Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b12a35-05c1-40b9-b651-236883b2cf97/1/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.mft
File: hfu-hUlKCvDMHoIS-4QQ5PZwsmY.mft (raw, json)
Hash identifier: 4fV7MGem+OIIyCnLMIixttv2f01OImcP9YJoGCBjMIE=
Subject key identifier: 16:0E:28:1B:03:52:08:68:02:60:5D:EF:EA:E8:F3:CC:DD:77:17:2B
Authority key identifier: 85:FB:BE:85:49:4A:0A:F0:CC:1E:82:12:FB:84:10:E4:F6:70:B2:66
Certificate issuer: /CN=85fbbe85494a0af0cc1e8212fb8410e4f670b266
Certificate serial: 0194BBCE104130C4C21F12A13E107C5CDEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b12a35-05c1-40b9-b651-236883b2cf97/1/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: hfu-hUlKCvDMHoIS-4QQ5PZwsmY.crl (hash: UqUaRcLX2C3BRefc9mYII/tzYsFb4gltoMIuo5zLzq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:10:41:30:c4:c2:1f:12:a1:3e:10:7c:5c:de:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fbbe85494a0af0cc1e8212fb8410e4f670b266
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=160e281b0352086802605defeae8f3ccdd77172b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:41:0a:66:d9:46:6d:d1:1a:11:cf:4c:e7:
a3:04:46:db:75:ac:1a:3c:f6:aa:4d:5e:b4:cb:9e:
e6:67:6d:7d:f4:50:74:b1:f5:54:0e:b1:6a:aa:f4:
10:13:3f:02:c9:d2:b4:d5:54:4a:52:04:bc:fc:fb:
1d:b8:e4:b4:e9:28:89:3d:7c:7d:e7:64:5c:37:5d:
6e:0e:15:08:58:62:cb:a0:d4:6e:c0:fe:0b:58:eb:
95:6f:26:2c:04:54:31:53:de:75:e1:4d:f2:2f:11:
bc:87:21:07:bd:2c:ab:84:72:eb:2f:c4:0e:08:0e:
1f:76:48:9c:32:40:e7:7f:9a:56:ce:c4:1b:f4:12:
62:5e:c4:ef:22:d0:c0:b0:07:1d:9b:36:7f:77:9e:
97:2d:b9:91:61:88:06:c7:40:15:c9:75:d9:da:37:
7e:0b:7c:bd:b4:26:69:52:72:b4:0f:e6:b7:85:44:
6c:c1:1b:2f:ce:a1:77:5c:d7:82:e4:ca:b1:c1:a9:
82:53:88:15:32:fe:69:11:b0:50:2c:46:02:68:b6:
7a:97:0e:b5:95:a1:03:eb:49:93:be:58:22:cf:df:
55:71:05:8d:7a:94:70:ad:fa:60:63:b6:14:7a:a5:
fd:a1:89:58:fb:fa:ca:9d:ef:13:3d:06:a0:d4:aa:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:28:1B:03:52:08:68:02:60:5D:EF:EA:E8:F3:CC:DD:77:17:2B
X509v3 Authority Key Identifier:
keyid:85:FB:BE:85:49:4A:0A:F0:CC:1E:82:12:FB:84:10:E4:F6:70:B2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b12a35-05c1-40b9-b651-236883b2cf97/1/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b12a35-05c1-40b9-b651-236883b2cf97/1/hfu-hUlKCvDMHoIS-4QQ5PZwsmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:5a:94:2f:22:4c:bd:d4:b1:b8:21:bf:5b:62:f1:7e:50:
32:72:e5:3e:9f:04:23:00:b1:70:67:b6:33:52:c2:1b:24:3b:
00:93:f4:9b:34:e7:e3:7b:7d:d0:a4:7c:d0:79:5a:4e:fa:78:
66:8c:3f:da:90:35:a0:fb:6b:47:7b:54:19:96:aa:96:e3:61:
00:56:05:10:45:ba:d3:2f:f0:b6:48:37:fa:80:7a:4c:f7:e2:
b9:bf:9b:79:b6:e4:bb:14:37:62:6a:c9:f4:57:53:9e:3e:9b:
83:92:a4:7e:e4:3d:39:bb:d2:8e:8e:58:54:e1:38:11:00:b6:
d6:fd:7a:fc:7f:2b:c0:ba:ae:55:c1:51:f5:9b:7c:53:50:2d:
a3:c8:86:74:8f:56:4b:72:a8:61:6a:a9:ba:c4:5c:4c:9c:d7:
86:2d:11:3c:5a:de:f8:97:c9:b7:c6:10:2c:4a:6f:b2:45:7c:
87:cb:aa:d1:b7:31:41:81:3e:3f:17:09:14:5e:46:07:27:53:
f2:cd:9c:8d:45:5c:bb:b4:0f:98:5d:81:7e:a5:ca:bb:ab:c2:
4b:ed:c6:8d:8d:46:2c:6b:a7:8c:a3:ed:2c:93:bb:a2:83:e2:
67:92:45:0e:a3:eb:c7:ec:aa:e1:47:0c:21:bf:76:87:39:19:
a0:45:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:52 2025 by rpki-client