Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8b0b93-867e-4062-a65b-66775b0ab7d1/1/hvH06JS38tbeGWF30OzA3s4oaZY.mft
File: hvH06JS38tbeGWF30OzA3s4oaZY.mft (raw, json)
Hash identifier: lR8Sd1AGJUQt3rtBJvttL/8A1vF77vVstBrCTiE1VRA=
Subject key identifier: 88:61:D8:62:42:49:48:E8:46:8F:29:A5:62:A3:B0:EC:DB:A7:E9:B9
Authority key identifier: 86:F1:F4:E8:94:B7:F2:D6:DE:19:61:77:D0:EC:C0:DE:CE:28:69:96
Certificate issuer: /CN=86f1f4e894b7f2d6de196177d0ecc0dece286996
Certificate serial: 0194BBCE2CABFDC1921866CE573C1313B2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvH06JS38tbeGWF30OzA3s4oaZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8b0b93-867e-4062-a65b-66775b0ab7d1/1/hvH06JS38tbeGWF30OzA3s4oaZY.mft
Manifest number: 0771
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: hvH06JS38tbeGWF30OzA3s4oaZY.crl (hash: FrMXuemm7mgIFdCTzDErWvCmVWJGdFDpJdzFYfZiXB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2c:ab:fd:c1:92:18:66:ce:57:3c:13:13:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f1f4e894b7f2d6de196177d0ecc0dece286996
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=8861d862424948e8468f29a562a3b0ecdba7e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:1f:08:01:f2:2a:6a:20:13:2e:e7:39:3f:
9d:95:e6:a5:8e:96:a8:e5:80:1f:6f:b9:48:1d:fa:
82:0d:3d:9c:4b:29:35:22:dc:60:65:f9:bf:da:9b:
76:75:b5:1a:a9:48:42:05:a4:dc:39:c3:2c:e3:a6:
53:4b:f5:b5:ef:81:25:12:dc:4d:dc:8c:15:e7:f1:
b2:92:df:fa:6c:30:99:2c:1b:4d:61:4a:04:6c:c5:
a3:8c:25:8f:53:a9:97:d9:15:16:b8:9f:7a:9f:53:
c4:78:b4:1d:a1:9a:c4:3a:27:5c:5f:6a:84:db:10:
1f:4c:01:3b:53:ce:66:d7:39:65:00:88:6d:7c:e8:
bf:ee:8e:f7:b2:e3:ac:26:98:54:55:06:e7:41:7d:
bd:c3:af:27:95:13:33:ca:e6:1e:75:8f:3b:ae:ec:
c3:87:a7:ae:01:4d:ef:44:bc:03:91:4f:72:8b:0f:
0e:c2:7b:3b:8b:60:8d:3c:0a:5e:09:be:81:ff:8e:
e8:29:27:bf:25:a2:5f:84:fc:bb:86:5f:dc:ca:bd:
c8:10:c4:eb:b5:64:fc:24:89:78:28:df:e4:ac:93:
d9:68:eb:f2:9a:d3:f4:c8:9b:a6:a7:cd:85:8e:d4:
e0:4c:2b:57:13:f5:ed:b3:da:1c:f8:36:93:00:51:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:D8:62:42:49:48:E8:46:8F:29:A5:62:A3:B0:EC:DB:A7:E9:B9
X509v3 Authority Key Identifier:
keyid:86:F1:F4:E8:94:B7:F2:D6:DE:19:61:77:D0:EC:C0:DE:CE:28:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvH06JS38tbeGWF30OzA3s4oaZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8b0b93-867e-4062-a65b-66775b0ab7d1/1/hvH06JS38tbeGWF30OzA3s4oaZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8b0b93-867e-4062-a65b-66775b0ab7d1/1/hvH06JS38tbeGWF30OzA3s4oaZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:45:40:ad:87:65:be:a6:70:54:94:23:65:18:8f:6a:4e:c0:
4c:89:08:51:f7:83:67:89:99:22:34:44:fb:e8:5d:6e:9a:81:
f2:95:7a:62:18:2c:25:37:81:ab:8e:3f:27:82:bf:50:30:10:
23:88:57:67:83:f0:a6:20:ba:d5:78:4c:a1:50:00:e4:13:df:
0e:14:6b:7b:8a:3f:5c:bb:11:98:fc:31:55:a9:5b:45:23:93:
2a:31:8c:52:9f:4d:18:54:65:c2:ed:8e:44:a9:d1:8a:10:da:
d2:fa:25:91:ec:b0:ed:2b:22:d8:7f:4c:c2:f6:49:74:b3:a5:
e4:02:02:43:6f:ab:59:04:25:1a:7a:5d:c8:df:b4:0f:9c:c9:
83:4f:41:a4:b1:35:23:49:be:4b:c3:44:e6:39:09:51:bf:e6:
48:f4:a1:a8:1c:20:d5:27:2d:bd:a6:f6:4c:99:0c:e6:84:7e:
55:17:c1:7e:07:bc:e5:bc:a0:8a:33:b9:ce:8f:41:7e:ef:df:
2c:6d:57:13:9c:49:73:f5:19:d5:35:cb:f7:34:a2:9e:0e:32:
b5:24:b4:3a:e4:8c:d7:c6:6c:09:25:1b:c5:be:6f:26:80:04:
ae:f9:75:82:06:c3:c5:93:57:6c:d8:01:13:ee:fe:92:e8:2a:
eb:35:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:22 2025 by rpki-client