Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
File: HGce_RKBEUKXWJ51k6fgUFTZJVs.mft (raw, json)
Hash identifier: gA/5PrEZYiEw8A7wCK7ipIrnFjIjHrZN6hHXU5cr3dk=
Subject key identifier: 1F:8E:F6:51:AC:A9:CB:9C:14:F2:FE:EF:C4:2A:67:83:3D:24:B8:A0
Authority key identifier: 1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
Certificate issuer: /CN=1c671efd1281114297589e7593a7e05054d9255b
Certificate serial: 0194BD17D902C55C7CE16C19B74209E7DA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: HGce_RKBEUKXWJ51k6fgUFTZJVs.crl (hash: 0+9ZU4uIx3ADX1APTHbFBuZDqZGxTH5JzU3NHzxEle0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d9:02:c5:5c:7c:e1:6c:19:b7:42:09:e7:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c671efd1281114297589e7593a7e05054d9255b
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=1f8ef651aca9cb9c14f2feefc42a67833d24b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:71:0a:2e:34:04:96:87:39:eb:4a:6c:cb:
f5:b2:1c:36:65:40:a7:2a:14:d0:07:db:21:d0:85:
ad:9b:6b:fa:84:da:55:8d:6c:f8:09:cd:08:b3:19:
15:56:fd:c5:7d:cd:16:96:6c:3f:2d:17:cd:2e:83:
44:ad:69:35:23:ee:4a:ec:cf:ce:0e:63:e1:0d:0b:
1d:d2:71:a0:c5:61:1a:aa:61:c4:0b:c4:5f:16:d5:
fa:0f:a4:f9:5e:96:8c:ac:e1:7b:dc:b4:f5:4a:cf:
13:ac:39:f5:e7:40:88:6f:51:1b:34:97:f1:00:50:
aa:fd:69:aa:3a:d8:ee:b6:62:cc:fd:57:5f:78:17:
d6:84:17:6c:35:40:bd:20:ba:8d:02:98:d3:d8:2a:
d8:6f:cd:b8:66:44:a7:69:05:65:91:f0:4e:73:75:
66:8f:d6:ee:5d:6f:88:ff:21:b1:01:c2:c5:a6:e9:
4b:ea:0a:c7:8a:f9:52:cf:9f:e6:c4:a8:59:0a:86:
f0:a0:f9:7f:4c:72:6f:ae:a5:e5:0f:cd:ee:30:09:
a0:c4:39:b1:5f:0c:91:4d:b8:63:e8:4d:98:9c:fc:
2d:a5:3d:af:3c:e4:c1:5c:54:52:48:f6:85:6a:3a:
24:4c:19:b1:af:1c:61:74:ba:b6:07:57:22:e8:47:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8E:F6:51:AC:A9:CB:9C:14:F2:FE:EF:C4:2A:67:83:3D:24:B8:A0
X509v3 Authority Key Identifier:
keyid:1C:67:1E:FD:12:81:11:42:97:58:9E:75:93:A7:E0:50:54:D9:25:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGce_RKBEUKXWJ51k6fgUFTZJVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fdb003-fae3-4a69-9c91-e3d2f64fddd4/1/HGce_RKBEUKXWJ51k6fgUFTZJVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a2:dd:5f:95:72:57:8a:ea:3e:8a:02:f4:16:05:f5:14:4c:
0d:4d:02:4e:a7:fd:fd:10:b2:d8:a5:48:38:5a:c4:f1:75:36:
6f:6b:92:6a:22:a6:3d:20:1a:11:be:8d:29:73:a1:e5:8f:6c:
53:62:b8:8e:ae:37:1a:28:f7:af:33:6c:4a:93:93:cc:b1:c6:
74:0e:83:eb:14:51:9f:16:68:09:83:38:33:c3:f5:4b:6d:49:
94:59:b3:29:54:91:1e:9d:7d:32:2f:73:6f:55:68:01:29:13:
f9:67:73:90:1c:b0:93:b6:a5:7b:53:10:ef:4c:69:3b:31:e2:
a4:9a:ed:28:b6:9d:d7:4a:06:78:79:7c:bb:c7:a1:54:f4:78:
06:78:22:a7:8b:7b:b1:7c:cb:bb:4a:c4:28:b0:57:93:b4:b4:
24:27:8b:3e:5b:a4:46:22:94:41:a5:32:a9:e9:e4:67:12:8a:
3d:4a:43:6c:1a:26:1a:32:9b:67:38:1a:78:0b:06:e2:2c:00:
f1:39:34:1c:9d:7a:9e:1c:ac:60:de:22:06:1a:e2:d4:c9:5e:
06:2e:87:3d:84:81:a3:cf:6c:7a:7d:05:1a:fd:4d:00:18:4f:
1f:c6:fc:03:30:b4:0e:f3:00:70:99:57:a9:95:1d:8a:9e:25:
55:71:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:57 2025 by rpki-client