Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
File: hkCo0qJ0maklfW7UZjoLMNob_jM.mft (raw, json)
Hash identifier: SEzyL9i3WwjzYBf5vPcEscoJkK3m3/aZVlNW7FFuaq0=
Subject key identifier: 65:FF:3E:A1:D6:6E:7A:0F:8B:6F:81:88:2E:75:BE:50:67:0A:61:E4
Authority key identifier: 86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
Certificate issuer: /CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Certificate serial: 0194BC3BBD7D967F32AA35A75DC395A61729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
Manifest number: 07D1
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: hkCo0qJ0maklfW7UZjoLMNob_jM.crl (hash: UP9gnjufcEs8ocIkfTOzi5whYcsTpHK5rdCiXqRJY+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bd:7d:96:7f:32:aa:35:a7:5d:c3:95:a6:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8640a8d2a27499a9257d6ed4663a0b30da1bfe33
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=65ff3ea1d66e7a0f8b6f81882e75be50670a61e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:8c:2a:76:ec:97:2f:5a:d8:ec:91:2b:96:
86:75:94:33:de:b2:24:33:da:7c:a6:8f:f4:be:1d:
2b:1d:0f:5d:39:b8:98:c7:83:68:f6:eb:fe:74:52:
b9:1d:1e:83:5e:93:e8:33:df:74:c8:32:ff:89:c2:
50:31:b9:1c:36:d5:9e:aa:61:a8:53:f3:65:91:fe:
15:19:51:22:a8:0a:01:42:37:c3:59:23:61:b8:b9:
35:43:e0:32:2a:42:52:37:cc:c0:67:cd:17:24:4e:
f6:a5:e8:21:4d:66:05:3e:93:ae:96:0a:2a:1f:83:
f9:04:bb:04:e5:81:75:75:d3:02:b7:20:f0:01:90:
31:94:db:71:0a:14:38:b2:12:fe:07:6b:d6:d0:d4:
7b:d4:30:c4:b7:67:65:1e:7f:29:05:03:6c:59:3a:
da:41:b3:fa:62:21:67:63:eb:4b:aa:f0:20:fa:d7:
20:ad:f4:41:34:3b:c9:6c:78:a4:1e:b2:3c:c7:33:
9e:b4:03:82:9d:30:4a:59:aa:4d:c0:87:0d:f3:52:
0b:e6:fb:1d:1e:a4:97:67:d3:88:aa:de:ec:3e:3a:
7f:38:56:b5:b0:ae:a4:8f:81:8c:37:02:76:ec:f5:
c5:e0:5a:05:95:ab:30:78:6f:2d:fd:5f:d2:ac:eb:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:3E:A1:D6:6E:7A:0F:8B:6F:81:88:2E:75:BE:50:67:0A:61:E4
X509v3 Authority Key Identifier:
keyid:86:40:A8:D2:A2:74:99:A9:25:7D:6E:D4:66:3A:0B:30:DA:1B:FE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkCo0qJ0maklfW7UZjoLMNob_jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/909dc1-c048-4fb4-898a-0710747a2e91/1/hkCo0qJ0maklfW7UZjoLMNob_jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:ae:2b:46:af:31:4b:ab:fe:62:87:cd:e0:4f:d8:42:06:
51:ea:0e:62:74:ac:b4:15:3b:42:fd:46:cb:bf:7c:1c:35:9b:
61:0e:2d:04:ec:7f:77:e6:ad:8c:5a:3b:5d:52:c6:21:84:7f:
76:1b:49:77:4a:5b:44:fa:0c:c1:ba:6d:3d:14:6f:78:a2:be:
82:05:39:a3:35:e7:b7:a4:f4:36:27:0f:20:98:1e:65:50:17:
cc:90:40:b6:04:de:c9:ab:20:a6:cd:df:f2:d4:01:15:e3:c5:
db:bb:c7:20:a8:07:3b:a3:dd:ab:94:41:ab:68:05:9a:90:10:
f6:b3:b5:17:74:0f:5f:4f:27:93:18:bd:6e:d8:dd:56:2e:20:
13:e0:85:74:d9:0b:7d:e4:f8:8a:5c:25:d9:f9:70:2a:1c:34:
65:5a:fc:de:35:e2:2f:2a:0d:93:79:c3:fc:d3:74:6d:0d:4b:
14:4a:c1:e4:f0:25:b7:ca:e2:89:75:d8:e3:47:d3:4d:07:20:
25:7f:41:6b:cf:c5:a9:d0:b3:eb:17:72:43:05:26:d4:cd:c0:
81:75:a7:6a:23:9f:d8:6f:64:22:9d:f4:fa:f7:e1:99:60:b6:
b9:21:b2:01:f9:4f:34:f2:00:42:c1:5d:7a:c5:ef:c9:dc:51:
c2:5f:eb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:07 2025 by rpki-client