Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
File: HzJorQbzq480bQ3jm9SuqztlhNk.mft (raw, json)
Hash identifier: vQKqCJVhBkLGFMpOo9ESofGGPAkMofRq1paQdRXxCsg=
Subject key identifier: 4E:70:58:BB:B6:13:C4:B4:39:7E:DD:42:B6:D3:F1:A0:93:9F:B5:81
Authority key identifier: 1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
Certificate issuer: /CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Certificate serial: 0194BBCE7EE770DB0A80E2FE979C72C60E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
Manifest number: 0624
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: HzJorQbzq480bQ3jm9SuqztlhNk.crl (hash: 0VyD8NQV/mvBRb5OTln69nf9DxeGN3GGJIGzDI3IOtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7e:e7:70:db:0a:80:e2:fe:97:9c:72:c6:0e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3268ad06f3ab8f346d0de39bd4aeab3b6584d9
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=4e7058bbb613c4b4397edd42b6d3f1a0939fb581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:ff:fb:4b:14:41:12:39:f6:b2:0b:97:5f:
40:be:cd:1b:b6:19:6e:63:cd:9f:48:38:0c:d3:82:
61:ee:12:81:09:f5:f9:64:59:4c:eb:22:f0:e6:79:
be:30:6e:aa:27:d5:fb:68:0e:b1:9c:44:29:a9:38:
33:fa:91:c8:71:fa:dd:20:a0:4a:32:7f:ce:96:17:
0d:b3:53:d9:52:b7:a3:6e:c2:9a:e7:60:62:96:37:
e0:1f:e9:86:0f:7a:57:17:12:a5:20:b4:01:fe:74:
49:14:b8:13:f5:bd:be:32:dd:84:dd:86:9d:10:fa:
7e:a1:94:02:52:c6:2d:9d:b4:4d:95:53:cb:55:09:
b2:b9:58:e2:cf:d0:5a:02:ad:a6:0f:ed:14:ed:2a:
c3:63:9f:d9:cd:e6:ea:cf:8f:56:32:8f:06:88:ff:
b6:7e:66:19:6b:4f:58:27:99:b8:d1:f7:10:a0:8f:
08:4d:a3:f3:62:71:d7:1a:80:e3:11:74:93:dd:3e:
e1:f3:90:46:de:f5:cf:1c:0f:c9:a9:81:7a:3e:12:
ff:bf:34:06:55:b5:fd:b4:56:e6:df:13:38:2a:bc:
e3:1c:28:32:ae:ef:95:7f:00:2b:3d:8c:5b:25:89:
6c:10:18:7b:60:09:bd:47:f1:e9:4f:e0:ba:42:59:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:58:BB:B6:13:C4:B4:39:7E:DD:42:B6:D3:F1:A0:93:9F:B5:81
X509v3 Authority Key Identifier:
keyid:1F:32:68:AD:06:F3:AB:8F:34:6D:0D:E3:9B:D4:AE:AB:3B:65:84:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzJorQbzq480bQ3jm9SuqztlhNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3919d3-2139-4c42-b7d4-8a0c729893ba/1/HzJorQbzq480bQ3jm9SuqztlhNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7f:64:00:64:77:4c:96:4c:33:47:26:6c:38:a0:64:4c:c4:
b7:fa:8e:88:97:77:07:0f:98:a5:1a:5e:07:d7:2c:fe:e0:bc:
32:26:d1:71:77:cc:11:eb:8f:7a:98:d5:9d:16:be:e6:7b:1b:
b8:8a:81:06:e8:5b:84:2f:94:b7:ab:6f:76:58:b8:83:1e:fb:
2f:b4:3c:5f:17:09:b6:50:45:b5:c7:ae:41:07:0c:65:45:c1:
8f:0c:84:5f:e1:99:ab:34:94:58:6f:86:92:bf:da:17:17:fc:
94:fb:99:41:54:eb:7b:c8:ee:c2:00:69:42:b4:63:08:20:bc:
5b:71:9b:44:cc:61:61:2e:d3:63:8c:20:49:55:8f:5a:7e:2d:
0d:a0:ef:cb:74:c4:44:e5:ae:cc:a1:08:7e:b2:ff:01:48:d1:
48:c7:f5:b1:f6:ff:a7:f2:b8:9b:30:3f:93:23:a3:8c:45:1d:
f3:11:8e:85:37:5e:79:60:a5:a6:35:9d:a6:70:92:d7:99:a5:
a1:7f:91:c9:1c:69:f5:54:27:1f:d9:f6:68:de:0a:c8:06:f8:
f3:45:b5:cb:d2:b5:9d:79:f6:08:02:4d:94:26:4d:f7:af:fc:
27:7b:9b:97:dc:e5:83:32:a9:bc:c8:dd:9b:7d:15:8a:ca:cc:
d0:51:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:11 2025 by rpki-client