
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
File: HkQmt06M9v_e23sGBBgIMqhiXzI.mft (raw, json)
Hash identifier: P4vMWlKfhYX+w99EDLBdShfx5q2AWv/CXXQkIH6NsLQ=
Subject key identifier: F8:5B:5D:37:63:E6:BB:82:21:AA:96:2C:CE:75:4B:22:FE:F1:B2:CE
Authority key identifier: 1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
Certificate issuer: /CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Certificate serial: 0194BBCDD5C51B1F692829B56F32A2D7ACEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
Manifest number: 053B
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: HkQmt06M9v_e23sGBBgIMqhiXzI.crl (hash: smaaqnK3597o2zPZ4DaMST5tPRGlk7YINBYzW55zQeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d5:c5:1b:1f:69:28:29:b5:6f:32:a2:d7:ac:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4426b74e8cf6ffdedb7b0604180832a8625f32
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=f85b5d3763e6bb8221aa962cce754b22fef1b2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:20:a5:d4:15:ec:72:2d:00:f5:7d:e3:2d:28:
8a:b1:e6:95:64:05:f7:8e:40:c5:07:84:0a:8e:da:
71:f1:bb:ea:9c:38:da:ea:4b:be:af:0e:b8:d1:4a:
42:1c:3a:71:d7:27:31:02:5c:c1:18:9f:1c:8c:46:
27:3a:18:c4:29:6f:c3:2a:c4:37:b2:87:79:a0:33:
31:3e:c9:2b:6c:61:04:80:1f:ab:aa:53:1d:7c:97:
ae:f1:61:e4:23:61:0b:e9:af:77:05:27:d5:c1:48:
d2:2d:b7:6a:62:7f:3c:32:5f:55:a8:f2:7a:7c:51:
71:d9:6f:95:42:74:a3:42:a0:f6:a4:91:68:76:d4:
02:00:de:99:7b:51:19:79:01:97:31:a0:fd:f4:cb:
7a:29:29:ab:5b:89:e8:be:e4:36:e3:2c:a1:96:ae:
2d:fb:c2:8e:6a:39:39:f6:83:ec:6f:e7:30:c1:a4:
ca:95:a9:c7:5d:64:67:16:7a:44:10:2b:65:18:66:
a2:9f:77:8b:e9:60:5e:8c:3c:83:c0:b4:9d:3c:02:
c8:e0:03:7a:09:63:64:bd:e0:c7:51:b0:83:ae:da:
93:75:39:5e:e2:f0:20:ec:d1:46:ad:70:47:a6:74:
40:ed:03:90:97:65:e1:64:ed:f5:6b:32:1a:c6:f0:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:5D:37:63:E6:BB:82:21:AA:96:2C:CE:75:4B:22:FE:F1:B2:CE
X509v3 Authority Key Identifier:
keyid:1E:44:26:B7:4E:8C:F6:FF:DE:DB:7B:06:04:18:08:32:A8:62:5F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkQmt06M9v_e23sGBBgIMqhiXzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/57d08e-1fb8-4ffc-8a71-b4740a2158f0/1/HkQmt06M9v_e23sGBBgIMqhiXzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:43:d9:ad:74:2e:b8:c2:a6:54:14:eb:4e:f5:b5:03:cd:fa:
04:3e:69:7c:f1:13:12:f6:e0:63:ae:1e:89:84:6f:79:11:59:
24:20:ca:23:a4:03:83:ac:6b:84:a8:a7:ab:b3:e3:88:5f:db:
c0:3d:18:a0:83:f6:8c:a5:06:10:1d:1c:d2:c7:0e:86:cc:a2:
17:e2:b8:11:ba:a8:76:f8:b1:88:cc:9d:4c:8f:b3:b0:66:52:
d3:fc:7c:25:19:f6:4d:f0:15:39:fd:0f:1c:da:23:f2:c5:a7:
48:11:3c:0d:b9:82:d1:a2:f8:94:a7:34:57:55:ad:e4:91:64:
2e:74:f9:35:32:cc:ef:7d:88:3c:37:09:d2:5d:1c:6b:f5:2b:
77:9b:4f:46:d3:f2:7d:a7:49:d4:d4:6a:58:f8:ad:94:ea:83:
d3:61:bc:e8:2d:28:ef:53:65:cc:51:63:3f:69:3a:e5:52:24:
2f:0c:66:c1:1b:57:60:a4:25:cd:10:59:e2:9f:c7:58:4f:bf:
a5:e1:a5:26:09:08:6f:46:62:c9:d3:cb:6a:ae:10:0c:53:e4:
f9:29:8f:2a:1b:0c:fa:8e:3b:23:7d:80:9e:10:0c:77:fc:ee:
12:f0:71:0f:3b:6b:c9:dd:7d:e7:53:1c:bb:af:55:e8:7e:d0:
02:10:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:49 2025 by rpki-client