Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: oc0jtbRbdrKw3b78bJ4cHlYmbqkraFOSEr0E/rWYg8s=
Subject key identifier: EA:30:9F:1F:61:40:88:C9:6D:9F:4E:A4:BE:87:7D:93:22:49:DD:93
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 0194BBCEF96EF1A0C5E341918E282DB57AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: pu54Z8PzB+d9gXRkCh3ljbHEVFdG1aom/+sKVXXFJcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:6e:f1:a0:c5:e3:41:91:8e:28:2d:b5:7a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=ea309f1f614088c96d9f4ea4be877d932249dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:13:7f:6f:44:5b:04:fc:a5:68:ee:65:7c:
7f:64:b4:88:91:a3:9e:04:42:38:d0:3e:23:51:2c:
45:47:a3:9b:c4:17:52:4a:6d:57:24:c4:5a:30:b0:
2f:3c:bd:77:e6:e8:f9:31:2b:d3:a8:76:ab:f2:af:
5f:96:bf:54:19:7e:7e:12:b0:a7:ee:0b:13:a7:6b:
0f:f2:77:5d:bb:4e:d3:ba:7c:91:9e:f9:ac:eb:7f:
14:0a:f4:1d:7d:4b:a3:66:18:0a:29:2d:80:0c:0d:
ac:8c:bc:2b:8c:e1:02:a5:3b:45:55:35:7c:be:88:
87:78:b8:cb:79:05:dd:6d:42:01:22:2f:c1:74:b4:
ca:c2:d4:5a:58:2f:10:c9:37:2c:47:e8:3c:7c:4c:
2b:e5:42:20:af:dc:29:7a:b8:93:8f:ee:56:15:c4:
11:18:8c:ce:21:30:87:42:06:77:54:80:92:19:63:
c8:3f:d5:cf:52:2f:69:1a:e9:f5:b3:7d:68:f2:a1:
cd:0d:e6:46:02:32:ff:a7:19:70:35:c3:02:b7:82:
1a:59:44:e1:97:e2:a7:ec:30:44:4f:96:04:77:a8:
ad:dd:42:e3:1b:1a:41:db:3e:76:e3:eb:92:4f:7e:
0b:d0:bc:77:b4:29:70:d0:0d:88:df:1b:7d:19:f4:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:9F:1F:61:40:88:C9:6D:9F:4E:A4:BE:87:7D:93:22:49:DD:93
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c0:52:da:65:9a:5b:1f:6f:40:48:17:14:e3:94:30:7e:40:
58:8e:26:7e:48:81:2a:fc:f8:1a:6a:1a:9f:ce:b1:1a:f6:cb:
4a:06:d7:8c:bc:80:df:9e:ce:dc:cb:26:83:0b:75:62:24:57:
87:c4:3e:8c:7d:33:0f:5f:95:73:61:a8:16:aa:a9:b9:96:42:
cb:b1:8d:bd:85:ed:d2:51:ac:e2:9c:66:a8:d3:78:fc:c7:d4:
4a:ac:d0:95:d0:31:2e:fe:08:32:e9:d1:04:87:8f:3e:f3:a4:
d0:9f:d1:7f:63:c4:12:b3:a5:a3:ad:66:a9:68:d2:d6:b2:3f:
68:f6:88:2c:8a:3c:51:2e:30:fe:59:df:3a:3e:37:a5:f6:68:
98:dc:08:4e:8b:fc:2a:2a:25:c9:5c:cc:c0:64:d7:57:6d:f3:
5f:ed:c8:52:33:e1:6f:92:1e:34:6e:ea:61:b7:6d:5b:2f:6d:
11:83:71:2e:a1:41:f7:57:c9:f4:fe:49:ae:9a:75:6b:2f:ca:
06:b5:d9:40:9b:b4:f1:ad:a1:d9:06:e0:d2:b7:2f:cd:d5:20:
ff:2b:a7:a9:c8:bf:c5:05:45:f0:fd:b9:a7:78:91:b5:c8:aa:
28:dc:4c:88:27:a4:03:90:8f:3e:b3:46:f7:f1:19:79:95:ae:
75:3a:82:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:30 2025 by rpki-client