Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
File: hJxbptQKtOTjm3tpttLZhEqiSK8.mft (raw, json)
Hash identifier: PfBVMx/qYrGDFGIYHvsiJk3a9ZcRV6Lhwe8QgP8fQRQ=
Subject key identifier: 7F:8D:FA:85:A0:EB:19:A2:CC:DD:60:88:28:DC:DB:E5:60:46:4A:DB
Authority key identifier: 84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
Certificate issuer: /CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Certificate serial: 0194BD17D98CF44B77BF6DCA65B93E96B22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: hJxbptQKtOTjm3tpttLZhEqiSK8.crl (hash: lwBb9DQYnnJW5ijaHfh5gxXcRnceIRr2Ca6pqzn5rLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:8c:f4:4b:77:bf:6d:ca:65:b9:3e:96:b2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849c5ba6d40ab4e4e39b7b69b6d2d9844aa248af
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=7f8dfa85a0eb19a2ccdd608828dcdbe560464adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:d3:56:34:d0:67:45:65:81:3b:2f:05:bb:
f2:c4:28:07:75:9d:d6:d0:8f:96:9f:86:37:98:1f:
a9:52:2e:74:7f:e3:7e:4e:c8:c2:9f:76:20:c1:c2:
68:d7:19:c6:4f:b6:fa:21:ee:cb:da:dd:8a:d7:9e:
bd:4e:ba:55:e6:75:ca:71:7e:e7:43:f3:42:e9:7a:
f8:db:51:6c:85:f0:20:58:ca:d2:f9:4f:e2:6e:cd:
36:bd:e6:90:12:ad:27:66:4f:3b:d1:b3:fc:44:ab:
3d:ff:7c:e2:68:33:06:fe:69:5a:3e:0d:c9:dd:74:
03:36:3a:99:2b:c7:21:63:d4:fe:e9:fd:c4:e0:0a:
0d:f7:ab:c6:4b:c4:5a:1e:ef:cf:29:1f:b4:81:16:
a9:51:60:cf:5a:36:d4:07:30:4e:ad:fd:15:68:c4:
b9:e9:b5:58:70:69:f2:7b:6a:99:4c:53:9e:1d:ff:
40:04:8d:09:b8:88:0b:03:b1:9f:d4:9b:ce:29:83:
1e:93:0c:ca:e7:72:f5:e9:bd:bd:2f:69:00:01:9f:
54:73:83:24:58:1a:39:23:9f:99:fb:04:7a:74:b7:
33:35:65:d6:fe:a2:dc:ab:e7:38:ac:8f:9e:ea:6d:
e7:b0:81:67:12:9f:92:9b:8f:89:5c:6f:70:1c:a6:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:FA:85:A0:EB:19:A2:CC:DD:60:88:28:DC:DB:E5:60:46:4A:DB
X509v3 Authority Key Identifier:
keyid:84:9C:5B:A6:D4:0A:B4:E4:E3:9B:7B:69:B6:D2:D9:84:4A:A2:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJxbptQKtOTjm3tpttLZhEqiSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/37c514-8213-438c-a164-d98487bdee48/1/hJxbptQKtOTjm3tpttLZhEqiSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:98:10:38:2d:e5:ea:42:73:9d:f7:aa:5a:d5:fe:1f:84:
54:58:57:8a:53:98:29:44:24:62:ec:d1:92:be:82:95:f5:05:
21:bf:80:05:e7:4e:65:00:a7:7b:b4:ad:4a:a5:5f:a9:0b:12:
64:10:7e:a3:60:f5:9d:1b:8a:9f:13:a3:2a:86:21:28:96:24:
0a:08:4e:94:07:59:3f:03:61:28:7f:9c:2f:fd:1e:6f:da:07:
bb:a2:d4:66:c9:1c:86:bb:e3:f3:66:6d:e7:26:97:cb:f4:dd:
b0:f7:c2:ab:1e:c6:36:c0:42:14:f6:74:ad:9c:03:0e:29:1d:
50:f5:a4:75:d2:a4:d1:8a:6a:13:1c:e1:7e:28:57:16:d3:3a:
2a:27:3d:03:3f:b8:ba:ec:56:c9:fa:73:b7:c7:d8:ac:e6:0e:
84:2e:ad:0b:ee:aa:fe:03:6d:cf:f6:14:12:c2:40:0c:2f:18:
0e:48:91:ee:b2:a3:50:dc:a0:0f:92:7a:8a:86:8e:4c:bd:5f:
cb:88:b8:f1:19:35:1f:b7:43:e3:a5:4f:46:60:9c:0e:ea:5e:
86:1b:a4:b0:59:2f:f9:b2:f5:ea:98:9d:16:ae:c7:1a:7f:bf:
43:ba:43:7c:98:b2:50:d5:c6:bd:86:06:ca:6b:26:68:e6:a5:
19:47:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client