Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
File: hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft (raw, json)
Hash identifier: 57h48yPVMInw8qwM8buq9kq1dESST+33lcXjdwa1e1Y=
Subject key identifier: 1F:5C:9A:D9:B9:4A:E4:37:F3:81:35:B2:29:08:F1:0D:B7:4B:FD:02
Authority key identifier: 86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
Certificate issuer: /CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Certificate serial: 0194BBCDEFD4FC8C0E2DB97EDC9D8E8606EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl (hash: gdgKv9b4dwbx/BP67keIeoZMAfpzQYGU3/eAWwp3IZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:d4:fc:8c:0e:2d:b9:7e:dc:9d:8e:86:06:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865af18a8d80274c0ac2f501b16d69a454e08d5e
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=1f5c9ad9b94ae437f38135b22908f10db74bfd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:4a:4d:b3:a3:41:3a:48:c8:73:30:50:a5:
be:77:b5:4b:7a:e6:19:09:9b:09:2b:35:8e:fc:10:
87:c3:c3:3f:d6:bf:94:7e:ff:46:4c:a1:75:5a:5a:
8b:29:1a:44:cf:7b:0b:7b:5c:99:90:0f:91:2e:ce:
20:21:52:46:94:28:d2:72:bf:19:23:ed:5d:d5:88:
14:c5:cf:58:62:8b:57:9b:63:a3:57:87:10:96:3b:
43:8f:e2:6c:b0:0f:9b:6c:38:22:cf:8e:c1:0f:a2:
f0:de:e1:16:64:08:dc:05:21:41:ac:bf:73:81:41:
d2:e3:f2:53:40:a5:68:5d:72:00:91:67:85:21:da:
06:46:3e:45:dc:77:53:02:0b:c8:a2:ce:dd:97:6c:
85:ba:1d:a4:a8:c6:9c:1c:6e:be:db:4b:3e:56:3a:
89:72:8f:fc:85:84:5c:24:3a:bb:f9:ee:d1:69:50:
d8:cf:e2:0a:df:c3:1d:a6:87:50:4f:24:46:e4:1c:
9d:d1:19:51:5a:7b:00:57:e4:f7:b1:b2:13:96:ed:
5b:20:89:9b:8a:e6:3c:37:6b:8d:f5:3d:a7:26:c3:
32:51:af:4a:53:8d:78:1f:04:30:93:a9:9b:00:90:
61:ff:19:75:5c:c4:1e:35:71:e4:cb:b3:51:2c:f5:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5C:9A:D9:B9:4A:E4:37:F3:81:35:B2:29:08:F1:0D:B7:4B:FD:02
X509v3 Authority Key Identifier:
keyid:86:5A:F1:8A:8D:80:27:4C:0A:C2:F5:01:B1:6D:69:A4:54:E0:8D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlrxio2AJ0wKwvUBsW1ppFTgjV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c9c800-aefb-44bc-b712-1eea4ea43a2f/1/hlrxio2AJ0wKwvUBsW1ppFTgjV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5b:df:82:b2:52:26:2b:68:4f:6c:c8:a1:eb:d3:b5:b3:89:
3c:5f:9f:d9:b9:75:9d:cf:dc:cb:45:fc:17:dc:b9:0b:28:a7:
0f:39:2a:4f:98:3d:07:b9:e7:be:5f:e1:01:a8:26:28:23:c8:
24:bc:5e:b3:79:b7:ec:bb:fb:c4:9d:b6:eb:d5:a9:54:59:29:
fe:11:80:fc:f2:0f:cf:13:e7:f9:3b:65:94:1b:4f:7f:eb:4e:
6b:bd:6a:c2:af:61:89:e2:b1:b7:d3:4d:5e:12:ab:11:3d:ea:
c2:6b:c1:1f:eb:d6:35:11:af:c6:7c:f8:bc:34:6c:ab:71:f0:
b6:34:1a:c9:8a:0d:90:8b:66:71:cc:54:1b:29:37:f2:89:01:
ae:23:8e:b3:85:f1:be:4f:52:07:07:6d:7c:a8:39:bd:f8:21:
99:52:06:69:dd:1d:04:02:71:5a:7c:5b:23:19:59:6f:a2:5c:
f0:dd:ae:db:80:41:69:2d:ba:11:0a:78:16:02:1b:b3:51:89:
d9:b9:8c:9a:5e:f0:dd:46:53:74:a5:9f:e4:ea:63:b6:28:82:
15:0b:d3:bd:25:1e:7f:2b:3b:bf:7d:ea:ab:d2:6e:f8:03:f5:
35:3b:c8:a0:62:82:d5:99:64:32:40:1a:19:c1:ae:67:c3:d7:
34:69:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:29 2025 by rpki-client