Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File: HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier: uZpFMQrILlor36zjBr84oVwUVn+HTJITkdc3bDjZr+k=
Subject key identifier: 97:D5:39:BE:91:D1:C4:75:C4:A6:72:37:74:43:50:06:49:24:12:B1
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer: /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial: 0194BD17C628EA7D9503FB2780730C9CA988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number: 010A
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: B+QeLsVjtSAZhCdfXwdkkgGVJGytzalDiD0fr/K6l4k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c6:28:ea:7d:95:03:fb:27:80:73:0c:9c:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=97d539be91d1c475c4a6723774435006492412b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:f2:86:10:5e:0e:51:68:f8:f2:30:28:42:
53:9f:53:d2:33:0f:f5:3a:03:7f:1b:b7:72:ce:5e:
60:36:a3:28:4c:ad:c7:58:44:8a:dc:e3:58:bf:71:
9c:f8:29:00:b9:4d:c2:34:3b:7b:df:63:fc:44:f3:
5f:e9:e5:54:12:5d:71:33:f5:a3:9b:74:fd:ef:01:
2a:b2:88:7c:52:52:61:0d:b0:13:45:d3:17:07:eb:
a4:e1:e6:6d:17:a2:f8:eb:8b:26:7d:54:a2:d9:5c:
b6:39:84:0d:10:20:2a:dc:46:9d:2b:25:fe:2f:52:
db:42:c7:5d:39:f7:7f:d9:60:93:9f:f0:74:0c:6f:
36:96:1c:22:4e:3a:54:66:b4:30:75:6f:0f:01:5e:
7b:37:ca:b6:83:41:b6:fa:e8:9c:8b:37:3d:3e:8c:
10:b0:77:75:bf:c2:7b:56:5d:1f:81:89:bb:bc:a5:
8a:3a:2a:a4:2f:a8:e2:67:c8:52:a4:9a:13:64:f7:
ee:47:94:b1:44:60:06:a5:8c:2a:84:55:f3:18:7d:
36:e2:a5:94:78:ca:85:50:c7:b2:b4:5e:d1:59:41:
e4:5e:b0:d6:1b:6c:04:a7:13:73:04:2e:dd:c0:42:
7d:6d:18:49:ae:9c:27:a4:a4:92:d5:b5:a1:0e:33:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:39:BE:91:D1:C4:75:C4:A6:72:37:74:43:50:06:49:24:12:B1
X509v3 Authority Key Identifier:
keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:4a:db:d0:31:09:b3:90:b8:64:01:9c:2d:12:6a:a2:31:
a0:18:d4:b0:d1:b2:97:7f:9a:c4:8f:5f:5f:31:cf:db:99:e3:
06:4a:15:f1:22:35:97:9e:4d:f7:63:72:f7:5c:92:ef:aa:bc:
01:2e:c0:29:8a:c3:17:2b:a9:ca:27:1a:53:94:d3:54:aa:4e:
47:6d:c7:5c:3b:84:47:44:1f:b8:ad:ff:b5:eb:33:6a:e3:d0:
15:4e:01:74:9c:bb:89:0d:04:9f:54:8f:4f:6a:d0:cc:bc:6c:
c7:89:40:a5:65:be:aa:57:5d:de:67:28:b1:c5:95:e4:72:ef:
4e:15:86:2e:70:7a:e5:d6:7f:0b:dc:aa:59:23:23:0d:da:d8:
0e:85:e0:a6:b9:f1:31:b9:4d:4d:2f:8a:11:a1:d2:b7:6d:33:
21:4c:c0:b8:20:cd:0c:59:71:1d:09:6f:75:d8:4d:3d:59:12:
d9:ab:80:51:10:7c:f4:8e:58:67:ae:ac:85:65:74:53:09:47:
49:72:63:22:36:c7:2c:8d:9f:b4:db:87:cb:cd:80:e5:03:bf:
dc:87:ab:f4:68:91:18:7b:48:79:72:70:95:ab:02:91:56:8d:
71:ee:01:48:f9:ff:60:77:44:d4:9f:cb:de:2b:b1:5d:fa:b1:
fd:d5:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:27 2025 by rpki-client