Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File: hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier: JuBbkW+Md0+5P2Qzmcy59fYXLW+V40MmP5oLU5/5AvI=
Subject key identifier: F1:A8:24:B9:2C:86:0E:2D:12:4A:C0:FD:B6:5F:A5:1C:69:62:58:DA
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 0194BBCF00EE9DA3805BCC6620743BA5E4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number: 0742
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: /G0jrCFQCZZlhx4+N5oZSzhKXO2HAM+FTma6N0aWJxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:ee:9d:a3:80:5b:cc:66:20:74:3b:a5:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=f1a824b92c860e2d124ac0fdb65fa51c696258da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:07:af:89:d3:34:52:09:3b:39:e7:8e:5e:
33:9e:f3:9f:63:2d:20:24:b4:02:04:1d:5b:3d:f9:
e9:21:89:94:83:37:3b:ef:a0:46:5b:a0:da:2b:be:
cf:19:ab:20:6c:66:9d:a4:9c:46:6d:70:14:de:e6:
d8:fc:77:90:29:4f:96:c7:2f:3b:a0:7c:56:cc:ee:
8b:ef:fc:a4:7c:4f:8d:17:8b:4c:62:a9:ef:20:0b:
00:73:73:a3:9c:25:6c:8c:2b:9e:60:d9:14:c1:23:
fb:14:ea:a0:43:41:9b:cd:4a:11:db:aa:f3:50:f5:
d7:8c:2c:4d:8c:05:0f:76:da:74:59:5a:2c:b8:18:
35:43:42:26:4f:99:1a:6b:8c:3f:64:24:f6:8b:a0:
b6:e3:75:bb:66:3a:1e:2b:d3:81:ae:b8:9c:96:e8:
0f:a0:78:10:dd:1e:d4:0e:85:9a:3f:27:c9:e5:d0:
53:f2:fb:b1:d2:6a:b8:77:46:e3:af:b1:7c:00:d8:
13:a7:a0:5c:60:b3:79:b9:38:99:17:89:a4:7d:d8:
b1:e4:7f:64:09:30:dc:39:45:ad:d1:2d:a2:2b:9d:
04:d0:24:23:5f:bf:cc:8d:b6:62:99:e1:1e:bb:4c:
56:58:e4:99:cd:91:86:f4:51:a2:85:04:89:a8:a2:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A8:24:B9:2C:86:0E:2D:12:4A:C0:FD:B6:5F:A5:1C:69:62:58:DA
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:03:6c:d1:de:b4:0a:2e:e0:ea:2b:63:b5:50:c1:ab:b7:5c:
19:ba:bf:84:97:3f:fb:ea:28:73:dd:65:3f:a1:3e:66:6c:d3:
ae:42:22:73:76:88:b2:81:10:43:34:ed:f3:54:2d:68:74:80:
06:a8:71:63:a1:85:d7:21:5b:1b:54:2d:24:fc:99:3e:24:39:
f3:35:92:f3:81:10:2a:b3:4e:b2:68:5d:49:6a:fd:cf:2f:cb:
b2:9c:3f:8c:6f:38:cc:49:08:3a:58:c1:f6:63:e3:d0:3b:d9:
b6:bf:11:4c:a7:71:6b:d3:e2:b4:5f:74:64:77:cd:8d:09:9b:
83:93:ba:53:ec:cb:a6:3e:72:7b:71:6e:96:f1:9a:6d:26:38:
6e:1c:85:5a:13:c7:d4:f9:8a:4b:9d:bc:43:5d:e7:9d:3b:1d:
51:51:64:b6:cf:89:57:22:83:16:f0:4a:24:c1:47:f3:aa:73:
cb:42:1b:7d:4a:b2:93:b5:94:27:c1:d1:3a:bf:18:41:37:c6:
bf:81:97:c0:8c:9f:a7:29:d0:3a:97:a3:a7:7e:fc:38:30:c4:
90:35:ad:8c:5f:d9:00:c1:5f:13:05:94:ea:46:18:9d:cd:b1:
77:d8:73:82:58:0b:73:1b:c6:99:b4:5f:8c:bc:61:9c:5b:fe:
2f:0c:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:20:06 2025 by rpki-client