Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: Z0DPf47rJ8hOlz6Wo4L37SOu2TiHuH4H2wtfszQU5t0=
Subject key identifier: C7:21:23:5C:A7:28:FF:AA:D5:1A:1F:15:BE:20:8C:D1:58:BA:81:1A
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 0194BD17769D307799B7451B30CBEA725199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 01C1
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: hHCFd3+GTF0KMUIfP1rMR+R7JGRfc4TeNAOkPKDyWvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:76:9d:30:77:99:b7:45:1b:30:cb:ea:72:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=c721235ca728ffaad51a1f15be208cd158ba811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:95:4c:7f:1c:59:b4:e1:1c:af:98:00:ea:
8d:b0:73:7f:a7:4f:fc:cc:cd:90:22:c7:de:c7:83:
d5:b1:7e:03:45:e6:dd:6c:ef:aa:72:68:66:e9:2e:
f8:2f:7a:2a:a1:ec:88:05:bf:c7:c6:8e:70:75:1b:
4d:2d:86:8b:0e:c9:80:14:a2:57:cd:86:28:df:03:
d1:fc:16:47:d1:dc:92:2f:86:02:00:c8:62:db:4e:
32:ba:4a:72:e4:ef:41:a3:95:50:aa:0f:d6:5b:5a:
70:d6:e9:91:51:1b:e1:40:e7:b1:46:b1:fa:d7:1c:
34:b0:a0:1f:fb:28:f7:80:e5:03:43:2b:ff:cf:4d:
a9:41:9c:5e:63:cc:0f:cf:c0:7e:d3:eb:17:f4:9d:
3b:76:95:f6:70:82:7c:16:a1:bb:d2:dc:34:e3:c6:
ca:30:7d:63:4f:50:40:5b:e5:4a:b8:5e:64:5a:5e:
09:66:d3:0a:67:31:be:9c:29:ee:bf:25:69:ad:70:
34:b7:b6:7d:52:39:19:01:a5:1e:94:6c:37:5c:da:
9c:be:2e:27:4d:9a:db:05:e4:63:76:12:78:5d:92:
9a:86:d8:23:87:a3:1c:d5:78:8d:4a:4d:30:ba:f7:
88:38:97:1d:26:79:e4:6c:07:32:d4:98:a3:b0:73:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:21:23:5C:A7:28:FF:AA:D5:1A:1F:15:BE:20:8C:D1:58:BA:81:1A
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:66:c2:7b:58:0b:20:60:6c:2c:ac:2c:20:59:d9:67:82:
ee:64:61:18:d2:32:32:23:27:14:20:f7:7e:b8:d7:2f:b9:9e:
08:bc:bc:77:4f:8d:7d:56:e7:d4:89:9e:94:96:fc:81:c6:80:
76:30:69:4f:1a:3a:75:24:d6:34:78:55:58:7e:58:b5:2f:39:
10:38:e4:9d:ff:39:ff:e9:ae:a9:dc:7a:e8:7c:e9:28:20:b6:
1a:cc:0f:f0:bf:e5:63:94:bd:ba:c3:e7:9b:49:75:33:50:8a:
5d:66:52:6b:3c:52:a5:e2:8f:12:15:41:b8:5d:99:27:d2:68:
08:69:3d:31:0a:f3:a6:5f:5d:56:5d:e5:cd:21:ae:0b:da:f7:
b6:95:0b:f1:80:09:3c:83:cc:7b:6f:ec:19:9d:4c:30:b3:ac:
e7:ee:31:12:5e:d7:96:dc:d6:1e:b9:14:a0:52:ae:0a:4b:96:
7e:ba:12:90:30:a7:e8:59:89:5f:75:9b:b8:35:43:c1:e2:b6:
f4:46:ff:46:ed:10:80:38:e8:72:3a:81:e8:ce:61:b0:f1:05:
ba:f4:c7:0d:1b:94:59:e5:59:70:87:b5:a1:cd:81:91:a1:58:
76:54:4c:36:4c:8a:1a:6a:05:3d:0b:f0:dd:58:aa:10:ce:ab:
7e:cc:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:00 2025 by rpki-client