Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
File: Hekyc87VkolMnTVRSLsfrMEPcqI.mft (raw, json)
Hash identifier: AOIlxv2fh3WrIFE6n58EBzy2BUuiw1mT+SWJLJKhejg=
Subject key identifier: 82:87:73:89:C1:22:52:7C:7E:CB:8C:B5:D4:B6:C3:3F:6D:60:6D:50
Authority key identifier: 1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2
Certificate issuer: /CN=1de93273ced592894c9d355148bb1facc10f72a2
Certificate serial: 0194BBCDC47F38D21BAF521F50D8A2FF4F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
Manifest number: 100C
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: Hekyc87VkolMnTVRSLsfrMEPcqI.crl (hash: o1KL2gq6T6wP2YI9LvwxEJyA3qhL5Kc/DXlZmg4a0eU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c4:7f:38:d2:1b:af:52:1f:50:d8:a2:ff:4f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de93273ced592894c9d355148bb1facc10f72a2
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=82877389c122527c7ecb8cb5d4b6c33f6d606d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:87:e8:d2:0e:e9:79:d2:50:bf:07:76:e2:
b4:bb:d3:f8:7f:19:5f:10:07:fe:5c:fe:34:1a:b7:
1d:5d:f1:09:51:76:ea:83:b2:74:10:ac:7f:94:27:
b6:5c:90:97:91:f9:61:ed:8d:66:3e:d3:35:1e:6f:
74:9b:b8:48:64:2e:ed:4a:b3:6e:53:25:fb:cd:ea:
92:9b:53:b4:a8:0a:5f:c3:98:de:9e:1c:58:27:cf:
a7:a6:05:68:c6:30:6d:e6:c8:fc:53:f1:f2:80:54:
56:43:5f:12:05:30:61:6f:ac:60:d4:c5:f0:97:01:
82:2d:ed:70:ef:a4:ac:14:13:e5:3e:e0:48:60:c4:
01:91:79:fc:83:cf:4a:b0:23:a3:6f:39:45:69:b4:
c9:fc:23:7e:82:16:78:46:e6:4a:1f:7a:3e:0f:dc:
eb:62:f3:8c:84:59:fd:da:07:6c:97:1c:ae:bb:6a:
33:fd:fd:83:83:a6:f1:a1:51:a3:28:a5:63:cd:d0:
3f:cc:f7:3e:bb:83:79:3f:91:36:dd:d6:f3:ee:78:
cd:aa:41:08:69:82:39:d8:0c:b2:f4:8b:72:20:fd:
d7:c0:bd:2c:a3:11:20:7c:2c:10:d4:cd:9e:66:03:
52:c1:79:3b:7a:b4:76:dd:71:8f:b2:5f:52:c6:59:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:73:89:C1:22:52:7C:7E:CB:8C:B5:D4:B6:C3:3F:6D:60:6D:50
X509v3 Authority Key Identifier:
keyid:1D:E9:32:73:CE:D5:92:89:4C:9D:35:51:48:BB:1F:AC:C1:0F:72:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hekyc87VkolMnTVRSLsfrMEPcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3fd53b-e153-4c3a-8058-18ad589cecd0/1/Hekyc87VkolMnTVRSLsfrMEPcqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c9:50:c8:26:35:b4:5d:70:4e:d9:1d:94:59:7b:69:3a:eb:
52:0b:29:10:00:82:cb:b7:c9:5e:86:dd:70:73:0e:c8:33:fd:
d9:e5:6a:8c:d6:3f:19:1a:2d:b6:45:6b:98:de:a9:9b:e9:61:
51:6c:3b:c9:13:5e:f7:80:63:78:67:98:76:a8:cf:d3:ea:6a:
b5:7c:b8:a9:8a:44:30:50:fd:bd:c5:a9:39:61:12:d7:a9:ed:
b7:4c:fe:37:29:db:2a:47:6c:c8:cf:50:68:51:34:4d:7f:76:
b5:48:f4:cc:5d:d8:01:9f:61:f0:0f:fb:f7:aa:2d:e4:ff:bf:
99:72:6a:f6:30:fc:1a:83:6c:1e:5a:08:17:d0:63:74:5b:3c:
d2:61:3f:fa:be:bc:e5:cd:af:3b:8e:bb:b6:43:a1:67:c7:d8:
e6:32:c1:bb:a3:cf:8e:a8:a1:a2:8b:4e:4a:d9:5f:71:8d:1f:
9f:3e:c0:03:98:ce:d3:93:ef:ce:f1:03:df:be:f5:3a:46:25:
fe:87:6c:b1:78:ba:46:6a:f7:44:f5:22:17:ad:ac:d4:09:7b:
30:fa:d8:1f:d4:b1:bf:4d:09:85:46:c5:18:b9:15:00:79:40:
78:b1:47:27:5f:98:9b:98:60:39:1a:bd:66:cb:d3:05:9b:1f:
5f:92:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:06 2025 by rpki-client