Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
File: Hj6MH98awCVXDfFMQOJvZqi809U.mft (raw, json)
Hash identifier: 2Wz2wC3l43xAhX9OoSIGV3enPGZZWuTZ82WFvOnEm3k=
Subject key identifier: 01:48:DE:6F:23:7C:A2:06:F6:8B:85:9E:CB:E6:B3:E9:EE:65:67:85
Authority key identifier: 1E:3E:8C:1F:DF:1A:C0:25:57:0D:F1:4C:40:E2:6F:66:A8:BC:D3:D5
Certificate issuer: /CN=1e3e8c1fdf1ac025570df14c40e26f66a8bcd3d5
Certificate serial: 0194726C267BBD20756A91668069E2E5770C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hj6MH98awCVXDfFMQOJvZqi809U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
Manifest number: 0B2D
Signing time: Fri 17 Jan 2025 04:01:17 +0000
Manifest this update: Fri 17 Jan 2025 04:01:17 +0000
Manifest next update: Sat 18 Jan 2025 04:01:17 +0000
Files and hashes: 1: Hj6MH98awCVXDfFMQOJvZqi809U.crl (hash: dIvCVRmcNtqVT9Eih+cb9wexyRFLvlo+W+Uc2I3j8Go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:6c:26:7b:bd:20:75:6a:91:66:80:69:e2:e5:77:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3e8c1fdf1ac025570df14c40e26f66a8bcd3d5
Validity
Not Before: Jan 17 04:01:17 2025 GMT
Not After : Jan 18 04:01:17 2025 GMT
Subject: CN=0148de6f237ca206f68b859ecbe6b3e9ee656785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:c1:4c:00:52:0d:4a:7f:c6:5c:1b:2f:3a:
bf:58:60:a1:0e:2c:ee:c7:db:4b:a4:b5:40:04:21:
1c:01:cd:28:ca:f5:64:db:3c:fc:e6:95:17:c1:0b:
71:4b:3b:7c:31:cc:25:b3:49:0d:24:db:c9:54:2c:
b6:9a:86:44:73:f1:05:9b:2b:d3:f6:e1:2c:e8:7a:
fb:b0:b5:89:7c:0d:dd:08:96:79:f3:ee:29:ce:d5:
4e:2a:1f:b6:7a:c0:25:d6:30:b7:87:bc:94:a7:00:
1f:9b:04:7d:4f:fb:0d:0e:7a:17:df:6f:7e:43:a7:
34:4b:2c:8d:e5:d6:d9:96:86:c4:0c:ad:7c:fd:5e:
52:5f:be:58:71:9b:c4:00:27:27:92:e8:db:61:f8:
05:ea:40:c5:18:3a:12:6a:9a:c8:10:44:4b:c6:ed:
51:81:3c:92:4a:7a:df:f1:f2:16:2e:75:09:5b:e0:
0f:20:48:3b:35:90:02:7f:f3:5e:27:4c:97:27:1f:
ee:64:b5:81:33:e5:8c:1c:63:1d:4c:6e:90:74:ed:
60:2e:2c:0a:64:52:15:96:55:29:14:34:9e:61:e9:
4d:ed:56:f9:1d:21:eb:c7:4c:22:9f:dd:33:97:07:
ea:fd:d4:70:74:33:34:25:9b:b5:0e:d3:3a:7a:96:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:DE:6F:23:7C:A2:06:F6:8B:85:9E:CB:E6:B3:E9:EE:65:67:85
X509v3 Authority Key Identifier:
keyid:1E:3E:8C:1F:DF:1A:C0:25:57:0D:F1:4C:40:E2:6F:66:A8:BC:D3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hj6MH98awCVXDfFMQOJvZqi809U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/8fc05e-8e8a-4fa1-8008-f8da5ad8a219/1/Hj6MH98awCVXDfFMQOJvZqi809U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:23:f4:d0:5a:72:e4:ec:08:28:91:5b:9e:6e:34:41:d6:49:
db:3c:c5:48:08:a6:24:71:8f:94:b2:ae:e5:79:a0:ff:06:0e:
81:0b:8c:37:62:af:ac:19:3c:9c:25:ee:72:93:fc:ae:e7:e2:
de:0d:c7:48:59:53:20:3c:c9:1f:bc:df:c1:0c:f1:38:f5:66:
bc:35:23:70:e0:13:2e:91:a0:04:21:bf:5f:6a:0a:bc:73:25:
24:50:9e:9f:66:2c:69:ff:73:b8:70:f4:73:d9:33:71:fe:c7:
f2:e3:7e:1d:f7:d5:ab:9a:ef:67:62:bd:df:d1:0f:30:f7:cb:
30:5b:39:ee:a9:75:2d:bc:1d:0f:0a:da:22:ef:51:d8:a3:0d:
c1:d0:40:58:65:ab:0d:82:31:ff:28:de:71:a6:7c:85:81:19:
73:a4:3f:17:e1:ab:41:c3:bb:24:1f:c3:71:0f:74:99:8d:c6:
1a:ff:c1:b4:7b:89:79:7b:6f:83:a1:e3:e8:84:2e:ec:e7:5e:
3e:f7:90:01:3c:ad:e9:a1:7c:0e:bd:58:4b:6a:85:4e:80:8d:
fb:95:3d:22:11:73:4f:18:f3:b0:35:a9:06:ab:ce:c9:7a:b2:
f3:23:0a:4f:19:5c:3b:48:c1:d2:86:44:9c:79:01:27:5b:c1:
34:a4:c3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:58 2025 by rpki-client