Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/028975-78bc-45c5-9915-28170cf939c6/1/hPOAUNM24lcAb2jCTNDWRND1oTE.mft
File: hPOAUNM24lcAb2jCTNDWRND1oTE.mft (raw, json)
Hash identifier: KUaQisTkAW0jrl3DtBZykSN7GrJEAP0LrVC9abYfyFM=
Subject key identifier: 51:77:FD:82:93:EF:86:56:F9:34:C6:C4:D6:85:2A:84:BA:74:81:04
Authority key identifier: 84:F3:80:50:D3:36:E2:57:00:6F:68:C2:4C:D0:D6:44:D0:F5:A1:31
Certificate issuer: /CN=84f38050d336e257006f68c24cd0d644d0f5a131
Certificate serial: 0194BD176A09A81513F095D4DE8A1C6E984E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPOAUNM24lcAb2jCTNDWRND1oTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/028975-78bc-45c5-9915-28170cf939c6/1/hPOAUNM24lcAb2jCTNDWRND1oTE.mft
Manifest number: 0243
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: hPOAUNM24lcAb2jCTNDWRND1oTE.crl (hash: B4B7TVodDTTsi0r1QryzC2/xRJfk9L2WA7IXiX/+Gtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6a:09:a8:15:13:f0:95:d4:de:8a:1c:6e:98:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f38050d336e257006f68c24cd0d644d0f5a131
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=5177fd8293ef8656f934c6c4d6852a84ba748104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:45:62:04:01:6c:4e:c5:e6:17:17:92:38:
24:91:35:65:5e:29:f2:af:3a:1b:11:d0:e8:46:e7:
cf:11:f0:f5:08:10:1d:5f:0c:f4:3d:1c:8f:8d:e5:
d6:53:d2:1e:e1:30:e1:c0:e7:4b:15:5b:9c:5d:a7:
70:9d:40:d8:96:42:db:39:97:bc:ec:8c:7c:1b:dc:
d9:86:e9:83:ab:ba:eb:33:ff:78:8a:11:d4:14:68:
65:75:4c:07:19:d7:38:a1:cd:83:9b:97:e5:db:d5:
c8:1f:d9:f3:9f:20:11:27:12:0b:4d:eb:90:fe:d6:
ed:3c:42:ac:d8:8a:3a:df:d4:e9:79:11:0d:88:6b:
5f:15:dc:df:f2:0a:da:74:c2:40:2f:0b:d5:2b:97:
e2:8c:a7:a5:78:7f:fa:bf:89:7f:98:d5:2c:d9:72:
30:f0:cf:84:ee:10:80:bb:9a:83:a8:e8:2a:c4:b2:
4c:5f:bf:24:0c:e5:cf:9b:9c:10:f9:73:92:9f:2c:
37:d6:66:3c:0b:f2:9b:35:68:dc:09:01:aa:a3:a7:
8f:ac:10:12:8d:d7:c7:c3:94:2f:d1:43:26:9f:98:
00:d3:c8:54:e2:a9:fb:43:e8:ba:97:2f:0d:b6:3d:
71:24:cd:80:04:95:58:46:ed:ff:8c:f4:61:17:04:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:77:FD:82:93:EF:86:56:F9:34:C6:C4:D6:85:2A:84:BA:74:81:04
X509v3 Authority Key Identifier:
keyid:84:F3:80:50:D3:36:E2:57:00:6F:68:C2:4C:D0:D6:44:D0:F5:A1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPOAUNM24lcAb2jCTNDWRND1oTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/028975-78bc-45c5-9915-28170cf939c6/1/hPOAUNM24lcAb2jCTNDWRND1oTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/028975-78bc-45c5-9915-28170cf939c6/1/hPOAUNM24lcAb2jCTNDWRND1oTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:db:70:9f:8b:b1:d0:f1:8f:ea:fa:37:4f:0c:b7:fa:54:d0:
85:27:1b:17:a1:0c:62:f4:a4:d3:68:6d:f8:8a:7d:e9:6b:8a:
50:e0:93:bc:a3:75:47:2b:38:9a:cd:3f:1f:59:a7:3c:62:46:
2d:19:48:76:68:c5:44:0f:9e:95:77:62:45:b5:fe:47:67:a1:
b4:d7:8f:77:1d:d9:e9:de:fa:f2:d7:99:0c:23:20:2f:60:64:
42:92:b9:77:89:2d:bc:b9:e1:84:9a:84:b2:b5:56:73:3e:08:
b9:b8:10:07:aa:15:c5:ec:67:69:8f:8e:f2:57:62:d1:7e:40:
f7:35:2f:27:66:43:d5:3d:cd:12:21:f3:94:db:c9:1e:69:ca:
5b:27:22:c7:14:9e:41:89:f2:a3:03:e9:b2:75:b4:7f:f4:f0:
b0:bb:09:ea:f0:9f:4d:80:9a:f7:7e:e7:1d:7c:1a:ce:d6:a9:
17:90:4e:7f:a5:a3:32:8d:7b:88:89:35:f5:5c:3a:5d:f9:08:
c0:9d:83:b8:87:3f:95:80:49:84:ca:5f:5b:10:2e:bd:03:15:
f7:8c:a8:ce:c0:7d:f1:92:8f:44:94:8c:7e:d6:e6:54:de:c8:
65:9d:f7:f0:39:40:08:e7:08:e7:e2:5c:78:f0:52:c1:4a:e0:
b0:51:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:05 2025 by rpki-client