Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
File: HRAqymzxNRE4UpTnfb4nN2jAoEs.mft (raw, json)
Hash identifier: ShmR4cR4m1XVozkDJVFVYjnkc/TCOKcBNxgp6XKJb58=
Subject key identifier: A5:F7:6B:48:55:A5:AE:33:FA:22:DE:D7:B7:7B:E7:FF:59:84:45:C7
Authority key identifier: 1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
Certificate issuer: /CN=1d102aca6cf13511385294e77dbe273768c0a04b
Certificate serial: 0194BBCEB589C3CB850AF1DC3AD7E570DB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
Manifest number: 0907
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: HRAqymzxNRE4UpTnfb4nN2jAoEs.crl (hash: wuZ9I6VbfdUMhBwOjd/bEoloaD1GaW4XC2V2eU9hyfk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b5:89:c3:cb:85:0a:f1:dc:3a:d7:e5:70:db:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d102aca6cf13511385294e77dbe273768c0a04b
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=a5f76b4855a5ae33fa22ded7b77be7ff598445c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:ed:ba:72:7d:19:db:cc:c4:84:97:4c:1f:
00:f2:d0:7c:01:6c:3f:f0:73:30:d7:1b:59:cf:08:
d3:23:58:d9:51:11:d7:da:0c:8e:6d:fb:18:8b:0d:
16:09:20:69:4a:75:ab:ef:7b:e2:fe:f7:58:61:60:
6c:76:7d:05:5f:e0:1b:0d:19:28:59:94:6c:9c:60:
61:6a:6b:ea:8a:3a:8c:ce:38:7f:14:79:6c:8b:6a:
2c:8c:e2:e5:13:48:46:94:15:89:1e:83:a3:6d:55:
2d:de:f4:c6:f0:2c:a0:e7:c7:6f:06:be:cc:0f:6c:
ef:96:ec:da:2d:24:30:f9:df:45:36:b5:f7:8b:ee:
78:f2:3c:91:a0:2e:94:05:7e:05:d6:5f:ef:13:8b:
a7:e2:61:7b:f8:1d:72:ef:a9:a1:00:f7:45:c9:46:
03:08:34:07:a2:22:ad:82:db:72:61:53:27:1d:fa:
20:f4:5a:51:0e:b6:fc:48:fc:31:c8:de:42:9e:93:
b9:65:e9:0d:d3:4d:c6:5d:25:d1:c9:2c:a7:49:3b:
21:c6:0d:db:3f:be:43:00:37:05:30:0a:fb:04:88:
f2:54:82:31:83:26:cf:bb:b9:81:16:4e:1e:1d:bf:
c8:34:6a:d8:69:c1:a8:3c:28:94:51:f1:7b:55:59:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:6B:48:55:A5:AE:33:FA:22:DE:D7:B7:7B:E7:FF:59:84:45:C7
X509v3 Authority Key Identifier:
keyid:1D:10:2A:CA:6C:F1:35:11:38:52:94:E7:7D:BE:27:37:68:C0:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRAqymzxNRE4UpTnfb4nN2jAoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61b236-6f80-4422-84e5-e8666218a5c8/1/HRAqymzxNRE4UpTnfb4nN2jAoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ff:ce:73:e7:b7:66:19:b9:64:25:4b:da:bf:fc:03:33:ff:
fd:b3:8f:4d:37:6d:d6:b4:b8:84:91:38:ea:79:33:3e:2f:0c:
f3:e9:a1:e7:86:51:95:2a:5d:14:3c:6a:b3:eb:e3:64:5c:06:
17:a9:f2:80:74:d1:c0:fa:31:63:19:c4:b8:88:77:ac:c3:b2:
eb:35:d2:ad:b6:0d:af:7d:e9:bb:aa:14:b2:ba:52:fe:de:49:
4a:5c:4e:f7:16:96:ed:20:58:46:0b:82:f8:3d:ac:86:f9:af:
70:00:3e:5c:0d:e5:10:43:25:12:e0:04:8f:24:71:66:b2:1a:
1f:1d:5c:56:bd:73:66:64:f9:e2:ac:37:fa:e4:2f:38:b8:ad:
0c:5c:a1:e4:61:e6:f2:81:0f:36:19:4d:6d:db:7b:fb:de:4b:
a1:67:29:7b:ea:fc:52:c2:67:2e:e8:9a:d4:b9:1d:3d:81:af:
13:a4:a4:40:b4:3f:e3:68:6e:b9:f3:e6:a6:93:e2:59:af:fc:
f8:fa:2b:0d:a1:a3:97:fa:f7:58:5f:d8:0f:a4:18:65:bb:68:
0d:62:87:39:38:f5:29:ad:9e:1d:58:c8:a6:67:2c:90:ec:cb:
3b:de:d5:76:cc:e3:ca:b2:3f:fb:4c:d5:df:25:2c:ff:3e:b4:
5d:57:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client