Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
File: hyDPLDSRRvabop66wMiCKIEcovE.mft (raw, json)
Hash identifier: i1dQKqw+a/1PcGKmlQC/AexFKS1/eCH5q8SSBSBBaKY=
Subject key identifier: 7F:8A:F0:57:FC:54:56:80:3F:48:52:FF:26:7C:41:FE:AE:47:4E:C8
Authority key identifier: 87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
Certificate issuer: /CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Certificate serial: 0194BBCE3C420CC78F3DDB6524B65C41E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
Manifest number: 07F6
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: hyDPLDSRRvabop66wMiCKIEcovE.crl (hash: pO1D2JLqaJ+gOlYHne/tUQHIiApf/txCz8H8SgvzfMM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:42:0c:c7:8f:3d:db:65:24:b6:5c:41:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8720cf2c349146f69ba29ebac0c88228811ca2f1
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=7f8af057fc5456803f4852ff267c41feae474ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:d2:ac:07:32:58:70:c7:58:72:5f:db:75:
1a:ad:09:e5:d5:65:e6:78:bc:d6:46:bd:aa:bd:a3:
2d:35:30:05:7b:37:2c:28:9a:77:16:b1:e0:92:8f:
83:0f:47:d1:8f:46:50:af:a4:0e:95:d0:1a:c6:7c:
c8:78:7b:a3:94:e7:26:ca:af:64:57:62:eb:80:2b:
f2:4f:1c:9b:c4:8e:ff:f7:7d:c4:14:53:ed:a5:ca:
3f:ef:61:f4:53:44:f2:23:9e:d3:99:45:4e:24:8a:
2e:44:49:08:d3:76:3a:66:40:31:65:fd:de:97:82:
7f:31:0f:74:70:93:5f:67:f3:f5:1c:a7:03:2f:a2:
ed:98:77:32:ce:ce:3d:d6:ac:55:e2:6c:0d:c6:ef:
c5:b2:72:fc:63:d7:31:21:4c:8b:9b:12:8f:0b:94:
4d:3f:7f:2f:3f:40:40:af:3f:b9:66:c7:38:ba:48:
86:9e:98:e7:ad:60:ef:de:82:2f:d1:61:35:0a:35:
ca:a6:cb:14:b3:3e:fd:cb:a3:02:cc:65:ec:3d:ab:
39:f2:40:44:c8:e4:d6:74:f5:d3:3f:19:ee:f1:03:
3c:2e:a6:3d:bf:ae:d8:b9:75:22:e2:b2:22:43:ae:
d8:f1:f3:58:48:c7:10:6c:c4:8c:47:e8:15:38:d3:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8A:F0:57:FC:54:56:80:3F:48:52:FF:26:7C:41:FE:AE:47:4E:C8
X509v3 Authority Key Identifier:
keyid:87:20:CF:2C:34:91:46:F6:9B:A2:9E:BA:C0:C8:82:28:81:1C:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyDPLDSRRvabop66wMiCKIEcovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3bbd37-d3cb-415b-a38a-d415067a8f76/1/hyDPLDSRRvabop66wMiCKIEcovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:5b:ca:fb:1b:32:94:b5:8a:4b:61:e4:db:3f:08:15:67:
7f:5e:e6:0b:56:c5:1b:b6:de:75:1e:21:e3:3e:80:eb:e3:15:
44:ae:7f:5d:66:56:9a:50:e5:b5:42:75:f4:5d:5d:21:d1:b6:
51:14:e6:98:54:f9:67:aa:f1:81:10:84:16:aa:cc:9e:c3:3d:
61:2b:6f:d4:f4:c9:50:f6:9b:55:fe:f7:61:0f:1f:74:77:e5:
5a:51:18:58:29:68:3e:9d:f5:62:da:c1:9d:fa:70:6e:96:6d:
99:35:0b:ee:9c:e0:02:83:60:e4:33:e1:eb:69:d2:65:ef:2e:
93:04:a8:57:dc:fc:c0:89:fe:67:87:8c:29:d3:95:93:ae:0f:
68:09:99:72:a3:99:ee:b1:4c:95:bd:cf:48:d7:9d:12:0e:1b:
fb:3d:78:c7:eb:f9:db:10:c7:c2:0f:8c:39:78:c9:e6:7a:80:
47:73:03:a3:cb:ad:67:42:b9:c7:39:53:41:d9:54:76:6b:06:
98:bc:61:7b:0e:a3:48:ae:97:4a:fd:dd:c1:10:84:2c:58:72:
28:7b:62:bf:8e:03:cd:53:ab:69:77:59:95:67:cc:4e:09:77:
fc:71:1c:4f:c5:79:e3:31:68:ff:f4:5c:4b:ca:ca:5c:f5:c3:
5f:7e:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:58 2025 by rpki-client