Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
File: hLBJ87D-hTTmNyFjXrZivHazkrs.mft (raw, json)
Hash identifier: crjWX3BFki1KR6vhKOEc5VmTGa2ozMkrx4a549X+CWs=
Subject key identifier: 3F:19:A2:69:59:90:94:C9:FA:56:8A:62:D9:D7:28:C3:C4:61:8D:9B
Authority key identifier: 84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB
Certificate issuer: /CN=84b049f3b0fe8534e63721635eb662bc76b392bb
Certificate serial: 01955A2AF2DD74A4CE557E6EBA361112EC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
Manifest number: 02F8
Signing time: Mon 03 Mar 2025 04:01:58 +0000
Manifest this update: Mon 03 Mar 2025 04:01:58 +0000
Manifest next update: Tue 04 Mar 2025 04:01:58 +0000
Files and hashes: 1: hLBJ87D-hTTmNyFjXrZivHazkrs.crl (hash: IrAEwVtV1v000bjciGDkYOszUpbhb1wXKTp4cRHGmjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:2a:f2:dd:74:a4:ce:55:7e:6e:ba:36:11:12:ec:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b049f3b0fe8534e63721635eb662bc76b392bb
Validity
Not Before: Mar 3 04:01:58 2025 GMT
Not After : Mar 4 04:01:58 2025 GMT
Subject: CN=3f19a269599094c9fa568a62d9d728c3c4618d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:46:4a:ae:8c:48:25:48:b5:2e:76:21:d4:
4e:4e:d1:18:01:86:57:df:66:ec:70:4f:63:e1:4d:
47:2e:c1:2c:0c:b3:a1:84:c7:67:4f:2c:5e:0c:dc:
b2:b1:22:42:d3:ed:03:fd:2e:4b:4f:36:2e:24:80:
2e:a5:5f:3e:48:be:cc:f6:ac:d2:0f:c8:d3:c2:c8:
1c:05:9f:26:34:ff:93:bd:5b:b5:aa:ad:e9:72:40:
f3:55:e8:0c:2a:8a:50:43:9e:0c:b1:e4:d7:ae:9e:
cd:0c:a2:85:a4:8c:65:f2:32:30:40:f4:3f:44:20:
a4:fa:12:cc:4b:5a:88:84:cb:5e:e0:f2:0a:44:ef:
c2:d4:42:c5:92:27:da:e5:36:e0:31:7c:fa:b6:86:
8d:96:cd:5c:59:ea:51:a2:33:88:76:09:1e:54:87:
16:51:d7:20:25:6d:6d:8e:50:8c:18:aa:a0:51:03:
fd:f6:45:8e:1e:22:eb:2d:7c:a4:80:49:ae:1f:33:
79:8e:64:4a:b2:5b:10:12:ec:49:26:cf:b5:ab:b2:
23:3d:c0:c1:6e:1e:13:c6:1f:23:03:78:94:51:3a:
48:da:37:81:33:14:ee:41:bd:b9:d1:c3:d5:48:64:
14:4a:de:de:22:c0:2c:f5:ef:7d:a4:c7:81:43:ba:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:A2:69:59:90:94:C9:FA:56:8A:62:D9:D7:28:C3:C4:61:8D:9B
X509v3 Authority Key Identifier:
keyid:84:B0:49:F3:B0:FE:85:34:E6:37:21:63:5E:B6:62:BC:76:B3:92:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLBJ87D-hTTmNyFjXrZivHazkrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/db7277-438a-457e-a9e7-027fe3451a38/1/hLBJ87D-hTTmNyFjXrZivHazkrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:75:df:a6:37:02:c1:ba:8a:3e:74:bd:df:59:b9:ac:2e:64:
2a:55:88:25:47:9c:4a:46:23:ed:0b:69:73:ab:f3:f3:92:a1:
79:df:99:e9:60:a3:05:03:68:c8:be:fd:7b:76:a9:f0:0a:47:
37:33:61:22:af:14:ef:6a:47:7e:05:56:e7:11:f8:b7:df:ed:
0f:83:8c:46:e2:fd:b0:97:0a:8a:ab:19:46:66:f6:77:d1:7f:
12:3d:d2:f3:8f:76:ca:d5:f4:ba:0e:e1:12:e1:b2:31:6b:a9:
65:72:9f:aa:48:f4:b8:00:d1:d8:09:2e:b9:f9:58:a8:ff:e5:
e5:d4:28:6e:bc:0e:f6:f1:6e:68:19:17:97:c7:74:8d:e9:28:
74:6d:d1:96:dc:95:c9:53:59:3f:d8:19:85:d1:f9:39:65:6b:
59:18:33:06:f4:3a:da:5e:8e:3e:bc:e1:5d:75:93:fa:88:18:
a1:0d:31:a9:e9:2f:df:6b:ca:c3:18:5d:74:70:1d:26:57:2a:
49:fb:cf:7d:78:fa:b7:35:c9:97:6a:b7:1f:f7:88:5b:9b:4f:
dc:57:3d:8d:4b:cb:06:1b:42:0d:42:bd:59:56:4f:e7:aa:19:
0b:66:ed:9e:f3:e6:c7:10:e1:02:8c:7a:47:60:bb:58:94:12:
a4:4f:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:07 2025 by rpki-client