Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
File: HzkK-DPX1CaQQsJJvPSWSFcglbY.mft (raw, json)
Hash identifier: ZOQLo87T8Hh8qDJ+DEadETv6xPw8YYybRLh48E+yaYc=
Subject key identifier: 37:20:6F:DD:52:24:D5:70:18:D9:F4:B2:A3:05:81:92:10:1B:9C:57
Authority key identifier: 1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
Certificate issuer: /CN=1f390af833d7d4269042c249bcf49648572095b6
Certificate serial: 0194BBCDC6E7E57EFE46BAAE6A1BE023BB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
Manifest number: 0EC9
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: HzkK-DPX1CaQQsJJvPSWSFcglbY.crl (hash: DFnPy3p2z31Zgk5Yuq85u8RAga0z+NtTH7LV6Iovqzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:e7:e5:7e:fe:46:ba:ae:6a:1b:e0:23:bb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f390af833d7d4269042c249bcf49648572095b6
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=37206fdd5224d57018d9f4b2a3058192101b9c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:d1:1a:7d:20:5f:5f:a7:db:10:39:91:2f:
15:0e:6c:d1:13:92:22:37:07:f8:20:2e:db:13:87:
0e:19:d0:e7:b0:22:53:6c:f4:8e:6b:58:58:6f:73:
9f:4d:8a:99:f7:68:77:04:30:92:da:d4:f4:72:25:
45:2d:22:cb:7f:ee:0e:1b:7d:df:39:36:b3:3d:6d:
19:b9:be:5d:3f:e5:cb:76:57:cd:ac:d6:51:7f:50:
ac:1b:03:ca:9e:13:02:0a:54:bc:13:e0:f2:4e:0f:
17:7a:5d:b3:bc:66:92:8d:0a:af:0f:61:c4:a3:46:
e9:19:c6:95:4e:ff:a4:3f:84:dd:b8:e5:7b:58:0e:
d5:f1:12:df:92:19:d6:63:da:98:45:45:7d:36:ae:
eb:e6:18:ce:3c:0a:a5:83:eb:1d:69:25:4c:80:49:
6e:53:0e:ae:f6:69:17:a7:d9:64:dd:2b:95:f3:e0:
5b:86:ee:b2:6d:e5:dc:46:0d:95:83:53:68:76:52:
f1:5d:1d:66:97:92:3b:4a:0b:d9:6f:c7:18:78:36:
58:02:08:62:9f:43:fd:a6:e1:25:17:70:12:6e:93:
7c:b3:b2:e0:2c:ef:dd:b6:85:27:a9:ba:6b:01:2e:
de:03:48:f7:7d:de:17:86:21:40:2e:62:1f:77:99:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:6F:DD:52:24:D5:70:18:D9:F4:B2:A3:05:81:92:10:1B:9C:57
X509v3 Authority Key Identifier:
keyid:1F:39:0A:F8:33:D7:D4:26:90:42:C2:49:BC:F4:96:48:57:20:95:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzkK-DPX1CaQQsJJvPSWSFcglbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ba3048-6224-4a97-ba31-d758372cf8f0/1/HzkK-DPX1CaQQsJJvPSWSFcglbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:7a:a5:79:b5:25:c5:78:b9:33:79:4d:9d:83:e3:90:a4:
66:16:ee:c6:18:d9:ba:07:75:61:bd:50:43:5c:4b:bf:8a:ce:
48:ba:0e:81:65:91:32:ff:03:84:0d:ee:66:22:ed:c2:ba:cc:
5a:f2:c6:cd:e2:35:1d:98:d3:39:4e:bf:25:b2:64:55:dc:07:
20:a8:7d:ef:61:5d:3f:2c:36:9b:6e:45:51:d4:de:15:ea:a3:
ea:2b:86:03:8c:82:f6:4a:65:18:6d:14:e6:9f:a9:92:9d:68:
bf:97:21:6b:f9:be:02:f1:34:71:cd:5a:53:c0:21:1f:c2:75:
f9:84:a3:97:a3:31:d8:10:56:87:d9:c2:fd:46:5f:fa:58:59:
f8:a7:81:85:46:db:d8:13:1d:d3:ec:cd:21:39:6a:6a:60:4d:
db:2b:f1:04:e3:c4:65:91:f5:0c:43:e5:62:a2:29:b8:cb:2f:
48:c8:84:02:3f:e4:84:45:3c:ed:47:77:24:55:4b:db:28:35:
da:e2:4c:bd:07:b2:b3:b8:f8:69:ef:95:32:a7:f5:a9:0b:54:
11:21:80:3e:c7:0c:e7:36:56:07:e2:96:e8:68:dd:25:ba:8f:
0b:53:18:f6:fd:53:be:89:fd:95:33:d8:4d:cd:50:7e:9c:c2:
f1:bb:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client