Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: wDrDgbfRU3CyBPUFKix90fZhdOVuSJVWxBjmUvdWaz4=
Subject key identifier: 4B:08:49:A6:9B:95:13:42:96:D3:85:6D:B4:5E:80:C9:60:74:EA:23
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 0194BCE0A60CFB63837B48C114A82844A7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 75
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: SgTQAjy1mcIJqdMszAo7ZDIrD/MZ8OcXXejsQPu6SaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a6:0c:fb:63:83:7b:48:c1:14:a8:28:44:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=4b0849a69b95134296d3856db45e80c96074ea23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:ed:9e:72:6e:11:b8:15:9e:7b:ba:4d:4a:
51:62:04:7f:03:b5:b9:21:89:02:60:50:8e:d5:14:
3e:c9:d6:2a:54:b6:cb:41:5e:ab:ff:fb:d9:1e:b6:
00:71:78:40:56:7b:16:c8:67:19:3d:57:37:6e:5d:
5c:32:62:52:d5:95:ca:bc:e0:3a:25:15:fc:64:c9:
a6:b1:0a:58:7f:4b:37:96:06:c9:e6:61:9b:8d:84:
1a:d5:86:a6:03:4f:66:ca:be:40:3a:0a:e2:e3:76:
f5:f7:e8:7f:c5:08:20:8c:bc:19:11:7c:fa:ce:32:
cd:45:42:66:06:82:28:be:fb:b1:7d:0d:f1:55:60:
08:36:e2:c9:ce:e5:d5:ea:21:76:3c:dd:e0:a7:6c:
85:b7:c0:b2:23:ae:46:df:fc:6e:ed:9d:4f:f9:59:
4e:c5:12:4e:c3:c0:b0:40:62:e4:2c:93:06:ce:4a:
9c:ce:99:2c:ae:83:47:c6:7d:45:f3:26:42:13:3e:
0b:b6:e2:ed:2a:0a:68:7c:7b:99:bf:bb:05:8f:d3:
fe:0a:06:d9:d6:86:53:9f:66:e1:2e:c2:f1:b6:12:
0b:83:ff:67:62:b7:60:a9:35:bd:44:45:41:f3:e2:
27:97:9a:53:69:8d:81:eb:a7:aa:dc:c1:7e:d9:96:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:49:A6:9B:95:13:42:96:D3:85:6D:B4:5E:80:C9:60:74:EA:23
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:a6:ea:b2:b0:49:dd:02:89:6d:53:7e:bb:c3:ff:92:e7:
7a:c9:2b:0f:d5:a6:77:14:c8:f3:d6:0b:b5:e2:b1:f9:82:b4:
d4:5d:53:d3:30:38:e5:ab:d8:3e:cd:c4:dc:2c:8c:1c:d8:fb:
66:a8:79:1d:ed:fa:6c:28:14:79:f2:28:58:98:c8:6a:ec:c0:
f1:e1:94:dc:12:4c:bd:38:b4:eb:b1:65:20:88:98:c0:71:24:
9b:f6:55:ed:ab:6d:25:4b:8b:d2:b2:68:55:49:1c:a2:ab:dd:
02:91:7f:80:0b:4b:20:c0:12:17:6d:d3:47:c9:33:eb:29:e5:
97:78:a8:56:a8:cc:5f:91:2f:fc:66:99:71:3c:00:99:0c:8c:
15:b1:55:d6:67:c2:98:28:71:77:7e:62:19:75:d9:02:5b:b6:
01:b3:27:c7:03:8f:29:ea:1f:bc:5d:63:48:1a:8d:87:cf:25:
82:72:ba:a3:79:0b:f0:f9:9f:07:c2:69:bd:53:9f:32:a0:9f:
d9:6d:fd:de:19:5a:4c:34:df:3c:fc:a2:b5:9a:ee:c4:8d:5c:
9f:b2:be:1e:f0:6b:4e:bd:15:3a:50:b4:4a:b0:1d:e5:a9:88:
de:b7:75:33:0a:ab:41:58:cb:b4:f1:78:cc:ef:9f:6a:a6:38:
fe:dd:5c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:02 2025 by rpki-client