Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
File: hFNK68PtnHkETCI8iyXgEdq_L98.mft (raw, json)
Hash identifier: +UCwBrzR+IYYc8sozTdHhd8qniOPLBmq71NiI0BlCgI=
Subject key identifier: 52:A8:34:95:A6:45:05:32:52:8F:AE:42:DE:93:EC:1F:25:46:CB:96
Authority key identifier: 84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
Certificate issuer: /CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
Certificate serial: 0194BCA9BF1FC7DBCAEDDD3619D97F9FE434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: hFNK68PtnHkETCI8iyXgEdq_L98.crl (hash: /2YOhRCuzNK4J1+EhRSbS/xsYQC+f7HhNzn3yuHKVwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:1f:c7:db:ca:ed:dd:36:19:d9:7f:9f:e4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84534aebc3ed9c79044c223c8b25e011dabf2fdf
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=52a83495a6450532528fae42de93ec1f2546cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:dd:b5:7d:f2:5e:f1:6b:38:2b:26:8c:ff:
38:f3:d8:0c:3f:35:29:d8:9b:8a:2f:cf:7f:08:45:
59:32:54:65:22:57:db:53:0b:65:6d:2b:f5:a3:37:
44:36:52:80:47:7f:31:6e:1a:5d:ef:04:fc:f0:bc:
57:3a:a0:49:c6:74:01:f1:b1:15:d3:1d:68:0f:60:
4d:88:ff:cd:a8:cc:28:49:81:fa:e6:a5:88:ca:ad:
a4:13:25:01:6a:02:0f:61:43:f5:cc:3f:37:78:d4:
5a:42:10:11:15:67:17:94:ba:d6:bc:83:bf:4b:18:
bb:ce:8a:83:e4:d3:ae:e8:2a:4f:8e:a8:6a:1b:bb:
b8:29:d6:f9:6a:02:9f:5b:72:d2:e1:52:d4:00:49:
f5:5d:45:c3:23:d3:8b:1d:b8:f1:ef:bf:ce:48:63:
c5:fb:61:bf:04:9b:56:ef:4b:f5:d7:a8:68:d6:db:
13:ad:59:71:03:a1:5f:b5:13:87:42:f7:90:40:42:
15:0c:e3:69:9e:3e:b0:b5:57:eb:b4:95:8f:c2:2c:
25:8b:27:23:11:8a:04:de:64:de:c2:3d:67:d0:28:
b4:79:8e:34:76:6a:30:a4:7d:5b:07:b5:de:6d:49:
3c:0a:fb:6d:25:b9:3b:66:28:ae:5f:1b:cf:c8:3e:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:34:95:A6:45:05:32:52:8F:AE:42:DE:93:EC:1F:25:46:CB:96
X509v3 Authority Key Identifier:
keyid:84:53:4A:EB:C3:ED:9C:79:04:4C:22:3C:8B:25:E0:11:DA:BF:2F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFNK68PtnHkETCI8iyXgEdq_L98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a8e329-3bd7-437f-8107-ebde74933c77/1/hFNK68PtnHkETCI8iyXgEdq_L98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:60:ab:03:2f:06:b7:4b:85:0d:0f:1a:5b:86:d2:03:52:
16:86:c5:1a:58:40:99:0e:be:b5:12:9a:0c:c0:f4:a3:5c:e6:
05:46:95:4a:d8:1d:52:c8:d1:c1:4e:57:09:37:0c:d1:0e:24:
75:76:86:5f:6e:db:ae:a2:cb:80:7c:bd:bc:62:d7:5c:3b:b9:
53:a7:17:d7:89:db:77:4a:3a:4e:8a:c9:1d:07:dc:7d:a1:1e:
69:4e:8b:3b:fa:2b:f7:64:3d:50:f1:53:a5:87:c0:10:12:c0:
70:19:03:c1:da:80:17:9b:6d:b9:dd:3c:e9:2e:b0:73:42:18:
0b:45:c8:ce:18:77:b2:73:5a:f0:8c:fa:75:82:a6:9f:44:d4:
ea:67:d5:21:f1:c5:37:e6:a7:27:dd:48:da:05:4e:36:bb:da:
8c:b1:23:f7:c3:38:3a:66:a7:78:54:90:60:19:cb:45:48:8a:
89:4d:fc:6b:05:19:d1:af:f4:ed:63:45:02:2c:c9:23:89:b8:
9a:45:82:09:da:5e:57:78:22:d0:20:77:d9:20:83:df:c9:96:
31:51:de:f0:a4:d5:6a:c9:3a:24:df:7e:ff:81:bf:c7:b6:ff:
8b:85:2b:d1:f7:af:4e:70:17:e2:78:fc:73:34:44:00:18:a5:
98:13:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:46 2025 by rpki-client