Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
File: HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft (raw, json)
Hash identifier: 5P4jngpymYMjT8vy/sN08hGWqok6wc3JeKc+M9vCNqQ=
Subject key identifier: E9:47:8A:A1:2D:A2:06:C1:FF:59:96:65:51:97:56:6E:FE:AA:1C:BF
Authority key identifier: 1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
Certificate issuer: /CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Certificate serial: 0194BC3C13E33FEA9CE2095D277AEE1F1F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
Manifest number: 81
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl (hash: 2s4WdsvOhNjes9lCsCyZVFfZfLWvGhsM4IljvzpoPjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:e3:3f:ea:9c:e2:09:5d:27:7a:ee:1f:1f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd2e78a097f290fc2fcaf5d9c7d88fcc87bd452
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=e9478aa12da206c1ff5996655197566efeaa1cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:ab:26:80:4d:cf:8f:22:2d:9d:a2:db:8d:
cf:f8:07:14:16:cc:59:66:54:b9:84:e7:49:d2:45:
ff:ed:1b:5d:0f:9b:d1:a5:b1:c0:dc:59:7b:3b:3e:
cd:ba:a5:3d:f6:54:fe:e0:8b:5c:1a:9a:e0:e7:0c:
09:17:ed:cd:c5:7e:81:41:b6:54:38:70:03:9f:00:
b3:c6:5c:ea:2c:9f:3e:d8:14:37:a0:51:3d:39:0f:
52:f5:6a:7b:6d:44:90:57:07:95:e5:a0:5d:39:8f:
51:78:ab:2e:30:2d:af:81:1d:5a:c7:73:e4:8f:73:
f4:28:04:0f:44:06:7f:56:50:fa:f7:43:a6:d5:84:
97:c3:98:c9:4f:aa:d6:6c:26:3d:3c:50:30:71:e3:
4c:b0:0a:51:03:94:f5:f0:d7:00:8c:a6:73:d8:5c:
2c:a4:e1:6a:b3:87:e5:40:85:25:da:bb:99:23:5f:
7a:46:27:ac:4e:af:d2:64:9a:28:aa:38:7d:29:51:
b8:ca:40:b4:5f:10:5d:34:6d:e6:46:50:de:e7:31:
8d:1e:cb:d8:93:68:8f:97:0f:4c:f5:a9:0d:87:e4:
12:a4:d4:ce:3d:90:52:75:c4:73:d7:a4:ed:65:cd:
0a:c5:51:7d:79:b9:b8:dd:22:68:4d:e4:0d:2c:73:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:8A:A1:2D:A2:06:C1:FF:59:96:65:51:97:56:6E:FE:AA:1C:BF
X509v3 Authority Key Identifier:
keyid:1C:D2:E7:8A:09:7F:29:0F:C2:FC:AF:5D:9C:7D:88:FC:C8:7B:D4:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNLnigl_KQ_C_K9dnH2I_Mh71FI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5efcbb-3d40-4fe3-b8eb-06c0f2a1757f/1/HNLnigl_KQ_C_K9dnH2I_Mh71FI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:f3:78:8d:6c:1a:8f:75:2e:1e:f5:77:dd:d5:6a:33:c4:
24:2d:03:d0:55:50:a6:62:e5:97:3e:37:d6:07:f1:c1:69:d2:
fb:9f:b9:c4:ba:d1:0f:38:8e:bb:c3:7e:36:11:b3:a0:a6:cf:
fa:0e:a8:46:d2:3e:88:82:bf:1b:9f:91:11:8a:d9:7c:ef:b6:
77:82:04:cd:ec:8e:92:cc:de:29:dc:ed:36:48:76:27:f7:f6:
9a:a9:7e:39:88:c2:90:14:26:9e:36:b4:18:34:cd:8b:59:25:
b0:37:6a:de:6d:43:5d:44:bc:2a:c3:d4:55:c4:28:df:3d:d9:
96:5b:5a:4a:06:23:c6:ce:84:06:e3:74:b1:6c:fe:63:4f:40:
09:54:7f:41:da:a9:89:fc:5f:ee:d9:db:83:f2:af:3a:7d:c2:
56:bb:b5:29:2d:2b:5e:41:38:30:26:08:ef:6f:1a:8f:b6:b2:
a3:a1:b5:af:b1:f9:f7:d1:ad:cf:9a:d2:f3:e5:3a:d8:20:ee:
31:c3:b5:2f:56:d2:53:06:88:df:e5:1a:a7:be:95:ee:c7:bd:
f8:98:e9:67:c7:2a:d5:4d:0c:5b:13:d9:bb:b3:50:10:c7:b1:
e5:e2:75:4c:ef:22:8e:75:97:e5:c9:e5:7e:9a:60:40:fb:2b:
4a:df:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:50 2025 by rpki-client