Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: yVLKsQSsDjTtw4GkjpiX6BaNsPCTIPNEJCojRgsofv0=
Subject key identifier: 49:DB:9B:4E:9A:45:89:98:A6:C5:8E:ED:A3:8C:4C:44:21:58:84:C2
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 0194BC3CB28B585902AC86DED6F12C529AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 0FD7
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: oRUn9doWVL2kDn6UaT7kLjy4L0uHr/c5MeRu+Ak1PUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b2:8b:58:59:02:ac:86:de:d6:f1:2c:52:9a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=49db9b4e9a458998a6c58eeda38c4c44215884c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:2c:14:01:dd:a8:e4:b2:80:51:4a:52:5c:
ee:da:e5:1c:c4:8a:b4:a8:80:c0:39:c7:20:54:ee:
49:b5:a3:a6:49:8e:3b:93:30:83:0e:c0:c6:c3:62:
75:54:0d:52:06:c2:d7:71:cb:f9:d5:56:b8:3d:8d:
fd:44:89:3f:71:89:85:2e:67:09:e1:88:64:dd:af:
5b:c7:71:d3:b4:77:64:c9:dd:13:3d:6f:35:4d:94:
2f:9d:69:e4:a0:e9:3c:ed:42:58:62:6b:6a:34:4b:
27:91:f4:35:8e:c9:ef:e4:2b:09:56:80:81:1a:7e:
0f:72:b1:63:30:93:73:fb:25:2f:5a:21:79:52:a6:
cc:46:31:77:30:c9:fc:f1:51:f1:e3:74:18:c1:83:
32:80:9e:3f:f4:22:d8:5e:03:47:26:fe:0d:fd:0b:
6e:1f:4b:1c:5f:2b:7a:76:25:8e:41:59:cb:72:d1:
bb:9b:cf:5c:69:2b:26:0c:12:92:44:eb:7f:79:93:
1d:0c:2f:6b:cc:85:5c:e4:a0:fc:45:1b:7c:c3:4e:
52:5e:d2:cf:be:94:87:7b:78:4e:a6:d0:35:c6:a3:
71:a1:ea:2b:7d:92:8a:4f:33:fd:97:fa:74:88:4e:
c9:a3:fa:44:61:3d:16:31:55:82:51:90:7c:eb:1c:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:9B:4E:9A:45:89:98:A6:C5:8E:ED:A3:8C:4C:44:21:58:84:C2
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:86:0f:65:c4:4b:28:48:5f:85:3a:af:54:57:5a:63:50:
71:77:14:4b:e7:22:cd:17:97:20:00:98:77:99:21:1d:42:b8:
fe:a4:67:41:02:a1:7f:cc:45:34:0d:f4:b3:d7:5d:6e:b9:70:
1f:c9:52:49:6b:17:32:aa:20:f6:b0:a1:63:7c:08:90:93:dd:
2b:83:8d:25:5f:a3:e5:31:1f:d9:23:e5:3b:0c:f7:59:f9:34:
86:ef:ad:ef:8f:15:ed:a8:e6:38:7c:e6:e9:ae:a5:8c:ca:61:
5b:95:8e:d6:1d:6d:85:df:a1:e6:5e:dd:3e:b4:09:66:ad:f9:
b5:1f:2b:fb:7e:d8:aa:95:71:f5:16:0f:a6:52:63:c6:3d:87:
02:04:5b:e8:5a:5d:e7:7f:be:db:a4:8f:ce:fe:5f:ad:92:27:
6c:b3:00:d1:36:8d:3f:e6:9c:c8:92:50:65:77:cc:95:88:8f:
f5:40:24:6f:fe:83:cc:d2:f6:ce:4e:1c:6b:97:38:2c:3a:c0:
36:0e:0e:61:ed:4d:2c:05:84:ec:51:82:2c:55:5c:cf:77:95:
b2:ed:06:a0:e5:d4:a8:4b:d5:0e:99:3a:1b:76:91:c5:8c:17:
1e:23:01:51:20:42:b0:3b:82:36:8b:dc:16:41:23:b0:c3:73:
2f:02:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:23 2025 by rpki-client