Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
File: hxv5w80rNkB9-9l2-4SiEZeg6qE.mft (raw, json)
Hash identifier: OeXPHNkCLg1DHgkzmWoaDL65g/Cz+anAVasGwWnobnE=
Subject key identifier: 76:86:65:F5:E1:EE:34:81:09:36:DD:5E:1C:5D:79:5C:27:58:66:3D
Authority key identifier: 87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
Certificate issuer: /CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Certificate serial: 0194BC3C3EBC304F36D2FC93C245232A4779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: hxv5w80rNkB9-9l2-4SiEZeg6qE.crl (hash: iEi+W03qIdi3OD+PZcUef0uiY/T4uxX5D30MZbvnq0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:bc:30:4f:36:d2:fc:93:c2:45:23:2a:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871bf9c3cd2b36407dfbd976fb84a21197a0eaa1
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=768665f5e1ee34810936dd5e1c5d795c2758663d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:08:fb:bc:f2:0e:dd:57:85:c1:87:5e:59:
a2:8b:04:46:07:f4:44:2c:10:4e:c4:0f:3d:31:79:
fb:5c:43:f5:4a:16:39:f9:40:68:b5:cc:2f:74:9a:
f0:1e:86:7d:ac:a1:7d:88:24:a6:0a:07:ff:02:1c:
e4:68:82:08:b7:cf:2d:0e:58:76:7b:34:4a:74:e4:
e6:0d:2a:ed:23:b2:9a:87:32:e6:4f:6e:65:34:fa:
b3:2a:c4:af:a6:fc:b6:a4:02:9b:49:d4:cd:35:d5:
f9:29:68:52:02:90:a8:5a:55:62:b6:cb:ea:37:ac:
63:45:fe:91:e0:58:62:82:53:fd:41:01:61:4a:47:
ab:55:04:7e:29:bb:ee:03:d1:57:38:95:00:d7:51:
5b:96:b5:ad:f0:7f:97:2f:24:ed:ad:07:fd:b8:bf:
db:cf:7a:68:62:88:a5:3c:3a:e4:e5:fd:8d:f1:6a:
fb:6c:a0:98:7a:94:c1:40:1f:cc:9f:2e:1e:b1:61:
b4:8e:2c:28:f8:06:94:ac:6b:fa:f4:14:ff:2a:fa:
e9:20:fe:fc:6b:bb:5c:9d:5d:5b:52:d1:0f:32:22:
04:dd:15:12:2e:19:e4:0b:49:9c:36:9a:df:a6:89:
16:62:0f:a4:57:5c:57:4a:90:b3:f1:84:4b:04:77:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:86:65:F5:E1:EE:34:81:09:36:DD:5E:1C:5D:79:5C:27:58:66:3D
X509v3 Authority Key Identifier:
keyid:87:1B:F9:C3:CD:2B:36:40:7D:FB:D9:76:FB:84:A2:11:97:A0:EA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxv5w80rNkB9-9l2-4SiEZeg6qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ebe88e-7142-4c8a-939b-fa1e6083992d/1/hxv5w80rNkB9-9l2-4SiEZeg6qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:e9:7b:64:11:3e:b9:7d:0e:60:34:61:9b:32:f4:f6:43:
85:98:cc:a8:63:c7:1c:71:e5:ad:95:dd:6a:9a:f3:3f:cc:a7:
8f:bb:06:89:3d:de:0b:7d:b6:39:0e:9d:30:df:7b:ad:f2:a8:
d1:5b:e9:b1:8c:f3:1c:1f:c7:98:f8:e0:27:4c:39:3a:78:12:
22:a4:7f:24:8b:aa:26:74:4a:8c:1e:e8:f4:64:10:99:6e:ea:
b5:ec:2a:0f:bf:2d:47:c0:7c:80:7d:51:e2:74:eb:6b:eb:b8:
81:26:cf:64:ce:a6:26:08:77:18:72:a7:a8:93:55:02:31:7e:
9b:c9:df:00:53:d4:35:52:35:f2:3e:7e:96:6f:35:26:58:82:
8a:a4:c4:2d:ff:52:b4:c4:be:c8:28:14:71:c6:68:a0:7b:be:
ec:7a:b8:ca:b5:64:2b:3e:d9:1c:b4:99:38:82:35:e2:25:11:
31:ac:84:fc:28:23:3d:7a:1a:8f:16:66:9b:f9:a2:8f:53:da:
7c:a9:94:1a:11:1f:e5:a4:71:e7:22:68:62:49:94:77:fe:33:
c8:21:dc:74:01:d0:e8:19:1b:f1:3e:ba:27:07:f0:1e:2b:b3:
1a:76:8a:0a:38:49:77:48:e9:6b:35:1a:a1:de:5c:6f:65:d0:
0f:60:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:59 2025 by rpki-client