Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: jgAC4DXn+IZKyVzRZU5mqx5itxLQQ3Ta9btt0tKCH8Q=
Subject key identifier: 85:86:6C:29:E3:D8:2A:55:4C:C9:AE:BB:EB:0B:4B:3F:82:A1:EC:74
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 0194BBCDCFD7BA60DCADAB9B794B0C107C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 0CFA
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: aWb7j6jXHT58qKWP1Km1tsDRwr0uD+SqY37Z7jWQlU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:d7:ba:60:dc:ad:ab:9b:79:4b:0c:10:7c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=85866c29e3d82a554cc9aebbeb0b4b3f82a1ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:d1:6c:27:29:75:ad:6d:c1:41:bf:43:d5:
e4:d5:62:97:4f:f6:74:58:f0:b3:27:e7:ec:bc:4c:
f8:25:47:c8:9f:10:9a:14:fd:13:f5:99:b0:59:07:
f0:53:08:74:3e:e2:28:37:94:4f:78:b2:49:ec:73:
34:39:43:55:8d:84:c9:3d:bb:dd:02:37:2b:11:9c:
0c:1f:55:5f:aa:6c:5b:fe:65:c5:54:1d:48:e2:c5:
18:21:5e:6a:4c:e5:23:02:e9:c6:27:31:0c:77:fe:
a4:92:dd:49:03:23:53:5f:34:91:3e:f9:43:6e:b1:
cf:a5:19:ef:4d:a0:d6:ad:7b:ea:d9:8c:08:da:c2:
5e:d7:e0:67:78:a5:72:ba:97:6c:e5:86:8c:ac:f4:
6f:ad:ed:bb:c8:8b:d2:c4:6e:3f:57:d8:9e:52:8c:
56:f4:85:c9:a5:fb:54:3a:36:58:05:b1:31:1b:8e:
eb:3a:a7:14:22:d8:fb:55:6c:37:7b:49:d4:12:cc:
83:7f:eb:4b:81:3e:c7:35:4a:fb:1c:cd:13:21:61:
ca:e9:18:af:4b:f6:03:29:f2:5c:21:27:9c:3c:af:
fd:c0:7d:17:5e:b5:fd:d4:99:c1:2d:28:54:38:f1:
6a:1e:0f:33:6a:87:98:31:60:28:6b:fa:2e:1c:b8:
52:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:6C:29:E3:D8:2A:55:4C:C9:AE:BB:EB:0B:4B:3F:82:A1:EC:74
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:3f:72:18:34:fa:ef:c9:97:6a:aa:2a:b3:e4:54:13:4f:
32:1f:2d:f1:75:41:44:cd:1e:ac:b1:84:73:b4:17:7a:79:9f:
42:20:1f:24:77:30:1c:cd:47:44:42:cc:5e:a4:2e:44:07:c9:
bf:7c:a3:ac:c4:81:32:91:aa:0d:74:b5:5a:24:ef:be:1d:76:
8a:f0:35:50:93:5c:62:aa:b4:9c:fb:2a:88:11:93:e5:8e:54:
09:31:22:ed:67:66:88:5c:f7:c6:2a:76:bd:3a:36:4f:58:dc:
e4:99:29:04:95:11:fe:b1:80:9b:e4:a8:20:ee:a1:12:95:ff:
77:3f:03:80:37:57:42:8b:e6:7e:ea:9d:f8:f5:d1:7b:88:79:
34:c3:e1:38:bd:05:4a:38:8f:aa:c6:a1:38:51:f2:c6:2a:f6:
96:06:a0:c5:45:f2:a3:8a:35:d5:93:57:ac:54:f2:ba:e7:84:
56:8d:f3:9c:07:d8:77:22:97:19:1d:74:e0:79:a1:b0:1d:ae:
ce:30:1d:9d:4b:a5:b8:aa:d4:d6:39:ff:e4:21:b3:4f:c0:2e:
32:4d:18:20:40:2f:06:a8:c1:ca:e7:df:c8:f9:89:49:43:5c:
58:ac:31:3a:40:2f:6f:70:d4:f9:6c:80:aa:b0:db:0a:74:7c:
16:05:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:36 2025 by rpki-client