Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
File: HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft (raw, json)
Hash identifier: TK7LIsQ7iiO3G+YBgEHNXvmVr/I9Gbhcr94kdU70WnM=
Subject key identifier: 70:4D:26:05:3F:BE:FE:71:F8:72:74:50:83:8E:AD:70:92:81:8A:39
Authority key identifier: 1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
Certificate issuer: /CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Certificate serial: 0194BBCDF1A650E809AD7BA25A09F4C7FBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
Manifest number: 0226
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl (hash: Dd5Jklth7ta6ZjEJkvDkEG7MIoorv2F3U84WVblEJs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f1:a6:50:e8:09:ad:7b:a2:5a:09:f4:c7:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1b41c9273d5e7605da002cd6c40bd72e5af41a
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=704d26053fbefe71f8727450838ead7092818a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:da:be:c7:25:84:5d:56:ee:fd:1c:f6:0e:
87:a0:80:c6:c2:c2:4e:a6:8e:e8:ea:c5:2c:cc:c4:
fd:3d:fd:76:a8:27:4b:3f:80:93:97:36:42:95:74:
b0:86:24:7f:4a:9b:18:59:86:8b:e8:52:c4:0d:1f:
a4:51:38:ab:2c:14:79:4b:d9:f0:87:34:81:24:aa:
98:94:ac:63:87:55:2f:7b:17:aa:cd:c7:72:b2:71:
e3:d6:ee:05:94:99:7f:33:ca:56:cd:8c:23:20:cb:
7b:81:9c:07:f2:2a:5f:c1:34:34:f1:66:3f:17:38:
76:a1:bb:da:b9:7d:0d:74:e4:ae:dd:bf:b2:bb:1f:
46:90:48:39:c2:75:0f:4f:a5:37:9b:84:57:39:4f:
dc:52:b3:1a:1c:95:f8:db:55:04:58:2d:97:86:49:
5c:57:92:5b:12:27:5c:c1:a2:08:b7:9b:88:d1:fa:
61:29:eb:d9:4d:e2:f0:5b:a2:d2:0e:cf:3f:02:2e:
c6:5a:2b:89:2e:25:6d:47:d6:7b:7d:a5:bb:45:38:
5e:59:21:b0:4b:bd:42:f9:25:03:8a:0a:5f:05:8e:
14:c3:6e:eb:c1:98:39:3e:5b:1a:20:95:e4:b9:b7:
b0:9a:59:4a:86:49:66:d1:d8:af:15:8f:32:f5:b1:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4D:26:05:3F:BE:FE:71:F8:72:74:50:83:8E:AD:70:92:81:8A:39
X509v3 Authority Key Identifier:
keyid:1F:1B:41:C9:27:3D:5E:76:05:DA:00:2C:D6:C4:0B:D7:2E:5A:F4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxtBySc9XnYF2gAs1sQL1y5a9Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bc2729-3a30-4b98-8c48-581a7f90235a/1/HxtBySc9XnYF2gAs1sQL1y5a9Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:48:95:18:6f:3b:ed:90:0b:b3:e5:06:52:21:e1:a8:72:
5a:27:b1:7f:ec:59:a1:d2:5b:73:c6:c8:cb:bc:58:19:7a:0d:
20:16:1a:3e:eb:f3:5d:e4:a1:a6:c8:85:b6:1e:09:4b:46:b4:
84:98:54:db:95:ce:f6:48:d2:75:8e:d0:50:ca:c6:b4:0b:58:
c4:39:b6:7b:0d:c2:b2:01:d8:8a:71:3a:e3:c7:bc:50:1e:5d:
92:59:b3:ac:43:8f:6a:c1:cf:f9:9e:66:84:fb:49:ff:99:09:
7a:65:8a:27:84:7e:51:f1:e6:77:94:03:3e:99:a7:88:e9:63:
09:31:ed:30:64:d6:a3:57:ce:bf:32:e9:8c:ac:8b:23:45:f1:
64:53:9e:46:cd:ef:a0:75:9a:76:8f:15:97:b6:91:ae:9d:5c:
fc:6b:91:d0:50:4d:9f:c3:cb:f1:3e:e4:51:d8:b6:45:2f:21:
a1:03:aa:b3:5c:ed:08:0c:02:a0:00:b9:e9:ce:15:ac:b5:f7:
b6:36:03:cc:b2:c3:1a:62:41:03:7b:a1:97:6a:ac:dd:5c:8f:
27:b5:d6:fb:de:cc:69:14:16:00:b0:16:eb:cf:13:a7:fe:77:
0e:c6:19:06:f8:45:3b:19:09:6b:0d:f0:ad:09:6e:6c:ee:50:
27:01:6f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:14 2025 by rpki-client