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:26 2025 by rpki-client