Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e215ce-8de7-484b-baa3-8fffd8f5ebfb/1/hVEtGdN5Rs1MI2-JBGljV1H12QQ.mft
File: hVEtGdN5Rs1MI2-JBGljV1H12QQ.mft (raw, json)
Hash identifier: NVw2ir6BlhX8DjwAzsq636M7t6SrVSWo9hjI2Rzz/hI=
Subject key identifier: 65:C2:17:31:40:D7:F3:82:AF:47:58:93:58:18:8D:72:1C:D8:4E:A0
Authority key identifier: 85:51:2D:19:D3:79:46:CD:4C:23:6F:89:04:69:63:57:51:F5:D9:04
Certificate issuer: /CN=85512d19d37946cd4c236f890469635751f5d904
Certificate serial: 0194BC3C12590032F0C9843B4855DC28D4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVEtGdN5Rs1MI2-JBGljV1H12QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e215ce-8de7-484b-baa3-8fffd8f5ebfb/1/hVEtGdN5Rs1MI2-JBGljV1H12QQ.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: hVEtGdN5Rs1MI2-JBGljV1H12QQ.crl (hash: PnRUgbpo4JBIApmAGLSRqYuSiYEmf+PYgpjtnwME7CA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:59:00:32:f0:c9:84:3b:48:55:dc:28:d4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85512d19d37946cd4c236f890469635751f5d904
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=65c2173140d7f382af47589358188d721cd84ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:d8:10:9c:a6:48:c7:9c:37:4b:21:12:be:
96:98:ed:ba:e2:c8:22:0a:d2:6e:d3:2f:ce:dd:e2:
7c:f3:7f:0d:cc:78:d8:78:7a:72:78:8a:70:4b:31:
1b:b0:a5:c5:c5:43:b0:80:cb:de:27:78:52:fe:22:
0f:0b:ca:68:06:a4:e2:e3:0b:d5:1b:2c:19:9b:a1:
4e:ee:2d:cf:e4:0d:f5:5e:df:fd:2d:b9:ea:21:73:
82:19:8c:b6:c0:a0:66:51:37:69:cc:c0:80:48:b9:
c6:86:87:10:b4:b5:66:e4:17:92:52:57:6d:48:33:
b0:ce:de:fe:39:2a:af:48:a7:b5:c3:b4:53:ab:a9:
11:fe:9a:0e:4d:70:65:bf:63:6f:84:5f:e4:8b:44:
59:33:56:ea:78:47:ab:c4:15:71:1d:7c:5e:0d:e9:
89:c6:90:f3:02:eb:6d:1e:fb:da:6d:fa:73:b3:ac:
a8:b2:62:81:2c:09:84:a8:b0:2f:38:5f:70:12:64:
66:fd:aa:30:c4:d8:b5:ee:30:90:89:61:10:60:74:
18:29:b8:3b:e9:6a:6b:0a:1a:8f:c7:cf:81:94:ab:
77:19:37:dd:7c:b1:21:ad:1c:09:ac:5a:5e:8d:3e:
b7:43:18:db:25:b8:80:69:31:7a:54:97:84:5b:c3:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:17:31:40:D7:F3:82:AF:47:58:93:58:18:8D:72:1C:D8:4E:A0
X509v3 Authority Key Identifier:
keyid:85:51:2D:19:D3:79:46:CD:4C:23:6F:89:04:69:63:57:51:F5:D9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVEtGdN5Rs1MI2-JBGljV1H12QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e215ce-8de7-484b-baa3-8fffd8f5ebfb/1/hVEtGdN5Rs1MI2-JBGljV1H12QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e215ce-8de7-484b-baa3-8fffd8f5ebfb/1/hVEtGdN5Rs1MI2-JBGljV1H12QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cd:bd:ce:8f:b3:2f:f7:c6:c2:29:13:e3:f7:98:84:70:29:
5a:b2:02:74:f3:76:d1:de:8c:86:5a:94:5c:b6:3b:91:2d:d1:
29:97:30:71:3d:70:90:cb:fa:a3:93:4d:84:67:e8:bd:26:76:
f5:f9:f3:5d:bd:81:b4:ba:32:4e:10:85:3e:4e:3c:c8:4e:0c:
72:d6:83:e9:8f:f9:f9:44:b3:ad:ac:b1:6f:66:b8:17:5e:99:
f4:69:62:f1:9a:ba:14:93:50:8b:d4:44:cd:ef:b1:c5:ae:45:
8a:50:69:02:eb:57:9c:11:c3:3a:f1:19:6b:93:66:84:4b:3f:
6c:f0:da:06:f6:0f:74:92:7a:e1:c1:f3:b0:48:37:1d:c6:ee:
ba:72:6f:52:d0:5e:97:5f:ba:5a:80:4b:aa:f7:6d:2e:1d:fa:
31:93:56:05:c4:41:40:10:2b:a7:fb:4b:0f:cb:c8:58:a7:c2:
a3:d4:92:d6:f5:58:96:bc:5b:a5:8c:96:a9:ba:1b:2b:1c:0b:
84:fe:6b:6d:bd:88:42:bc:ea:7c:9c:d0:15:ab:f7:a8:cc:0b:
cb:b5:de:4e:65:b0:bc:1e:41:8c:cc:0c:e0:3e:c9:f7:9b:31:
9d:91:8d:9f:ee:f1:e2:78:3f:88:1b:36:4c:1d:35:af:b8:5a:
c8:53:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client