Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
File: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft (raw, json)
Hash identifier: cMIkDNaPYsWrTr6KSCkSEUgiOco17f+RUvS3779hMNM=
Subject key identifier: 88:45:77:A5:C1:F0:FB:EB:C1:EC:E3:3F:5F:53:B5:02:03:5F:41:05
Authority key identifier: 87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
Certificate issuer: /CN=8737f3371adbad0e23d90293f8935361edc48c79
Certificate serial: 019413CB55FB1B610276A1631E9F8A0F7C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
Manifest number: 04A1
Signing time: Sun 29 Dec 2024 19:01:20 +0000
Manifest this update: Sun 29 Dec 2024 19:01:20 +0000
Manifest next update: Mon 30 Dec 2024 19:01:20 +0000
Files and hashes: 1: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl (hash: 4kGQPKgmhk4UN8KpM+6NHS5rtS1sIv/Gwz3VFXsfjbQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:13:cb:55:fb:1b:61:02:76:a1:63:1e:9f:8a:0f:7c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8737f3371adbad0e23d90293f8935361edc48c79
Validity
Not Before: Dec 29 19:01:20 2024 GMT
Not After : Dec 30 19:01:20 2024 GMT
Subject: CN=884577a5c1f0fbebc1ece33f5f53b502035f4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:f7:2b:c6:b6:0f:73:8c:4b:03:20:7e:b7:
f4:6d:90:24:7f:c4:61:ba:79:26:e0:63:67:83:5b:
34:1b:2a:41:a0:7d:25:c8:ae:f6:f0:f3:17:b9:0b:
9d:56:e1:1e:9c:19:3b:0c:0f:e6:ed:c1:e1:04:8f:
16:c2:73:61:21:e6:48:51:09:73:3c:16:2a:cf:f2:
f0:8a:0c:02:d3:cf:57:29:d9:26:5e:42:f4:bf:5a:
59:65:85:5f:d3:45:ed:fe:b0:4f:e5:08:fb:ba:34:
8a:1e:9e:c8:b0:24:a3:1f:a5:3f:bd:60:d9:5f:61:
38:43:c7:2e:53:dd:13:d8:e7:1d:d9:00:00:92:a2:
13:f3:31:6a:1f:91:3a:4c:31:d3:f7:36:88:2b:e1:
55:a9:17:7a:e4:b2:04:77:90:98:61:11:05:c3:f7:
37:cb:d4:62:bf:24:7c:58:b8:09:0c:68:c8:c5:ea:
cd:2e:62:04:4b:36:66:b2:0d:bf:1a:d8:20:81:09:
42:02:e2:6b:70:12:8f:c3:60:62:ad:86:c0:97:b6:
67:17:d5:51:0b:1d:5e:d7:b1:96:be:dd:d0:f6:65:
ff:0a:3a:67:9b:08:f7:8e:91:af:ba:48:a6:91:97:
c6:83:0d:56:2f:68:71:fe:97:59:96:04:05:15:ea:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:77:A5:C1:F0:FB:EB:C1:EC:E3:3F:5F:53:B5:02:03:5F:41:05
X509v3 Authority Key Identifier:
keyid:87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:06:b7:af:f7:be:28:83:04:14:c9:bd:6b:a9:72:a6:7d:47:
0a:e3:a7:66:64:19:23:00:61:83:85:15:fd:44:88:96:8b:9d:
6a:1d:b7:c7:34:02:65:cd:81:d8:10:23:3b:58:2c:f2:e6:95:
8d:84:89:3c:50:f4:c9:66:72:77:2b:b1:fe:f3:f2:51:0a:0f:
99:85:4f:21:50:a7:2c:56:de:7a:bf:45:50:cb:ac:64:98:6a:
5f:c2:db:24:f6:07:1d:2b:96:d7:af:a2:32:b3:d7:1d:db:b6:
24:ef:b1:7e:2b:8e:c3:95:f8:e3:72:49:e8:5d:19:ca:86:67:
53:11:11:8e:86:73:0e:7c:fd:2b:7b:7c:a2:c0:56:bd:d6:08:
11:c7:ce:7b:ed:bd:ed:43:d1:43:ad:b2:05:e1:fe:d1:6d:ef:
86:be:46:ab:53:48:4d:2b:5c:3b:20:58:e4:ab:72:3f:ca:2b:
1f:08:f0:ac:db:00:e7:95:f6:0c:cb:04:fa:e5:b5:87:0e:9e:
d1:17:14:e3:0b:8e:f8:92:0a:7a:cd:a0:f6:43:41:f2:0d:45:
91:04:04:0e:3c:48:d9:c9:03:13:35:d4:31:25:41:5f:65:8c:
3a:cc:7d:3a:dd:b2:27:47:f3:ca:af:08:d2:b9:94:a4:6d:81:
aa:7b:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:45:46 2025 by rpki-client