Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
File: ihz-evMMHHJdI25KL8Kv1wn65kQ.mft (raw, json)
Hash identifier: +ct6Qyl2vlGGhHHspOUssVnPJ6SJij/eDydW+IRyRls=
Subject key identifier: 50:2B:64:11:E6:C0:4C:B4:90:5B:25:B4:3F:A4:41:12:DC:7F:A9:1B
Authority key identifier: 8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
Certificate issuer: /CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Certificate serial: 0194BBCE8D2967E4B0610167471541AD95C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
Manifest number: 07E8
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: ihz-evMMHHJdI25KL8Kv1wn65kQ.crl (hash: NvF2qbVYWHLgItXDC6AyrKiCWgp/lMqpeeuoA1MW7nk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8d:29:67:e4:b0:61:01:67:47:15:41:ad:95:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1cfe7af30c1c725d236e4a2fc2afd709fae644
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=502b6411e6c04cb4905b25b43fa44112dc7fa91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:c7:53:74:a7:23:2d:ff:8a:d8:e1:07:b2:
2b:ee:82:67:90:75:6f:72:23:d2:43:24:7a:f9:f9:
0b:6a:ac:05:69:fe:2c:b9:86:99:5d:03:17:38:c7:
59:6d:0a:39:7e:c2:10:d3:46:76:c0:8f:f8:46:17:
04:bd:bf:62:1b:16:53:15:84:18:69:69:90:07:2d:
e2:bb:d0:bf:9d:4c:98:f5:c7:e9:96:a2:f0:e1:c1:
26:20:6f:15:44:8b:0e:16:8e:be:ac:f0:63:d9:f6:
53:b7:b0:77:c3:b4:26:02:db:1e:61:20:06:8c:b2:
8c:93:9f:61:f8:5f:b0:6b:aa:8a:9f:ea:d9:d2:f2:
6e:9d:4d:79:21:00:8a:a5:0f:00:e6:fe:97:55:db:
98:04:c5:8f:02:9c:b8:08:73:d8:c5:c4:72:14:9c:
68:bb:b0:68:74:20:03:4a:bc:4d:3c:d4:c9:d3:e1:
b7:2f:81:b2:bb:03:db:fc:86:94:9c:58:c4:1d:11:
51:e6:a5:16:3b:93:8c:f3:79:5f:cf:fc:55:30:88:
19:b4:f3:da:ca:f7:5d:d0:61:d6:93:e2:ec:dc:47:
e2:88:e8:05:80:49:37:16:57:85:94:fe:16:9e:14:
2a:4a:14:1d:4f:f3:71:ab:a0:6f:dc:22:ab:d6:81:
02:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:64:11:E6:C0:4C:B4:90:5B:25:B4:3F:A4:41:12:DC:7F:A9:1B
X509v3 Authority Key Identifier:
keyid:8A:1C:FE:7A:F3:0C:1C:72:5D:23:6E:4A:2F:C2:AF:D7:09:FA:E6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihz-evMMHHJdI25KL8Kv1wn65kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64741b-70ad-44aa-b136-b8a3d1650396/1/ihz-evMMHHJdI25KL8Kv1wn65kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:ea:36:13:1c:8d:71:f8:cc:95:32:65:90:3b:ff:2e:97:
31:2f:8b:fb:77:8f:c4:45:6b:86:cf:8f:13:30:b9:30:9f:f7:
7c:c9:e4:87:66:de:1b:fc:a7:fe:3c:1e:69:d8:d6:eb:1a:f9:
9c:c5:5e:01:fc:9c:f0:0e:21:78:4e:6f:3e:d2:01:d5:73:03:
65:96:90:02:cd:12:1f:08:c0:92:d3:d7:9e:d0:97:75:b3:7b:
28:10:c5:ca:0b:ed:7d:02:3e:92:87:cb:12:43:a8:cb:41:36:
92:95:30:ee:07:9d:88:a7:a3:e2:fe:85:ea:ac:20:95:bc:c9:
74:20:3c:ef:d1:30:5e:f1:90:9c:45:e3:f8:c0:96:44:d8:c1:
0a:d2:80:45:4c:58:17:66:81:b4:46:b5:0d:a3:74:5a:f8:a8:
c0:8b:9f:1c:a3:14:1d:b0:02:6f:20:d0:b3:0f:fb:b6:8a:d8:
a2:5f:98:cd:42:90:4a:22:63:17:a7:f1:7b:53:61:0d:a2:40:
be:e4:73:68:2a:8c:45:27:4c:33:6e:58:71:bb:63:4b:3c:72:
7c:e0:a8:3a:9b:02:66:66:76:60:47:89:61:41:9f:72:78:2c:
64:b2:9c:11:94:85:59:65:e8:d8:5f:58:7d:32:18:35:00:90:
d7:cd:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:26:44 2025 by rpki-client