Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json)
Hash identifier: rbECAk7nwrnC27QPkEBysfVKaJesJmKVD3p8F/52CE0=
Subject key identifier: A8:DE:C2:92:BB:DB:76:73:44:24:12:98:07:50:75:31:5F:71:92:F5
Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Certificate serial: 0194BC3BBCAA3D3E431A98832CF2C46316D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
Manifest number: 0911
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: ZmG/ic/CQjMubrLQ9moQiuspU2PfN7Yn5SS9TQ7rKLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bc:aa:3d:3e:43:1a:98:83:2c:f2:c4:63:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=a8dec292bbdb767344241298075075315f7192f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:fc:ff:8d:69:b0:12:66:56:78:d8:c2:17:
a9:ec:bd:e0:85:2e:97:f7:4e:f9:8d:30:6d:0f:50:
76:bd:3b:00:d7:6e:05:b4:9b:17:3e:b2:8e:0b:e8:
b0:38:86:81:0f:1c:40:a6:5d:9e:d8:65:97:14:af:
47:7b:42:be:dc:9b:83:78:84:73:d1:8a:d9:2c:d7:
90:79:18:93:30:f6:cb:d8:7f:d9:51:d5:26:14:f4:
00:dd:44:cd:bc:e3:75:20:c0:fd:f5:cf:58:2a:95:
e0:5d:f4:6a:11:f8:71:f3:23:38:d9:69:8e:96:fd:
f3:90:49:2e:45:7e:7a:81:ad:a5:79:e3:66:8e:92:
b6:b0:a2:ca:f2:e8:27:6a:fe:d1:87:d8:c3:cf:4a:
96:c3:f8:72:45:c4:47:8a:e6:55:c8:b0:cd:9d:d0:
51:51:96:3c:45:c2:51:e5:ae:6d:4d:50:9e:85:98:
46:af:4c:24:b7:f9:ce:8a:dc:6a:89:d4:9d:ab:d2:
ae:80:75:23:86:52:83:51:f5:56:e6:06:f7:ba:f3:
69:ed:c5:38:ee:73:2d:d5:b6:6c:0c:7c:ea:cb:02:
2c:1a:54:f0:ab:a4:a0:5a:1b:eb:79:db:2f:aa:9f:
57:58:43:84:e6:03:0e:1b:1f:57:d0:fc:e7:b8:73:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:C2:92:BB:DB:76:73:44:24:12:98:07:50:75:31:5F:71:92:F5
X509v3 Authority Key Identifier:
keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:ad:09:e4:7c:51:ce:88:f8:a1:31:4d:46:16:e6:aa:a3:
5b:93:02:4d:e2:a1:02:38:83:25:d8:d7:69:86:0e:43:33:9f:
6e:d3:3a:44:0b:0b:82:bf:71:18:f9:f9:19:33:81:c1:a7:20:
aa:2d:d6:5b:31:0f:f4:01:51:f6:fc:3b:a2:40:d8:98:dc:95:
7f:44:78:1b:a1:75:ce:74:51:41:68:93:d0:ca:bc:77:2f:be:
a6:b8:fc:e6:23:16:98:6c:ac:dd:44:be:3c:62:e2:2f:34:dc:
a9:6e:9a:5e:fd:03:f7:d6:94:ef:8c:64:79:a0:0d:03:fd:ab:
79:96:da:0a:36:db:9d:ec:98:20:93:cb:05:ce:e2:3f:9d:70:
92:fe:a9:7e:ba:8a:5e:8c:a8:b7:cd:3e:85:43:20:fd:c6:0f:
ce:68:d9:0c:d1:a4:e6:5e:a4:31:98:ca:5d:c7:f1:fd:43:d0:
ef:27:a0:88:df:ac:97:85:c4:3a:fe:82:da:c3:d4:04:b8:1d:
5b:94:dd:6b:69:39:8e:ca:6a:63:0d:41:b0:9c:e2:1e:a3:b7:
4b:d0:0b:a6:86:eb:5d:39:ed:53:a8:7a:29:06:93:bb:bd:c1:
9b:3c:3c:59:a4:0d:65:69:6f:e8:0b:72:af:05:fa:65:8a:93:
4c:ba:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:08:41 2025 by rpki-client