Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
File: hPIXCGwc0XI9dXsvlZcA4GntHYY.mft (raw, json)
Hash identifier: 1V2rpRxSUZKHwKjXAQAp7bBH+34aA5+vt96f5e3hOcI=
Subject key identifier: 77:81:FF:BD:F6:97:85:B8:84:EC:FB:8C:D0:92:6F:D6:62:09:95:8E
Authority key identifier: 84:F2:17:08:6C:1C:D1:72:3D:75:7B:2F:95:97:00:E0:69:ED:1D:86
Certificate issuer: /CN=84f217086c1cd1723d757b2f959700e069ed1d86
Certificate serial: 0194BBCE9F7ADCF773DD41824AE43897F359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPIXCGwc0XI9dXsvlZcA4GntHYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
Manifest number: 0722
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: hPIXCGwc0XI9dXsvlZcA4GntHYY.crl (hash: jRYbw2GTr7At9ea71TjTRlePSQfZibM7q/QUfKb+7Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:7a:dc:f7:73:dd:41:82:4a:e4:38:97:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f217086c1cd1723d757b2f959700e069ed1d86
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=7781ffbdf69785b884ecfb8cd0926fd66209958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:f6:eb:b0:c2:1a:ef:02:e3:ae:ac:46:08:
19:77:4a:36:66:b2:e5:e5:38:5e:44:0f:4f:89:82:
bc:32:1b:43:92:c7:56:9f:22:68:bc:bb:0e:6f:50:
c8:85:4e:78:fa:47:5b:08:f6:31:ee:1d:5c:07:71:
ce:01:9a:39:77:23:0e:83:53:67:70:c4:07:46:f4:
47:6c:3d:9d:c4:50:c5:62:7d:55:96:fa:0b:30:c4:
05:4c:76:c8:8a:c7:1d:2d:3d:d3:09:a9:36:76:aa:
7e:a8:b4:c1:3e:69:ab:ba:b9:2e:76:0e:2f:af:a1:
18:df:14:9e:ee:b9:38:04:3b:d5:e1:f2:58:46:68:
6b:2c:5b:01:69:db:f2:db:7f:73:21:09:f8:ea:08:
4d:1a:c5:25:9e:c7:82:70:a0:f9:21:25:d6:59:b6:
02:6f:41:9e:59:41:a6:4b:a9:93:30:4c:8e:48:03:
1a:c6:cf:03:a7:6d:8c:eb:58:64:31:08:10:7c:77:
b2:40:d2:69:57:50:5d:15:b3:4f:5c:2c:ea:0e:8b:
66:f2:2e:61:b0:c6:07:6d:09:5a:d6:51:37:21:a7:
04:f0:5c:ac:b1:8f:4c:32:2a:ec:11:9d:2f:b8:0d:
16:69:e6:b5:98:aa:0f:af:bc:f6:44:59:0c:cc:0e:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:FF:BD:F6:97:85:B8:84:EC:FB:8C:D0:92:6F:D6:62:09:95:8E
X509v3 Authority Key Identifier:
keyid:84:F2:17:08:6C:1C:D1:72:3D:75:7B:2F:95:97:00:E0:69:ED:1D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPIXCGwc0XI9dXsvlZcA4GntHYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ca958-b303-4c02-9d9b-69bd5224fec0/1/hPIXCGwc0XI9dXsvlZcA4GntHYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:4d:29:7c:d9:02:e9:07:33:b8:4a:99:e2:82:61:f4:46:
2c:56:a8:d1:ee:5d:86:ae:f1:ce:71:f5:88:e6:de:1b:32:c5:
ef:fe:5a:9f:12:4e:b2:24:98:bd:7c:43:9a:96:e1:16:52:a0:
c9:86:51:8f:47:cc:56:88:32:3c:6c:ef:70:e9:44:c7:e7:fc:
d2:77:7a:5f:75:1d:4a:c9:b2:74:b4:8f:1d:0c:1c:2b:d0:e8:
e8:b4:f2:1e:65:1e:52:40:a2:c0:8d:43:f3:e1:93:69:3b:06:
81:75:08:69:df:29:d4:64:72:20:fa:aa:8c:2c:8f:02:c6:eb:
e7:df:05:57:b6:a8:a1:d1:29:89:f3:01:05:e1:cf:c6:6d:a0:
b3:bd:be:0a:5a:e8:a9:55:d2:e7:f5:ae:b7:55:2a:5e:5d:d2:
3c:3f:a3:a0:e5:29:fe:94:05:66:3e:fc:5b:c7:ac:57:bc:b0:
33:78:b8:41:e4:55:2b:cf:37:35:e3:2e:91:19:41:94:98:3b:
18:c1:1a:f1:e1:29:17:e5:4e:0a:77:5b:1c:a2:8a:bd:e3:21:
e9:e6:61:55:49:36:9b:7e:7e:b7:5b:fd:bc:c9:bd:ee:99:64:
97:69:33:64:7a:14:a9:75:26:e1:45:3b:38:9b:fb:ea:d3:22:
a5:94:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:19 2025 by rpki-client