Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
File: hlonCgsIptsPlMdDV96OSC1944Y.mft (raw, json)
Hash identifier: Z6nmQbwo+EBeqJBnCb9/LV0ZmzV431S85gGOOJVc+8M=
Subject key identifier: E0:CE:08:44:42:CE:19:0B:D4:7B:AF:D3:31:35:65:6C:EF:CF:E4:B9
Authority key identifier: 86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
Certificate issuer: /CN=865a270a0b08a6db0f94c74357de8e482d7de386
Certificate serial: 0194BC72AC85737992162CE154C16646AC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
Manifest number: 05FC
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: hlonCgsIptsPlMdDV96OSC1944Y.crl (hash: QBgwcWF2pc12SEYQOq4khgM0ec5xuvFMu3Ip6/9bs4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:85:73:79:92:16:2c:e1:54:c1:66:46:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865a270a0b08a6db0f94c74357de8e482d7de386
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=e0ce084442ce190bd47bafd33135656cefcfe4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:a3:36:1d:d5:f3:8c:3b:83:8e:d2:6e:a0:
85:5d:de:07:8b:a2:f3:76:d3:26:97:0d:d1:f9:ac:
66:e9:9c:e9:9a:86:7c:63:43:c2:7f:cd:50:3b:e0:
2d:ac:3a:0f:d3:8d:2a:cf:a8:3b:6b:a7:88:64:39:
c4:dc:08:58:cf:40:88:83:f5:f5:88:21:8d:c1:43:
d4:86:37:d8:80:7c:b5:55:9f:5a:9c:9b:08:dd:3d:
a8:73:29:3c:53:76:7a:9d:d9:8a:56:07:72:10:43:
43:5b:5c:b5:87:eb:58:ec:fa:b4:82:45:89:36:b3:
85:84:8a:20:ab:98:21:35:37:82:bb:7b:c2:7b:3c:
83:cf:e3:f4:33:5b:68:36:12:d7:a6:68:49:65:62:
9e:4e:6f:8a:7d:93:52:d2:23:28:2e:28:c6:6c:39:
46:83:d1:1a:30:96:cb:e1:25:02:ed:9d:a6:fd:cf:
28:b6:86:c6:03:77:f1:60:24:93:b2:86:45:83:39:
db:0d:58:5e:28:bc:e8:8e:49:0e:d8:55:e1:ea:08:
29:38:f0:1b:e8:c6:88:ea:75:61:9c:e7:d0:95:64:
64:d6:9e:b3:47:bc:13:b3:c7:15:57:c5:e0:6d:4a:
6c:1c:c4:52:7f:32:32:90:63:e7:26:76:b3:3c:b2:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:08:44:42:CE:19:0B:D4:7B:AF:D3:31:35:65:6C:EF:CF:E4:B9
X509v3 Authority Key Identifier:
keyid:86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:f9:60:60:48:e4:3b:38:f6:e2:8b:89:62:f8:6d:47:95:
82:d4:1a:b5:f8:5f:af:9e:9e:c6:6a:3b:4d:25:16:56:05:a0:
bd:e2:4c:b5:80:8c:d1:9c:53:04:0b:5d:61:43:8b:83:8e:03:
55:d3:64:e0:56:af:87:3e:b5:1a:f8:6b:ea:48:1e:4d:f3:8d:
7d:8e:3e:61:c6:98:f0:9a:73:58:79:09:05:bf:97:91:6d:df:
a6:b8:08:3d:97:4c:b7:9a:49:96:c7:1d:1f:06:5f:27:76:3e:
ce:fb:38:6b:9e:de:fa:2d:32:b7:c2:a8:cb:3b:77:f8:1f:87:
03:ac:2a:92:4c:1c:75:5b:4c:c4:e0:a9:2e:e5:86:7b:62:56:
ad:9e:29:90:0a:4a:04:34:c1:f6:46:64:5f:08:7d:33:b5:ee:
6c:18:42:57:b4:ac:36:95:dc:cc:5c:66:b6:e3:24:28:f2:e0:
88:b1:1e:d4:e4:1e:7f:4f:63:2f:e3:28:c9:1c:ab:5b:7b:27:
07:73:cb:61:92:72:9d:2a:f7:3c:7c:f2:2e:fb:8c:83:8a:38:
fd:bc:31:90:23:80:b0:f1:73:ea:93:c5:f9:1d:25:47:0d:a3:
f8:69:ba:a6:da:9c:6b:08:73:71:6b:84:fc:54:9a:0c:be:24:
ac:a5:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:43 2025 by rpki-client