Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: jik7BKjLiek7eLXvgR/nPjuI3txp9cM4O6OWuaGfCQM=
Subject key identifier: 0F:E5:CA:A1:5D:86:7D:7E:EE:B7:E4:54:93:49:98:4C:3E:B0:13:B7
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 0194BC7285FF812F74D244221952EB698ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 083E
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: zgiu/aTYZePuPLL5T5LF4I+nvZXCxMLKt/gZGZZw+z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:ff:81:2f:74:d2:44:22:19:52:eb:69:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=0fe5caa15d867d7eeeb7e4549349984c3eb013b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:3b:9c:fa:7d:2c:1c:37:54:2a:78:a7:a2:
9c:7e:e7:f2:f8:9c:17:c4:18:0f:1e:d2:4e:20:73:
c0:91:0f:8c:3d:0d:ae:8a:f3:7d:19:d6:37:0d:ac:
74:2e:63:9f:01:63:50:bf:b6:3a:12:1c:c5:42:1f:
71:c0:5c:5f:d8:d9:a2:0b:c2:ea:56:98:65:2e:90:
2c:fd:93:bd:87:ad:4a:b9:6a:55:7e:d6:2d:7a:e6:
37:69:31:a7:88:af:55:e1:95:db:6f:1f:fb:96:ac:
5c:d1:97:7e:cc:9c:cb:43:73:e3:78:cc:c7:ad:1c:
97:84:df:30:7b:bc:36:ea:a9:86:a3:c1:24:a2:99:
31:e5:3f:73:63:14:fb:a9:5d:26:5d:42:1a:bd:df:
2b:72:91:f6:20:51:db:83:db:b4:73:31:bf:76:ac:
ce:4e:37:57:37:2b:95:74:dc:1f:50:f9:d5:62:0a:
ac:72:ae:3a:88:0f:e6:c2:c5:a7:8d:fd:64:a2:4a:
6b:24:51:1a:22:f4:cd:ca:ff:c8:f0:5a:87:60:31:
60:0a:af:58:aa:70:d3:49:9c:cf:b3:9e:44:93:97:
d7:ce:e7:16:d1:7a:aa:91:3e:d1:93:b6:9a:9d:36:
92:01:4d:95:04:fe:c2:43:33:05:64:65:aa:5d:8d:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:CA:A1:5D:86:7D:7E:EE:B7:E4:54:93:49:98:4C:3E:B0:13:B7
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:5b:b9:0b:14:7c:d4:35:03:87:20:75:8f:13:84:43:ec:
5c:00:b9:26:40:64:bd:da:9d:6d:3b:17:20:bb:be:1a:45:3f:
c8:f0:bb:52:f7:66:fe:0b:04:0a:7c:64:d7:2d:06:21:b5:df:
a7:6f:7c:7e:59:e7:d9:5a:08:5f:e8:14:2a:cb:48:e2:d9:fa:
fa:1c:f9:ab:7a:03:d5:13:a1:30:5d:89:c2:db:31:3d:d8:70:
45:d9:6f:1f:b1:57:e5:b6:ab:43:3d:1d:60:38:3e:f2:da:13:
3f:2b:0f:35:3b:58:80:99:07:b9:fb:87:42:64:fc:29:04:2d:
88:81:d5:30:5b:f4:e7:d4:6c:d1:01:ad:2a:4e:de:9e:fc:56:
78:22:cc:c1:ee:74:b4:75:9e:4e:7c:d5:4b:03:70:f7:df:b8:
ee:09:49:cf:d5:31:55:ce:d7:cc:4e:25:22:1e:9c:4e:ac:3f:
8d:9f:ab:8b:71:6b:7f:4e:f0:50:55:b2:d3:cd:1d:f7:fe:34:
11:3d:e0:4d:57:74:c1:24:1b:8d:ee:20:83:b1:9a:3d:0f:07:
7c:60:d2:93:7e:e1:d4:86:8b:02:f0:5c:bf:bd:3b:6a:40:5d:
6d:69:28:ea:d1:89:21:25:ac:ed:9e:76:14:0f:b1:99:60:4b:
bc:6e:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:52 2025 by rpki-client