Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: iAcer4+wxjNHQCaRNRuuL6EAJMZ9ICLQO3ZWXyHFCKk=
Subject key identifier: 63:CE:9B:15:04:87:76:07:0A:8F:CE:E9:AD:B4:2C:4F:88:39:D5:5D
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 0194BD4E38A3C3B102C714E9C86F2488CB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 0AD3
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: VvmpliZiN7AvSJzJCV8xuHQlHb762mpWW6cUHL0fNKc=)
2: Z51tk-_RA8tS0qKG579XKDThD1k.roa (hash: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:38:a3:c3:b1:02:c7:14:e9:c8:6f:24:88:cb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=63ce9b15048776070a8fcee9adb42c4f8839d55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:d6:71:43:bc:01:4b:56:ff:1b:15:38:f3:
13:b3:39:89:6c:0c:3d:70:f0:92:f4:56:d1:da:35:
57:49:f7:ea:72:8f:a6:54:b7:69:4b:98:6b:a9:f6:
9d:dc:cb:69:f1:39:f6:f5:1c:45:9a:5f:8d:3e:e9:
1d:c2:a3:1c:b5:c7:cb:42:7d:88:07:ab:c4:42:68:
36:6f:e7:7d:c6:c5:8b:45:78:a7:dd:8e:f0:b9:31:
52:8b:48:76:29:9b:02:28:ee:e2:7f:fd:3b:95:a1:
a9:37:62:03:44:4b:10:7b:c3:55:99:d2:cb:f6:fc:
fa:a2:92:bf:f3:a6:09:76:cb:8a:72:fb:3a:eb:d9:
44:23:75:37:95:66:88:7f:2b:ce:81:3a:e5:13:92:
5a:e0:56:8e:86:26:5c:ae:d9:fc:05:48:a2:9e:a2:
4a:d6:70:b1:0d:6e:91:37:3f:38:7a:07:e9:f5:ca:
42:36:db:ad:53:fd:00:50:33:28:e2:32:71:42:d1:
71:0b:92:78:88:09:62:db:e9:bb:43:b5:ad:1a:18:
21:82:4a:64:8f:85:ff:7c:68:4f:d5:7e:2e:dd:a3:
1f:6a:41:15:50:19:9b:00:84:99:60:20:a6:7e:46:
d6:67:07:b9:1c:15:45:44:07:5d:d7:ec:4d:31:63:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:9B:15:04:87:76:07:0A:8F:CE:E9:AD:B4:2C:4F:88:39:D5:5D
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a0:b2:4a:06:81:24:b4:55:f1:66:ae:eb:a0:09:bc:b5:81:
86:ac:db:dd:25:bc:fb:5c:72:81:d3:8a:4e:61:5f:b8:d8:ae:
5a:f0:79:16:66:3f:88:c4:96:99:b1:0a:60:3e:53:64:58:15:
f1:cd:ab:9a:43:e6:d6:2d:b0:f9:ae:55:80:94:6f:4d:83:7d:
58:63:59:c3:b2:22:1f:b4:26:a5:ab:29:7f:3e:c6:58:2a:00:
68:64:88:25:02:2a:8f:52:51:83:0b:66:cd:da:b9:50:52:9e:
5d:a8:42:cb:ac:5c:e5:0a:7f:3b:71:d5:3f:d1:d1:9a:39:72:
f5:51:dc:76:4e:d4:d6:4a:00:e6:66:66:4e:78:16:a7:b9:a5:
8c:20:68:f0:42:5a:0e:5d:51:84:bb:4c:fe:4b:de:27:0b:5b:
a4:43:36:7d:c4:42:af:ec:7d:c9:a9:82:f8:24:ba:b1:3b:26:
7c:35:72:c8:b1:7b:c3:ea:75:ae:fc:5f:93:9d:99:6f:34:af:
7c:6c:1b:0b:30:e2:0e:55:73:d3:8b:55:ae:0e:a3:4b:91:ce:
b7:ec:72:71:f9:9d:16:01:66:7e:b8:51:f8:3a:a9:46:26:c3:
c5:55:68:e1:9d:f1:82:62:7f:34:50:25:a1:e2:d8:16:4c:9c:
81:3b:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:21 2025 by rpki-client