Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
File: HbLi5zWagBYypm0QuWHk8uxt_E8.mft (raw, json)
Hash identifier: w7IURmm9WbHxyfKxSt5G0+84uw/73ovmFyT2x+F+U64=
Subject key identifier: C4:2E:49:C9:18:33:8C:DE:FD:58:56:7C:F4:85:12:19:E2:4B:D1:99
Authority key identifier: 1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
Certificate issuer: /CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Certificate serial: 0194BC72F15C142D434F713D7EB82E1EF36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: HbLi5zWagBYypm0QuWHk8uxt_E8.crl (hash: RFp90ge9SIW6D16e27mCwGnbG6Ubk55QOuq/LXhei0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:5c:14:2d:43:4f:71:3d:7e:b8:2e:1e:f3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db2e2e7359a801632a66d10b961e4f2ec6dfc4f
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=c42e49c918338cdefd58567cf4851219e24bd199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:97:b2:12:9f:9c:b3:81:49:43:3d:92:e5:
93:fe:6f:c7:c4:bd:3f:3b:3c:51:d0:b1:44:2a:4a:
5e:33:38:31:db:82:6d:c1:04:28:cf:c9:be:20:96:
0c:73:80:b5:d2:6d:14:6f:6d:b7:f8:53:45:25:9d:
5a:eb:8c:73:d1:5b:cc:cb:a6:e0:0e:6e:4d:6c:71:
e7:32:da:04:f8:e5:95:ed:91:af:80:50:11:05:3b:
02:e2:69:93:c7:83:58:b5:30:8a:9d:61:1f:9b:92:
e1:8c:44:a8:da:e7:d4:a2:54:dc:15:4c:bc:9d:13:
7a:09:8a:d8:b7:65:c5:28:47:3e:c6:61:a4:75:a5:
a0:76:bd:3b:3d:4a:22:33:a2:6c:51:d4:db:e8:e6:
7a:6c:41:cf:de:d9:a7:0a:34:e5:d8:29:cf:a2:0c:
22:cd:3a:64:c0:bf:e2:4e:93:71:62:0d:b1:e6:9e:
63:2b:8e:70:0d:1d:83:b7:45:b4:0b:cd:b7:c6:86:
06:79:fe:d4:38:42:d3:7e:6e:7c:61:42:38:ee:1d:
15:ee:04:4a:e6:18:a4:e9:88:7d:f1:ef:87:2a:cf:
de:51:86:2e:7e:fc:89:aa:47:a3:61:4f:4a:f5:9d:
a9:12:db:19:44:52:e9:e8:98:48:27:e0:4b:f3:d8:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:49:C9:18:33:8C:DE:FD:58:56:7C:F4:85:12:19:E2:4B:D1:99
X509v3 Authority Key Identifier:
keyid:1D:B2:E2:E7:35:9A:80:16:32:A6:6D:10:B9:61:E4:F2:EC:6D:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbLi5zWagBYypm0QuWHk8uxt_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6fd9be-9694-4639-90c5-90ebd76e91f9/1/HbLi5zWagBYypm0QuWHk8uxt_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:00:e5:3f:fe:6c:20:7f:aa:7b:55:8e:e0:81:dc:9e:ff:fc:
37:28:57:0e:49:e6:61:2a:ea:7a:d9:5a:78:c8:c6:86:c1:f6:
3b:f8:3c:7a:c0:3d:bd:29:70:b5:63:26:87:61:51:80:7c:e2:
27:b1:9b:94:b1:8b:71:23:f8:7f:ca:37:fa:02:73:02:5a:fe:
58:ce:29:e3:40:96:60:8e:a7:01:9c:b3:d4:0c:c4:45:1e:d1:
7f:42:3a:b8:0f:d4:87:27:a7:2f:a3:2a:ab:72:bd:51:50:ec:
96:50:68:38:ab:6f:9c:ed:23:bc:31:cf:6a:12:28:12:58:13:
ed:1e:dd:f6:ee:cd:b6:9a:e6:88:d4:6e:00:e3:16:b5:78:f7:
ca:50:47:3a:fc:ef:34:19:db:db:2c:f7:31:68:47:b1:b8:67:
af:1a:bf:e0:ba:67:e9:36:ce:95:87:39:bf:3c:70:5f:59:d7:
01:8f:e4:1a:69:f8:03:f1:01:c5:50:8b:9e:33:b3:ec:1b:c1:
73:b8:52:b8:4c:1c:e4:ce:ad:d3:1d:8c:fd:0e:ad:44:2d:1b:
9d:d4:88:6f:5c:10:d5:16:46:f8:79:cd:10:e4:f5:27:11:8d:
64:08:88:67:36:c9:43:2b:7b:e3:e6:74:fc:e9:cc:05:c5:eb:
96:8e:68:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client