Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
File: HDotyHGc8y1ZegUekO2VAmg15Pg.mft (raw, json)
Hash identifier: 7rgNLJH6FzBdFXYW+aDcDJA8LT1jxb8Cfllg+Dy4cxg=
Subject key identifier: D2:93:01:0F:9E:40:57:A4:20:3F:99:B7:D0:41:C8:E0:01:EC:9F:CA
Authority key identifier: 1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
Certificate issuer: /CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Certificate serial: 0194BC3C3725299E50430769B5F032A7D4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
Manifest number: 0541
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: HDotyHGc8y1ZegUekO2VAmg15Pg.crl (hash: BKUel/esJVqZwgD6YZazrq2w9WOVHhKUIc3NXnZmSaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:25:29:9e:50:43:07:69:b5:f0:32:a7:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c3a2dc8719cf32d597a051e90ed95026835e4f8
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=d293010f9e4057a4203f99b7d041c8e001ec9fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:5a:8f:0f:7f:26:61:13:7c:43:76:8d:34:
97:0c:e7:6b:a6:0f:89:e5:16:99:7b:9a:5d:14:29:
5b:e2:a2:7c:a9:d4:40:84:2c:97:da:c9:2e:e5:80:
8d:95:17:b3:c1:4b:97:6b:4a:b5:e0:df:43:7c:ef:
ad:3e:44:96:04:d0:72:6a:36:1a:18:8c:52:ea:c4:
69:40:de:d7:12:8d:ec:30:d0:d7:55:2d:c0:98:6f:
e8:8b:df:25:43:94:f8:20:19:0f:b9:ce:f1:03:be:
66:30:34:16:8e:2a:11:0a:55:08:eb:1b:ef:bd:fa:
e3:f9:bd:a5:72:ee:d1:89:68:1d:25:76:12:c8:86:
d5:3a:38:d2:0e:29:44:f2:1d:43:5a:51:41:e0:5c:
8b:ac:99:22:ed:98:2b:e9:30:f6:21:b0:fd:03:11:
96:d0:1c:e7:44:c6:1f:0a:7d:c6:3f:ae:0a:d5:21:
aa:b0:9a:79:8f:e2:79:3d:cd:82:a4:3c:0e:9e:26:
09:d3:ba:a5:d2:61:0e:b8:6d:a8:6b:0f:0e:6c:5a:
73:db:3c:f7:fa:e7:d4:98:1e:85:cd:61:43:14:54:
c2:8b:1c:bb:2c:ee:18:40:3a:96:f4:7d:3b:b7:cd:
45:83:2b:34:31:4b:a2:e1:fa:5a:6c:70:79:27:de:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:93:01:0F:9E:40:57:A4:20:3F:99:B7:D0:41:C8:E0:01:EC:9F:CA
X509v3 Authority Key Identifier:
keyid:1C:3A:2D:C8:71:9C:F3:2D:59:7A:05:1E:90:ED:95:02:68:35:E4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDotyHGc8y1ZegUekO2VAmg15Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a14fdd-2ec8-44c8-a470-a665651fcb20/1/HDotyHGc8y1ZegUekO2VAmg15Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:73:d5:b0:92:0c:a8:dd:96:e9:0b:9e:3a:60:cf:a8:d2:a7:
b4:20:cf:c3:4e:a6:5a:3b:8a:55:4c:ff:ec:a4:e1:00:df:6f:
80:c6:a4:a5:9d:7a:df:e3:7f:86:be:c1:33:11:45:f7:19:0c:
c3:bb:af:86:03:5a:d7:6c:66:de:4e:5a:76:be:6f:4d:76:51:
d8:9c:2e:44:73:5d:0a:71:1c:ca:8b:2c:f3:64:2b:b7:ed:0b:
04:e9:ef:ec:66:e3:82:13:56:1b:8a:f8:11:8b:1a:14:89:bc:
fb:2f:cc:73:27:ab:a8:47:f8:4f:14:ff:e0:8d:69:15:2a:d2:
d1:00:00:23:48:66:b6:bc:8f:09:82:c8:50:91:aa:2b:58:ec:
f0:b0:7b:ad:6c:07:9e:07:f1:a8:db:29:c4:b1:4a:e8:87:16:
f6:92:1c:2c:c6:29:44:81:43:e1:c9:6e:65:33:0d:7b:f6:1f:
f7:07:99:e1:69:c6:40:d1:e5:d0:cb:76:a2:9b:cf:8e:4d:7a:
e5:11:cd:c2:8f:da:7f:27:13:d2:5a:19:a5:90:fe:53:0b:a3:
f7:44:be:72:92:fc:81:d2:cb:26:53:09:ac:ce:f5:4b:54:e5:
a6:39:d5:7e:ae:69:90:ae:36:d4:5e:86:34:04:24:61:8e:fd:
f0:85:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:29 2025 by rpki-client