Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
File: HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft (raw, json)
Hash identifier: /up4xTJRrH8t41C7BSKPKpX6NBnDG8ksWBxRpWR1k/o=
Subject key identifier: B0:EB:AF:60:9C:05:59:59:01:DA:99:D0:8F:B5:5E:E4:BE:EE:5B:F1
Authority key identifier: 1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
Certificate issuer: /CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Certificate serial: 0194BCA9905B96908D6D14641DF812DEA9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
Manifest number: 046A
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl (hash: HOvMyuQ446WVRF096Dd9H6T0liilNqMK22jl9fy0piU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:5b:96:90:8d:6d:14:64:1d:f8:12:de:a9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a99501e7681fa3c67e1fd3d735128a22c6317
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=b0ebaf609c05595901da99d08fb55ee4beee5bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:53:14:96:24:a9:f3:66:6d:19:7b:8d:ae:
fd:0f:5d:8e:59:94:25:97:79:5d:ee:88:0a:a2:b4:
57:32:27:f1:a6:b3:4f:ad:b4:54:40:e4:06:3e:d4:
ce:0e:d1:dc:fb:e1:70:ba:20:0b:93:8c:3d:e5:ab:
be:b8:34:fd:d0:6a:fd:9c:c8:93:03:55:e9:3d:25:
e5:00:34:10:8f:e0:b6:62:9a:ec:17:48:90:e4:fd:
65:fe:b6:f1:02:36:4d:45:20:3a:62:08:f2:f5:6a:
2d:a5:1d:68:cd:d4:71:71:cd:61:54:96:fb:3b:38:
a6:f1:d9:f2:7e:5a:0b:62:af:33:61:e1:2e:f5:6e:
a1:a7:d9:f3:ad:21:55:b9:ac:5e:cd:78:74:26:9e:
be:b3:3e:19:71:ac:3c:5f:93:01:b4:a1:7e:9c:12:
20:12:e9:5f:98:0c:88:9e:da:e4:0e:57:ef:45:53:
5c:7c:66:08:18:19:91:6c:c5:e9:6c:20:98:a5:ba:
95:de:75:aa:b3:33:d4:0a:20:7d:b8:d5:ae:89:33:
bf:58:ae:2a:c4:96:2b:f1:43:97:83:f2:2c:53:54:
f5:83:e2:02:1f:99:17:b7:c1:5d:0f:f7:ae:b1:7f:
ed:27:e3:e9:a9:11:1b:ad:a0:c7:0f:5e:d2:b2:2e:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EB:AF:60:9C:05:59:59:01:DA:99:D0:8F:B5:5E:E4:BE:EE:5B:F1
X509v3 Authority Key Identifier:
keyid:1C:0A:99:50:1E:76:81:FA:3C:67:E1:FD:3D:73:51:28:A2:2C:63:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAqZUB52gfo8Z-H9PXNRKKIsYxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e9c0b1-166a-4bea-bb53-13cf918f6cbc/1/HAqZUB52gfo8Z-H9PXNRKKIsYxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:70:34:7d:00:28:15:f2:71:a8:5c:2b:d5:09:89:52:17:7b:
a2:63:19:27:3f:6b:51:1e:17:19:f7:41:98:dc:f0:a0:98:7b:
5a:8f:41:a8:a1:59:dc:48:d5:68:97:80:35:fd:b3:c2:77:b1:
fb:c3:48:2e:1b:5a:f0:3f:32:28:18:c1:ea:87:11:fa:86:85:
cc:40:96:8d:e0:a4:e3:76:94:70:79:90:d2:d6:1a:03:49:a0:
f1:c7:e0:b2:a9:35:d7:aa:80:de:1b:43:10:f1:45:fc:7a:85:
99:db:f0:55:43:7f:50:8d:ab:ec:0f:40:1c:35:a9:0a:35:0e:
dd:84:94:3e:42:64:22:89:f6:78:83:d5:ec:e9:43:81:15:1f:
25:d2:0b:08:65:62:1a:70:74:00:60:1b:be:26:a7:66:a4:66:
7a:d3:61:22:dd:34:a5:5d:61:90:85:4f:90:fe:e5:55:f6:7b:
7b:53:32:c5:f1:65:14:39:c2:81:36:01:64:d2:e1:5b:de:52:
e6:77:80:17:48:ca:d9:7b:be:30:31:c7:38:c2:04:0d:fe:36:
93:d5:76:42:ec:5c:02:8a:7a:02:96:0f:e2:94:5f:96:0f:52:
b6:a1:92:2a:1b:0a:2f:84:f9:80:8c:b5:65:61:84:17:cb:fa:
b8:d7:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:16 2025 by rpki-client