Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
File: HCTxyq-zII64J6B4JkF7y5STQS8.mft (raw, json)
Hash identifier: vteL8uW6pfHgOwc/EFQayhTKMfEhKefSloCRrWeTR0I=
Subject key identifier: F5:BE:98:19:EA:70:52:EB:F7:8A:91:71:7A:6F:DC:7E:C2:F1:20:A8
Authority key identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
Certificate issuer: /CN=1c24f1caafb3208eb827a07826417bcb9493412f
Certificate serial: 0194BC04A5E712A66E06AEEA9920F533DE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
Manifest number: 03A0
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: HCTxyq-zII64J6B4JkF7y5STQS8.crl (hash: +IpW3ap0rH+yz3Tbyp3ym2dGtbK6OQ1fbVGQPDfoECI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a5:e7:12:a6:6e:06:ae:ea:99:20:f5:33:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c24f1caafb3208eb827a07826417bcb9493412f
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=f5be9819ea7052ebf78a91717a6fdc7ec2f120a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:ed:ab:bd:29:ac:61:74:a3:e8:36:88:df:
db:7b:f2:1e:8b:24:58:46:08:59:ad:dc:62:f6:70:
ec:44:fa:2a:7e:3e:1b:bc:09:fb:13:3b:de:16:44:
a5:11:4a:e1:6d:cb:ab:74:a6:ed:22:d0:0a:79:58:
56:1e:24:f9:d9:9f:d9:ea:44:69:f6:a4:04:d9:15:
43:c3:c3:c8:2b:3a:1a:d0:51:18:a8:22:6b:23:67:
a0:1b:5d:50:0b:56:b2:11:d3:85:87:38:ea:ca:89:
c9:98:61:2e:86:a3:22:f3:c5:c7:30:d5:9b:0b:41:
d9:51:e0:7f:43:54:5e:86:1b:02:c3:f0:fd:ef:89:
26:2d:d6:a8:39:17:05:46:54:df:42:fa:4a:aa:b3:
34:2a:b3:ea:5d:95:99:9b:75:a0:f5:75:4d:97:d0:
2a:23:c7:99:be:14:f4:69:25:e5:92:6f:a4:da:83:
3c:70:15:d5:22:5d:46:f0:db:41:a8:34:60:5b:82:
75:8a:89:ba:15:02:5e:dc:30:dc:a4:a6:6b:ad:08:
57:34:ce:47:42:48:ae:72:a1:47:12:b8:ce:8a:bf:
b7:34:e9:51:44:c8:81:0a:7c:c5:93:90:b9:80:54:
f4:b4:08:c4:16:a2:0c:73:13:ad:a3:f5:e4:5d:57:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BE:98:19:EA:70:52:EB:F7:8A:91:71:7A:6F:DC:7E:C2:F1:20:A8
X509v3 Authority Key Identifier:
keyid:1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e0:fb:7d:2e:e1:b3:80:73:bf:6f:1b:b6:7f:85:98:4c:25:
8d:a1:bd:a4:48:be:0d:7e:0a:3b:f9:50:58:83:ba:d7:56:db:
10:37:55:cd:c7:88:83:a7:fe:95:f1:01:8c:22:00:5d:5e:b4:
5e:ea:b5:64:b3:93:63:17:88:c0:d7:af:be:6e:2d:d5:74:93:
17:09:a7:be:b0:94:e2:bb:be:41:45:c2:c8:d6:11:b8:79:d5:
b8:f5:d2:ab:da:26:64:c4:34:c7:c8:25:03:19:4d:0c:df:bf:
98:75:a1:46:ed:0f:99:e6:51:0b:00:62:ef:da:40:98:2c:63:
a2:12:64:68:6a:0d:b1:3d:03:cc:87:f7:f9:60:b9:24:d6:30:
b9:b8:22:d1:36:ea:54:a9:1e:1a:92:2f:96:52:c9:59:6c:8a:
d2:d1:a5:58:19:93:a7:b2:68:ad:8a:c7:bb:27:36:1f:68:2f:
46:7c:54:56:4b:f5:95:97:9e:9c:c3:b1:84:a9:12:68:81:f8:
f9:38:be:5f:2a:f5:1f:2c:1d:1f:5f:88:70:eb:82:82:57:5f:
10:a0:29:1d:a9:a8:79:f0:95:58:71:f2:3a:42:8c:9c:aa:31:
50:48:21:40:ad:05:22:d7:77:87:74:11:16:35:82:a0:11:a9:
6d:04:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:48:18 2025 by rpki-client