Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f1a67b-f5c2-48be-87c1-18481c54bac0/1/hphbrg2TjeJDhcQFPNo5G3RFAmc.mft
File: hphbrg2TjeJDhcQFPNo5G3RFAmc.mft (raw, json)
Hash identifier: 5dyiQtglfY3uCI+RajybZfUv9B37ifbyTCiYWtgwJ3w=
Subject key identifier: 2C:EA:19:F8:52:95:8A:D4:2D:4E:B6:92:45:F6:C6:45:8D:97:7A:1A
Authority key identifier: 86:98:5B:AE:0D:93:8D:E2:43:85:C4:05:3C:DA:39:1B:74:45:02:67
Certificate issuer: /CN=86985bae0d938de24385c4053cda391b74450267
Certificate serial: 0194BBCEE232D8DB663B8592E093F024EF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hphbrg2TjeJDhcQFPNo5G3RFAmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f1a67b-f5c2-48be-87c1-18481c54bac0/1/hphbrg2TjeJDhcQFPNo5G3RFAmc.mft
Manifest number: 079A
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: hphbrg2TjeJDhcQFPNo5G3RFAmc.crl (hash: pzIwzXX1RAe0W7iTdbo5VqyOfsZMQEZ8vIjyDUeFRV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:32:d8:db:66:3b:85:92:e0:93:f0:24:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86985bae0d938de24385c4053cda391b74450267
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=2cea19f852958ad42d4eb69245f6c6458d977a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:35:6e:97:a0:9f:75:b4:44:c0:1c:96:7f:
17:d7:70:a2:c8:a3:9a:5a:d4:77:47:a9:34:60:25:
63:83:ee:21:2c:4a:30:61:b7:c7:a9:10:4e:24:64:
ea:41:16:d0:e8:9a:90:5e:50:f7:d3:f7:eb:c4:b5:
be:1f:0d:3e:11:20:61:2e:1b:2a:10:5b:73:35:c1:
59:2b:70:d8:67:d2:88:87:29:85:c0:7f:c9:a9:42:
01:2a:3a:1b:9d:7c:c1:8f:62:02:ed:c8:28:51:6f:
39:4e:dd:3f:8d:d8:3c:ed:80:8c:c9:05:67:f8:7e:
9e:3f:b9:45:cc:b9:fa:26:e1:cd:e8:0c:5a:b2:f4:
4e:fd:a8:b4:3b:67:45:c9:3a:2b:df:cf:15:d7:c0:
f3:eb:8f:42:0e:68:8b:2e:d3:68:ef:01:48:c3:09:
32:73:65:e0:54:e5:91:c5:18:d0:14:80:d7:7d:b4:
f8:4f:6d:75:2b:8d:3b:ce:62:03:04:a5:65:ab:5c:
a6:31:91:e0:b0:a0:c8:84:89:fc:ef:c3:c1:7a:4e:
3a:31:01:51:ab:c1:3b:78:e5:e8:02:89:b1:0f:9d:
be:57:97:55:77:96:f7:91:ac:81:43:1f:18:d4:f0:
78:b1:dc:24:9c:bb:fe:81:da:73:9c:13:89:52:c4:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:19:F8:52:95:8A:D4:2D:4E:B6:92:45:F6:C6:45:8D:97:7A:1A
X509v3 Authority Key Identifier:
keyid:86:98:5B:AE:0D:93:8D:E2:43:85:C4:05:3C:DA:39:1B:74:45:02:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hphbrg2TjeJDhcQFPNo5G3RFAmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f1a67b-f5c2-48be-87c1-18481c54bac0/1/hphbrg2TjeJDhcQFPNo5G3RFAmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f1a67b-f5c2-48be-87c1-18481c54bac0/1/hphbrg2TjeJDhcQFPNo5G3RFAmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:74:9b:48:66:17:f3:ba:04:ae:09:97:31:a1:87:b3:80:74:
91:b6:75:06:c7:f4:65:3b:5f:b0:2f:76:60:6d:9c:8a:38:21:
f2:44:7d:5d:b3:a9:2c:49:83:98:7b:26:88:fe:25:30:5e:bf:
af:db:86:15:95:b1:7f:9a:1f:f3:6c:69:88:13:66:39:2f:24:
1e:2b:54:a4:b2:7b:06:05:ce:24:44:85:c9:9c:88:cb:de:6e:
d5:01:87:00:5b:f4:b3:d4:33:3e:e3:cb:22:cf:6e:13:07:73:
84:2c:17:32:ed:12:50:05:a3:86:8a:e1:f0:d4:91:9b:94:bb:
bb:f0:50:f0:bb:d3:3d:70:7f:dc:5a:e9:9e:a7:53:1e:61:ce:
c7:f3:68:18:b1:38:22:bb:aa:cd:f9:ba:f1:79:12:6c:4b:46:
93:09:80:62:16:52:c5:d1:59:d2:ee:97:cf:79:f2:a3:70:31:
43:2d:00:2c:a7:ee:f5:f1:c9:51:a3:78:4e:eb:45:8b:4f:b2:
b3:58:a2:36:89:54:69:a5:18:4a:35:e7:58:17:7f:eb:f0:c5:
d3:55:f2:68:15:78:c6:11:06:d9:0a:8b:46:df:77:92:b1:70:
f5:79:88:be:19:ec:34:86:ff:5a:5b:5d:af:7d:82:0a:80:ac:
14:1d:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:12 2025 by rpki-client