Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: Q1QQ17oZ2f2O0n1K3WcXyG3LdsesBOAbEzPO/nID8q8=
Subject key identifier: 03:E8:90:E8:C1:4E:9E:B0:0F:F1:65:10:AA:0E:98:05:FA:5E:EF:C8
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 0194BCA97BCC480E6EF50E06E4C45A2A9A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 08D4
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: R+d4ApKdklWhzc3EbP3bs23qlAPAi2Iuo7Ok18u1wV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:cc:48:0e:6e:f5:0e:06:e4:c4:5a:2a:9a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=03e890e8c14e9eb00ff16510aa0e9805fa5eefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:27:e3:f8:8e:59:7a:1b:b8:d8:0c:c9:28:
c6:08:73:62:cc:f0:c9:39:e4:ca:ce:4c:d8:6c:d2:
59:cb:59:b9:bc:a4:f8:d0:9b:ef:7e:2d:f2:25:df:
69:9f:ae:da:03:1d:1a:61:a7:3a:40:6a:91:5d:0f:
b9:ff:8e:03:59:82:1d:f3:88:0a:dd:6b:cc:da:7c:
b4:68:44:cd:87:6c:19:1a:05:69:2d:1e:b0:31:16:
a1:c3:01:11:25:98:de:8d:bd:97:86:bd:6a:fa:f6:
c7:d8:92:70:e2:f0:23:7a:4b:c0:eb:0d:37:b6:ff:
04:34:6d:90:38:98:6a:d1:93:9e:55:c1:d4:ef:c8:
8a:d8:2a:93:b6:b5:7e:37:9f:c3:2d:e0:10:13:28:
9c:ab:91:7b:e3:2d:d5:98:59:a7:c7:97:08:60:14:
c7:54:c8:c7:86:0a:bd:74:f8:58:7f:5c:c1:3c:e7:
d6:68:fe:31:52:cf:30:a4:fb:4a:74:62:1d:af:d8:
2e:59:1e:9b:9d:d0:a0:05:76:ab:89:7a:64:d2:f8:
5b:4a:ac:8c:14:52:38:0d:3b:e7:0c:b5:82:63:42:
88:db:80:10:d1:78:80:1f:08:5d:43:33:b3:c6:ef:
a1:ed:1e:de:e5:68:14:b6:be:2c:5f:c1:85:bb:70:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E8:90:E8:C1:4E:9E:B0:0F:F1:65:10:AA:0E:98:05:FA:5E:EF:C8
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e3:b6:a5:14:70:06:be:5d:c9:5f:88:f7:0a:3a:ea:bf:57:
56:7a:3e:36:b7:b7:58:72:aa:01:da:1b:a7:8c:d7:96:f1:7f:
b9:53:2f:00:b4:26:09:6b:e9:58:74:57:1d:39:44:28:24:d4:
7e:92:8c:d3:d3:b7:bf:d4:15:f2:02:ba:54:db:8d:c3:d8:03:
6d:29:c7:99:ae:3d:2b:7b:b8:09:e1:6e:e7:1a:db:68:11:20:
b7:ee:d0:ee:ef:35:b4:a6:4b:b5:49:95:64:3c:7b:14:22:0e:
0a:40:b4:94:27:d4:27:0a:e8:b2:a6:2f:19:66:d0:25:e2:ce:
7e:71:b0:29:01:98:16:88:64:14:cd:76:2e:51:67:ea:cc:cd:
8b:31:9a:9a:51:a6:b5:b1:62:5e:b9:83:06:04:33:80:fa:39:
35:7c:91:56:ec:dc:8e:1e:49:d1:60:19:cd:af:a0:13:03:4a:
3f:54:8e:de:08:a0:0c:ee:d8:7c:2e:a9:c8:6b:a6:85:44:d6:
01:c4:b7:fa:26:da:f3:4c:20:7b:b2:16:e8:59:ea:72:be:ce:
3d:ab:b2:c8:58:84:55:e1:d2:4b:4a:2b:2b:38:44:63:12:cd:
7a:75:06:91:6e:0f:3a:55:c7:ed:74:15:f9:6c:c0:43:18:a1:
a1:a5:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client