Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: whSgJwn2J2Trnv47KLRLX2lNUC8cop+mfHENddDyX1I=
Subject key identifier: 4D:8C:2D:6D:DC:EF:E6:11:D3:09:35:C0:C1:70:47:FD:36:4E:88:E4
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 0194BBCED198B65EF5A7803652124275FC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0A2F
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: 94PLRVXQr5YEz17LHxtgsXQslXjEX+zasDzaxIScs/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d1:98:b6:5e:f5:a7:80:36:52:12:42:75:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=4d8c2d6ddcefe611d30935c0c17047fd364e88e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:1e:52:0a:e8:e6:86:ff:09:63:ba:b6:80:
f1:fc:0a:6e:16:ab:64:c0:11:5c:41:f4:10:3c:cd:
3f:49:9b:11:1f:c5:9a:91:10:08:d1:0d:4e:3b:d5:
6f:4f:01:a0:63:31:18:e4:fa:ab:90:c2:3f:9a:54:
4e:d9:d6:8f:5e:b1:1b:1a:d1:49:5d:ad:2c:3f:42:
d0:e7:3f:7c:08:48:91:2f:21:25:dd:55:59:e3:4c:
ae:4f:69:a9:ab:d9:12:d0:d0:7b:4f:6a:6a:9f:4c:
c5:20:f3:10:41:95:0e:ff:da:d6:ad:96:f1:ef:77:
ae:ec:20:52:0a:c2:70:78:e4:49:da:3b:68:e3:92:
99:a2:44:fa:17:8a:28:6c:67:7e:6b:b8:f8:51:c1:
66:77:e7:61:1c:aa:8a:9e:3a:c7:fa:a1:86:76:39:
c9:ee:9c:45:a6:94:90:de:58:51:1e:14:88:06:67:
03:3e:1e:d8:65:36:fd:2f:96:4c:a3:73:f9:1d:7c:
c1:84:3e:65:15:09:c2:1f:c2:42:27:2b:2c:e4:09:
60:c6:71:a7:5d:f5:cf:d0:a9:3f:95:9a:d4:a5:a7:
3d:b4:2f:4a:09:22:88:c4:04:8e:06:55:15:76:08:
0a:0e:3c:8d:5a:ff:d4:4b:ce:d7:f7:6e:2a:b1:45:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8C:2D:6D:DC:EF:E6:11:D3:09:35:C0:C1:70:47:FD:36:4E:88:E4
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5a:9d:d0:ae:cc:49:f7:f7:b5:ec:d5:2b:87:a4:9c:9c:59:
cb:67:c3:e1:d6:bc:50:c6:f1:df:85:ae:56:8b:16:c1:22:90:
e6:af:60:45:4b:f4:18:92:41:3d:fa:26:af:01:8f:91:f9:39:
69:58:0d:49:6a:fc:4a:ba:29:5d:a4:6a:b8:af:f8:f6:6a:76:
bb:af:8e:c9:0d:1d:4f:e8:58:f2:b7:0d:7c:0e:77:4e:cc:30:
3b:45:23:d8:f0:dc:44:ee:5c:94:df:6c:6a:2e:06:cf:c8:6e:
b0:52:0f:a5:0c:89:3d:d6:1f:1b:60:c1:77:3f:1e:d8:2d:32:
29:f8:4a:cf:bf:88:da:f6:3d:7f:b5:20:15:38:4a:b7:35:67:
71:ba:f3:bb:95:b9:27:b8:cb:42:b4:65:80:a6:95:06:93:a9:
87:42:66:13:8d:6f:cd:02:4c:bd:5c:36:45:83:3b:b2:af:01:
0d:f2:40:05:90:48:11:15:c9:bf:fe:db:31:50:ad:ea:57:12:
8b:53:db:a5:3f:6d:1f:db:1a:9f:14:31:5e:44:49:15:c1:38:
b1:91:53:05:f5:53:75:cd:10:e7:49:74:94:90:0d:b8:20:56:
3e:9c:48:1c:cd:64:d7:37:9c:69:f3:f1:36:c8:73:bf:12:57:
15:c4:dd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client