Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
File: HAaGYxPWaK_oeYb65f95QfkoBps.mft (raw, json)
Hash identifier: V5UBvna7R5P5jglo9E/b4H2a5HUOGItbUmKUeNLc8PI=
Subject key identifier: 37:4F:37:7E:10:E2:82:6F:A7:FC:3F:F0:44:2C:B8:35:3C:91:41:48
Authority key identifier: 1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
Certificate issuer: /CN=1c06866313d668afe87986fae5ff7941f928069b
Certificate serial: 0194BC3BC3D991A44FE43881C7213C2AC712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: HAaGYxPWaK_oeYb65f95QfkoBps.crl (hash: JmPpFfhIRAygwEzxbcs4AjqPUDtZ3KurJZxKJVK7RcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:d9:91:a4:4f:e4:38:81:c7:21:3c:2a:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06866313d668afe87986fae5ff7941f928069b
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=374f377e10e2826fa7fc3ff0442cb8353c914148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:18:43:c9:d2:27:d6:6b:30:84:2b:fa:db:
af:12:45:c3:39:18:b1:70:eb:bc:1a:75:ef:38:d6:
e4:c3:e3:12:96:ee:0c:66:e4:86:14:3f:8c:be:b9:
c7:f8:82:f7:cb:05:33:f8:b6:b6:6b:77:8c:58:59:
d9:d1:8e:ea:73:00:d0:a6:4f:74:13:a3:1a:52:83:
b5:97:19:92:e5:e4:12:75:42:ab:4e:d1:27:95:78:
df:49:03:04:11:1c:4c:69:78:73:7a:ee:6a:2f:9d:
5c:10:a9:4b:29:66:d4:b6:05:01:da:38:63:93:2c:
8b:d2:03:a2:4d:fc:ab:05:5d:e7:b7:0a:1d:e3:30:
ce:c0:35:3f:83:db:ef:83:f2:8f:07:18:26:91:f7:
a3:51:49:fe:b8:d5:6a:4d:a7:9d:7f:46:f2:86:1c:
34:b4:52:d5:22:db:b3:52:fa:1a:6e:53:18:29:40:
4a:91:1a:c4:2e:31:4d:77:d2:be:64:52:c7:78:77:
80:c4:b7:75:37:8e:fe:9d:90:e2:5b:60:23:2d:97:
d3:ff:4e:c3:f9:8d:16:e1:59:5d:85:33:c0:d9:99:
0d:1b:f0:04:94:be:d9:dd:ac:cd:0a:c3:5d:a8:2e:
58:02:e4:84:5f:29:cc:57:fd:1c:80:0a:b7:01:5a:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4F:37:7E:10:E2:82:6F:A7:FC:3F:F0:44:2C:B8:35:3C:91:41:48
X509v3 Authority Key Identifier:
keyid:1C:06:86:63:13:D6:68:AF:E8:79:86:FA:E5:FF:79:41:F9:28:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaGYxPWaK_oeYb65f95QfkoBps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1ceddd-98d1-47fd-b30c-6ab98d36dac6/1/HAaGYxPWaK_oeYb65f95QfkoBps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:55:b5:6d:84:5b:e7:66:c8:65:8b:29:13:bc:9e:1b:41:97:
13:f8:20:a9:a2:ab:fd:30:e2:ca:a2:37:af:10:0e:3d:a9:6c:
3f:a1:d1:9d:93:aa:49:9a:69:5a:9c:ed:13:7e:c4:46:84:1b:
78:fc:b8:96:df:90:bc:5e:7e:5e:51:ae:94:40:1c:47:f4:79:
8b:2d:db:65:ac:3d:16:9b:bb:16:f2:ff:0a:6f:a2:d2:97:31:
71:a7:d7:e9:04:ac:c2:87:0d:11:cd:8a:3d:ac:07:de:ae:29:
20:b5:5f:cc:4e:26:3a:93:23:8b:79:f0:95:91:7c:f1:e9:2f:
fb:db:1e:a5:71:87:97:e1:7c:86:e0:94:c2:d4:12:ef:8f:68:
8f:80:e9:df:84:b7:06:f0:b2:bb:77:e9:70:29:fe:e8:35:0e:
af:21:c2:36:c7:a1:a6:bb:5e:26:3b:97:89:ba:29:e7:05:e8:
2f:6b:ec:04:37:ac:f8:44:f7:5d:77:29:6a:fd:15:16:1a:de:
2c:17:77:25:3f:0e:34:e9:0b:67:b2:b2:23:b0:bf:cc:ac:3d:
40:41:14:dc:1a:dd:e0:62:c2:c6:48:b2:63:d3:01:5a:3c:1e:
49:84:a5:20:9a:d2:0f:a2:10:d7:eb:e8:15:0a:0f:16:b1:52:
9f:3d:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:58:32 2025 by rpki-client