Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
File: hprNGeI6gWZEutDooSuG4SiK0zw.mft (raw, json)
Hash identifier: qvPgeQD+RBTztSWPtFOQZzBQYbE+9rtqyaL0/0yc9mI=
Subject key identifier: 5A:B1:BC:87:AC:D7:BC:A5:23:13:D1:F5:A5:BF:DB:BC:4E:BD:45:E8
Authority key identifier: 86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
Certificate issuer: /CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Certificate serial: 0194BBCDEFC1505F0681EAC91C65E670413A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
Manifest number: 0E13
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: hprNGeI6gWZEutDooSuG4SiK0zw.crl (hash: +UoB2y7qF2D8LUUKUxbVzubrh36PhoPBrX87p5CN324=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ef:c1:50:5f:06:81:ea:c9:1c:65:e6:70:41:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869acd19e23a816644bad0e8a12b86e1288ad33c
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=5ab1bc87acd7bca52313d1f5a5bfdbbc4ebd45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:4b:63:a9:87:a4:3e:9d:6b:d4:e8:ce:ef:
02:0b:c7:90:81:94:27:54:2b:a6:e7:ea:c1:05:4b:
b8:be:d1:67:9c:f2:11:cb:0f:07:35:e2:c0:c9:32:
96:41:e0:b4:85:72:60:e3:fb:89:ed:40:88:fb:c3:
61:4b:4c:76:81:62:bc:d5:e2:4c:78:f5:80:43:97:
29:b3:e0:4c:a7:93:5c:0c:e6:f5:96:1b:2c:32:f0:
de:96:30:b8:e7:e8:56:e5:1a:56:a4:6d:41:a5:40:
aa:d4:81:08:ba:ba:70:42:b3:b2:4b:91:48:65:c8:
0a:07:8e:24:c4:83:1b:e6:ec:e8:6b:42:7d:91:5e:
bb:53:76:8d:62:2e:b0:e6:54:ea:d5:df:8f:12:35:
fd:1b:cb:52:dd:58:12:a6:57:c3:79:e3:cc:1f:13:
a8:5d:8d:d0:1e:be:8a:9a:69:a5:31:be:70:7d:6d:
80:7c:5c:1b:09:f7:d2:0f:8f:91:18:13:9b:0d:e2:
b4:32:1d:ac:d0:02:8d:45:bc:95:6d:4c:da:33:2b:
50:c4:ff:81:89:df:6c:c4:56:ab:dc:99:50:bb:ac:
7b:c4:b1:e4:07:ab:be:6c:f4:e1:9e:96:5e:7f:4e:
4c:b8:ea:29:da:13:b0:81:43:1a:26:d4:4c:35:b7:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:BC:87:AC:D7:BC:A5:23:13:D1:F5:A5:BF:DB:BC:4E:BD:45:E8
X509v3 Authority Key Identifier:
keyid:86:9A:CD:19:E2:3A:81:66:44:BA:D0:E8:A1:2B:86:E1:28:8A:D3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hprNGeI6gWZEutDooSuG4SiK0zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5911f7-2031-40bb-b441-7fcf015da0a0/1/hprNGeI6gWZEutDooSuG4SiK0zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:21:b1:23:12:63:63:95:12:48:51:1b:b5:58:b1:4e:1f:04:
69:19:e3:32:b6:42:4b:43:e3:02:95:13:b1:4f:3e:e2:88:af:
cb:d6:69:1d:8d:5b:61:f7:31:35:1e:c6:a0:d6:de:a4:7e:66:
fd:25:59:44:6d:09:80:c7:67:8d:09:87:6e:86:ab:ec:9a:39:
d3:be:4f:7c:54:4d:34:3d:60:ff:bb:31:eb:54:b6:82:63:28:
19:81:fe:4e:90:44:08:af:64:61:6c:be:05:15:53:3d:45:31:
a9:fa:b6:b4:9b:6c:bc:54:71:95:ec:70:b7:7c:c3:7a:55:62:
9b:62:a5:21:dc:0f:c8:54:62:91:ed:5d:33:f2:85:6c:ca:af:
de:08:d8:81:0f:c8:75:82:f8:87:b8:36:8c:ee:6f:79:6a:f2:
56:99:93:f1:bf:1a:2d:f0:46:eb:64:a3:57:54:d2:c6:6f:04:
6b:fa:c9:16:40:c3:2f:e8:47:1e:4d:a2:2c:ff:0d:3c:07:87:
1d:86:ee:12:6b:16:5b:63:2e:1c:0a:32:eb:98:2f:95:e1:a7:
98:b9:9f:4f:83:02:31:00:60:a8:09:9b:19:b8:06:79:41:c1:
df:18:cd:0e:77:36:10:57:c9:7a:12:ac:e5:6a:40:f6:d9:9f:
61:72:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:05 2025 by rpki-client