Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
File: hUxfKY2BrMVXP9WfsF3YbyCry6g.mft (raw, json)
Hash identifier: //s9ITpkgVwVwEENp3p6d0USwO5zJ1ULZHtwQPoYsEk=
Subject key identifier: 28:C7:42:BA:74:74:E6:19:57:CB:C2:34:B0:0C:08:0C:F5:C3:A5:5D
Authority key identifier: 85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
Certificate issuer: /CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Certificate serial: 0194BBCE847C2383CDC929DEA9AF6A8F68D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
Manifest number: 0EA8
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: hUxfKY2BrMVXP9WfsF3YbyCry6g.crl (hash: +oSmKN4frJY0f57NgTStpsTGmQ5lvMjFqYgAv9wrsNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:7c:23:83:cd:c9:29:de:a9:af:6a:8f:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c5f298d81acc5573fd59fb05dd86f20abcba8
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=28c742ba7474e61957cbc234b00c080cf5c3a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:b6:e0:dc:2d:d8:08:69:23:0a:12:8a:0f:
54:c2:1c:c2:96:9a:16:a9:1e:88:37:89:a2:0c:00:
83:ba:dd:21:a6:9f:e2:28:82:9e:65:69:21:3e:f7:
71:7f:dd:83:d9:66:88:24:01:b7:1c:63:0d:30:b2:
35:da:d9:42:dd:72:95:8f:6f:1f:b4:68:5d:f1:43:
9b:ec:16:20:c6:21:85:94:fa:b1:48:72:07:d7:5e:
29:d6:29:d1:58:cb:55:ea:d7:e8:14:55:c3:af:5e:
41:d3:75:c1:89:17:ed:f1:bb:23:18:5b:b0:ee:c1:
08:9a:8b:ae:cb:f1:e3:b5:5e:7d:96:4c:be:48:2f:
22:6e:b1:ba:4a:88:b7:d2:d6:f4:ef:f6:97:71:86:
17:e7:1e:d1:30:77:a9:19:e8:17:eb:a8:ac:7a:fe:
18:b5:7c:2d:a8:28:54:7d:1d:bb:c6:b4:6b:8c:a2:
35:25:89:7b:6d:42:1b:01:fa:c7:6d:7a:ae:f8:e1:
03:a1:c0:7e:90:b5:8b:e2:0e:24:72:68:42:c3:57:
f6:a4:79:0b:11:42:eb:71:46:30:e2:41:43:73:3a:
b1:02:38:8e:02:2d:90:0e:8f:d3:ea:be:29:9d:8c:
5d:32:94:1a:27:e0:df:0f:a2:24:2d:f7:ae:be:0b:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:42:BA:74:74:E6:19:57:CB:C2:34:B0:0C:08:0C:F5:C3:A5:5D
X509v3 Authority Key Identifier:
keyid:85:4C:5F:29:8D:81:AC:C5:57:3F:D5:9F:B0:5D:D8:6F:20:AB:CB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUxfKY2BrMVXP9WfsF3YbyCry6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1295d0-3911-4a18-a8d2-752d59a042c2/1/hUxfKY2BrMVXP9WfsF3YbyCry6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a6:93:40:fa:c0:75:ef:11:d7:92:54:52:d1:f5:d9:e0:c6:
bc:c2:0f:c8:27:f2:31:a4:0f:7e:6b:1e:d7:ef:43:ca:d5:77:
c0:be:9c:3c:a0:09:c6:17:62:48:3a:50:c3:6d:5f:40:d0:8c:
d8:b0:92:0f:c4:b7:28:77:44:77:de:6e:76:48:5b:a9:05:29:
a5:52:58:1a:50:a2:05:15:30:b5:cd:1a:24:96:7a:71:65:83:
c5:d4:f8:d4:b2:75:49:62:7e:2a:13:41:d6:1b:6c:53:54:30:
25:ce:fe:10:91:c4:fa:1c:e0:5e:f4:8f:90:46:6a:09:f8:4c:
4a:25:54:e1:d6:74:26:16:9e:1d:dd:03:cd:f3:d0:93:b8:b2:
e2:41:82:b7:72:4a:30:40:a0:c7:c1:f2:93:36:6a:d9:2e:b1:
b4:53:64:20:4b:05:3f:14:de:d6:d9:97:2d:79:0f:35:4f:ea:
bd:88:3d:91:09:28:d9:48:8c:36:d3:9f:2c:b9:6a:ac:7c:43:
28:a5:88:72:f8:63:f0:bb:04:39:93:57:74:85:c9:2f:5c:9e:
bd:74:6e:fc:6f:a5:02:37:7a:f8:32:0b:9a:7d:18:60:e0:07:
64:25:46:42:b5:dc:ee:a4:18:e9:b2:c1:48:8b:fc:d2:58:5e:
96:95:45:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:25 2025 by rpki-client