Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
File: HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft (raw, json)
Hash identifier: XZrqk//BkfjoEG1vJPlBGE6o0JD+qAfVBiEA0pTUe6Q=
Subject key identifier: 29:6D:5E:F3:33:09:8E:22:1C:64:5D:BA:FF:9D:59:E7:EA:90:FB:41
Authority key identifier: 1C:D1:98:7F:1B:87:1E:2D:5C:BE:6B:69:75:AA:EC:BE:73:AC:57:54
Certificate issuer: /CN=1cd1987f1b871e2d5cbe6b6975aaecbe73ac5754
Certificate serial: 0194BC3BC2F74598B96E32C0B6E041FB89E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNGYfxuHHi1cvmtpdarsvnOsV1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: HNGYfxuHHi1cvmtpdarsvnOsV1Q.crl (hash: I5QmDKdKgzIBPJL2EiNCtf/iSQEXmpG7Bt0vNqZskuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:f7:45:98:b9:6e:32:c0:b6:e0:41:fb:89:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd1987f1b871e2d5cbe6b6975aaecbe73ac5754
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=296d5ef333098e221c645dbaff9d59e7ea90fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:d6:63:80:c7:5c:5f:3f:78:63:b5:ce:a4:
bb:11:9a:6a:f9:b4:1e:d6:03:a1:86:f9:5a:4f:f6:
26:a2:fd:fe:6d:9c:23:01:26:7f:a5:d8:c7:9d:7b:
06:bb:e6:69:78:7c:cc:a4:8e:5e:7a:1e:1c:f8:5f:
8e:75:fc:ec:7f:2a:7f:8e:f9:5e:51:aa:0a:33:e0:
1d:59:c3:d8:a4:8b:91:fa:4f:b9:06:ef:de:e0:83:
57:cb:c6:85:2c:b5:18:bd:f4:58:25:ed:d6:b3:f1:
84:7f:35:46:f6:88:6c:0a:b3:b2:77:3c:0a:d9:e6:
ae:84:f3:8c:fd:89:92:a0:f3:22:59:a3:ae:5c:27:
fd:9f:57:9c:4e:0e:75:2a:78:bf:72:0d:7a:fb:2d:
67:40:44:0f:fa:0c:c9:e3:16:de:70:57:cb:ca:3f:
5f:c9:9a:96:88:08:9c:a9:bb:2a:c1:2b:09:34:11:
13:1c:70:2b:32:63:e7:82:fd:5a:12:79:ea:0a:bb:
c3:ac:8e:8a:db:70:a3:5e:53:18:43:cc:02:39:34:
9a:55:bd:eb:51:22:3b:5f:af:a2:d1:c9:2b:4b:be:
b9:66:fa:41:dd:8e:2e:00:75:90:03:4d:12:e1:b1:
ad:6c:b9:92:a1:4b:6c:11:f1:29:da:80:8c:b6:f8:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:5E:F3:33:09:8E:22:1C:64:5D:BA:FF:9D:59:E7:EA:90:FB:41
X509v3 Authority Key Identifier:
keyid:1C:D1:98:7F:1B:87:1E:2D:5C:BE:6B:69:75:AA:EC:BE:73:AC:57:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNGYfxuHHi1cvmtpdarsvnOsV1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:0d:0d:13:19:9b:b4:83:1a:0a:18:59:c9:2c:1b:af:d7:
df:b9:92:63:c0:da:9c:7b:dd:22:1f:b1:1b:c4:73:e9:90:5a:
00:b4:61:4b:48:5f:c8:48:9d:bd:9c:24:96:10:d2:df:1c:49:
95:cc:af:42:69:60:d3:9e:77:ba:0f:76:75:7e:41:2e:c1:a3:
a1:b2:c1:bc:0f:e3:56:4b:14:a9:bc:f7:ff:65:f6:87:b1:48:
03:84:da:ee:8a:0a:89:ce:c5:e7:88:0d:fa:71:f2:0e:13:72:
c7:55:86:80:7e:5a:cc:2f:db:37:ea:4d:31:ea:6f:43:80:d8:
12:c5:8b:2b:66:9f:eb:bb:46:9d:52:e6:1a:4f:5c:e7:69:c1:
37:fd:73:46:db:b8:a6:0c:b4:38:fe:db:a3:ba:f7:c1:99:64:
fa:50:ca:79:21:c7:42:9d:c2:b2:1e:77:64:04:7a:f8:ff:f9:
81:38:64:ca:9f:db:ad:51:7e:23:52:e2:b2:7e:35:b9:2b:44:
69:c7:90:62:90:3c:25:83:2c:6a:a5:9d:ae:e4:fa:22:fc:18:
c6:14:ee:87:da:cd:77:8e:d5:ab:34:eb:4d:8e:af:28:ae:7b:
83:f6:aa:9b:54:b9:cd:c5:d2:4e:e8:b0:e4:6f:dd:2e:6e:da:
d8:01:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:41 2025 by rpki-client