Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
File: hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft (raw, json)
Hash identifier: O/noXvJ+TMuQVpzvrbJrylo3aPi59biDKjF0FHw6PXs=
Subject key identifier: 4E:D0:77:40:40:48:E4:E9:36:7F:98:DC:41:D7:6B:DB:05:4A:39:0C
Authority key identifier: 84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
Certificate issuer: /CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Certificate serial: 0194BBCE413D3706D8B770792AAFD90D14FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
Manifest number: 070F
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl (hash: BAEEuaAk+dlRNdOmeOfA1a2P9CeKLDbXTpJeQrmZ9Ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:3d:37:06:d8:b7:70:79:2a:af:d9:0d:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842b18f8d1db1f947621b2d8f786603e2b1bd50c
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=4ed077404048e4e9367f98dc41d76bdb054a390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:64:89:05:57:a8:f3:be:f7:47:29:d7:46:
2e:36:c1:c8:0d:2b:73:d8:f0:d6:34:d9:8e:73:a4:
94:3c:73:b9:c8:1f:ac:d1:65:45:de:ae:63:b7:88:
f0:e9:18:a9:bd:1e:3e:5c:16:d4:28:f8:be:25:62:
73:ad:8f:f4:6b:d4:b9:e9:ef:9a:a4:ee:00:de:00:
87:11:21:d4:25:d2:d6:c3:a7:46:57:35:0d:c4:b7:
39:49:98:5d:40:0f:bf:2d:ad:1b:59:21:cf:3a:b0:
6c:93:80:dc:9b:36:3d:11:9b:36:f8:39:08:4e:a6:
bc:c6:d5:8a:54:d5:4f:7f:62:fe:7b:c3:de:36:ec:
b7:02:f1:da:ae:e5:0a:75:9b:b2:39:ea:d2:7f:b3:
7a:46:18:9c:d1:d5:d7:e1:f7:d7:b1:87:ff:a0:a9:
c0:26:ac:c2:c5:85:78:ba:19:40:05:64:54:16:16:
70:62:ca:bb:10:7e:54:5e:94:0e:29:ee:42:1c:1c:
a3:0e:02:6b:c1:ff:c6:73:97:d2:3a:1e:a9:a9:83:
d9:0e:c9:68:7e:ae:b1:91:68:78:55:b8:b4:84:21:
d1:50:5c:90:70:35:b8:c7:0d:0d:fd:4f:70:8f:84:
c2:9b:bd:f1:78:ea:70:79:69:4f:9b:25:54:06:1f:
0b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:77:40:40:48:E4:E9:36:7F:98:DC:41:D7:6B:DB:05:4A:39:0C
X509v3 Authority Key Identifier:
keyid:84:2B:18:F8:D1:DB:1F:94:76:21:B2:D8:F7:86:60:3E:2B:1B:D5:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCsY-NHbH5R2IbLY94ZgPisb1Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3c8e78-dfa0-4616-b228-0b970b96c90b/1/hCsY-NHbH5R2IbLY94ZgPisb1Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c9:cb:75:f2:5e:8e:02:90:b1:53:30:6c:62:12:cc:2b:66:
c9:3c:f3:ea:90:7b:9d:1d:2c:3d:ea:75:39:12:e5:24:6b:2d:
e5:62:0d:e0:dd:b7:93:16:c6:6d:69:fd:9f:03:2d:87:95:8e:
04:ae:62:16:8e:a1:b5:46:0f:00:86:5b:8c:7e:ea:4e:66:0e:
1b:a3:2b:2b:3a:a9:70:15:0c:61:59:72:7c:69:58:6c:96:d5:
99:cc:2f:19:59:dc:25:3a:ce:79:9f:18:93:74:b1:06:ef:4e:
dd:9c:5a:55:49:68:67:1e:02:e9:02:25:e2:87:e5:43:e0:cb:
f6:a8:28:ed:94:c7:29:dd:12:0f:13:6c:6f:e3:e7:3c:fc:f6:
74:4c:41:02:da:d6:d0:a7:73:1a:6b:bb:e9:35:80:f7:bd:98:
45:bb:82:2b:ea:56:12:e5:68:75:1d:45:07:47:b6:e4:d3:b2:
0c:21:1e:8e:1a:c9:ef:7e:00:7e:3c:bf:1e:28:fc:6f:74:20:
46:c1:6e:08:20:cd:de:c2:35:84:0c:01:cf:77:9f:c8:10:a0:
ab:68:4d:91:39:81:ac:55:1a:ce:e3:06:62:ba:a6:ca:a0:f9:
ad:dd:be:87:04:b8:46:b5:4d:28:82:6e:1f:81:26:18:9f:64:
80:1d:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:51 2025 by rpki-client