Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: RGBZDKw2hhPnJBJWKyddR15pmkfHYRX45u4whS8b+YU=
Subject key identifier: DA:55:02:D2:7F:4E:B1:F7:76:0C:5E:D9:2D:F3:9C:65:CD:28:52:53
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 0194BCE07694C066F0CE8002BD24B8861217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 0236
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: TZKn2jpcnQ3ZKDJYkHPhyrWpsxSBo0bUMKw9PtVEC34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:76:94:c0:66:f0:ce:80:02:bd:24:b8:86:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=da5502d27f4eb1f7760c5ed92df39c65cd285253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:41:7a:28:de:3e:10:5f:1f:70:f9:1b:bd:
61:e2:c2:7a:c5:1e:a0:7c:d4:93:e1:62:89:ba:4c:
98:e5:c6:2c:a9:98:d8:35:10:bc:2e:a5:9b:40:29:
2e:66:93:41:32:26:3f:57:d5:a7:ff:b3:ca:45:23:
a0:25:f0:eb:12:63:a5:5b:f7:14:68:6e:5a:bb:cd:
69:bb:03:95:82:9c:e3:5b:5a:e1:5c:92:f0:63:5d:
15:e0:5a:f9:df:64:fc:2f:0b:93:33:7e:50:f4:13:
2b:de:43:6b:61:eb:2f:91:06:04:25:a2:62:41:35:
e3:99:d8:d9:6c:e2:7e:f6:cd:d3:13:02:fc:fa:bb:
85:60:2c:2f:95:4b:d2:a0:06:0e:37:62:4c:2f:f6:
fe:82:fa:b7:b2:8f:d6:2a:3f:4a:27:12:18:c5:c3:
43:14:b4:6d:8b:7c:28:11:e4:9d:f3:6c:58:92:6a:
4c:1e:f9:35:ae:3a:80:a0:91:c0:62:a6:d9:cb:77:
9b:f8:cc:e9:78:8b:81:88:79:bb:61:32:8f:f9:87:
fa:c1:bf:4c:4e:09:93:e5:f4:e0:d9:ef:03:5e:83:
6e:3e:98:30:f9:e5:de:d3:94:17:56:3a:44:5d:15:
e0:6e:ca:79:cb:1b:ca:3c:f0:0e:99:af:0d:42:ca:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:55:02:D2:7F:4E:B1:F7:76:0C:5E:D9:2D:F3:9C:65:CD:28:52:53
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:a1:a6:bb:8e:84:50:f9:2a:be:3e:d8:fc:93:09:0a:02:
1a:4f:bc:f4:ca:c3:86:1a:46:3f:de:55:49:aa:1f:7e:dd:d6:
e4:52:94:f1:89:05:2e:3e:74:6e:79:69:cb:c1:dd:db:77:b1:
92:e0:fc:06:b2:4d:5b:5f:ab:c2:5a:6a:70:82:20:64:81:c2:
89:13:77:0e:6b:e4:36:a8:83:15:02:5e:aa:23:94:cd:73:e5:
12:00:9d:1f:61:45:e3:04:c3:37:c4:47:8d:f4:ce:56:6d:bb:
c1:a5:e8:18:39:26:96:b2:68:7b:c8:dc:e4:b4:85:51:15:65:
94:9e:56:b3:63:57:4e:fb:f1:db:1a:10:fe:82:2b:14:74:a1:
06:a3:65:a1:1e:26:df:5f:40:e7:3a:c7:8d:15:34:5b:2f:a4:
c7:a7:a6:21:bc:b1:7a:e7:0f:10:13:e3:3e:34:71:53:45:0d:
2a:10:02:73:30:8d:e4:d3:60:95:e0:30:ce:82:34:c3:69:4a:
ca:1a:12:37:e3:15:1d:57:9f:ff:76:88:c2:74:6d:ee:8b:f6:
b0:21:85:07:f4:bd:da:af:87:2e:8e:ef:e1:5f:c4:dd:0f:1e:
40:0e:bb:f2:a9:09:05:35:69:f0:99:44:50:c1:34:5d:f3:49:
28:2f:b4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:26 2025 by rpki-client