Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: 13Mw+QM/jXIsz5tsh++FxlZzbxvdCUSBhuWdnLOB4z4=
Subject key identifier: 49:F4:A1:66:92:62:8F:E3:31:4F:E7:5A:F3:F0:EB:CB:03:56:CC:E2
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 0195E0466BF3300993C80989CA7CA22030AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 096B
Signing time: Sat 29 Mar 2025 05:01:06 +0000
Manifest this update: Sat 29 Mar 2025 05:01:06 +0000
Manifest next update: Sun 30 Mar 2025 05:01:06 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: uIJJSZqNlIOfiWD5obflxEWLFKflgOIvhBofmhwU2Ho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:6b:f3:30:09:93:c8:09:89:ca:7c:a2:20:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Mar 29 05:01:06 2025 GMT
Not After : Mar 30 05:01:06 2025 GMT
Subject: CN=49f4a16692628fe3314fe75af3f0ebcb0356cce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:a1:23:8b:ea:1c:df:b9:89:6d:fd:a6:1d:
c3:33:4b:c0:95:e3:1f:3b:ed:d5:ff:97:69:c4:ec:
10:fc:f8:e9:ea:25:dd:03:40:8a:63:8b:99:06:c3:
56:2b:45:0f:da:ad:6f:73:ab:87:9f:de:ab:49:4c:
e7:23:fa:91:91:47:00:8c:13:41:b8:b9:a8:eb:7d:
10:d8:17:7e:3c:14:32:0b:9d:ac:11:70:a4:07:d9:
8c:cf:96:70:0a:d5:d8:03:b6:ca:b3:a1:fa:1b:5a:
ba:c2:12:db:7b:77:e5:8b:f8:c8:d8:42:1b:d3:9e:
ce:95:ed:1b:ab:96:ba:56:36:e6:09:4b:55:66:45:
af:ea:ec:36:e8:cb:b0:97:a6:10:af:23:7e:26:56:
ab:89:89:72:61:51:62:33:0e:b0:0a:7f:44:47:e8:
e6:0e:dd:4e:7d:56:da:4f:30:2b:72:cf:c7:f1:fb:
fd:1e:be:e5:b9:79:95:55:bd:25:64:0b:28:81:f5:
95:ec:07:6a:57:83:f4:8b:58:96:7a:d1:e9:c0:74:
55:2d:53:b1:8c:0e:15:73:5a:fd:74:a1:ca:f4:33:
c4:89:9e:f4:79:88:c0:1c:31:7c:97:3a:87:97:f8:
79:d6:6a:ab:4a:31:60:c2:0c:79:13:32:11:b6:94:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F4:A1:66:92:62:8F:E3:31:4F:E7:5A:F3:F0:EB:CB:03:56:CC:E2
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:26:9a:f6:b4:48:b1:34:16:8e:4f:5a:05:5e:18:a4:ca:
9b:7d:b7:af:1e:6c:36:93:28:bf:ec:5d:a3:1b:00:4c:bd:8a:
8c:d5:db:56:73:da:ce:5d:48:ca:e1:25:d7:25:c8:ae:f4:ed:
c5:db:64:55:9f:c3:ee:2c:2b:06:58:ce:f3:8e:c0:33:fa:99:
16:ee:25:d2:eb:bc:ea:2a:99:07:32:29:79:fc:86:29:62:d0:
3b:ef:99:a7:dd:cf:b1:68:1c:6e:8f:b0:f3:73:37:96:2f:93:
11:b7:1c:6f:6a:7c:bc:31:93:ed:cc:e1:38:40:b7:62:b1:47:
b8:36:99:11:e4:58:c9:5c:2b:d8:74:f8:28:f0:05:87:b4:91:
e5:ef:e8:1f:09:08:d3:d5:76:d6:1d:18:40:2c:0f:bb:93:31:
e1:b9:c0:78:0d:28:f3:08:6a:ea:0a:3a:d2:d6:1c:9e:01:99:
ba:a9:a9:a2:e9:54:a1:9b:f3:2c:81:e1:0e:e9:51:53:f8:45:
d3:35:46:bf:55:52:94:6e:12:c7:a2:6d:e7:53:64:01:79:66:
b4:07:8b:b1:c0:75:b0:e5:85:d9:54:64:c5:20:44:8d:f7:30:
84:4f:19:76:ce:8b:4f:71:10:2f:3d:28:e7:2c:76:5c:71:9f:
3d:fe:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:04 2025 by rpki-client