Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
File: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft (raw, json)
Hash identifier: gmDCfklsazc1DZXnOMxUveOGdzMB0H9QawaybZrRiZQ=
Subject key identifier: 3C:53:05:D3:9E:91:D7:23:5F:E8:D8:DD:F4:2C:DC:05:96:83:03:0C
Authority key identifier: 87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
Certificate issuer: /CN=8737f3371adbad0e23d90293f8935361edc48c79
Certificate serial: 019415BA83F4DE66C09E58011FAB6FA7C3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
Manifest number: 04A2
Signing time: Mon 30 Dec 2024 04:02:12 +0000
Manifest this update: Mon 30 Dec 2024 04:02:12 +0000
Manifest next update: Tue 31 Dec 2024 04:02:12 +0000
Files and hashes: 1: hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl (hash: 1yEvQrZ22CTZQcF4jUjyXViV+8/Cstgu132nrB5609A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:ba:83:f4:de:66:c0:9e:58:01:1f:ab:6f:a7:c3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8737f3371adbad0e23d90293f8935361edc48c79
Validity
Not Before: Dec 30 04:02:12 2024 GMT
Not After : Dec 31 04:02:12 2024 GMT
Subject: CN=3c5305d39e91d7235fe8d8ddf42cdc059683030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:75:c8:c4:d2:9c:79:23:3c:c4:11:88:5b:
69:50:f3:5b:34:44:54:66:58:0f:67:6c:3d:13:5d:
80:4a:b9:5b:e0:48:43:6d:eb:f8:61:87:c4:66:99:
7d:2b:11:f9:29:cf:9c:db:55:95:a8:cf:ab:92:af:
6a:8b:f2:2a:74:06:04:30:4c:9b:08:b6:ae:ae:87:
6e:60:9c:bd:99:08:af:fd:8c:8d:42:e5:bc:6e:05:
3c:cb:73:6f:ce:19:d9:86:99:57:64:73:06:7a:5a:
d1:59:c0:fc:69:63:23:6b:17:82:24:df:6a:b4:05:
f4:65:df:77:5f:ed:04:02:98:7d:7e:be:33:ca:20:
87:48:27:cd:ba:8f:9f:01:ec:0e:60:40:6f:c1:f6:
32:1b:1f:e0:00:2b:9e:b0:74:ad:9d:21:43:0a:0f:
7d:17:52:d8:46:17:e1:e0:da:9f:16:00:6c:11:9c:
c2:23:f8:cb:b7:c5:ca:ed:4d:67:68:a2:4d:5c:88:
f1:c5:9b:8e:a3:a3:3a:24:aa:b3:22:90:0f:91:d7:
e2:81:2e:f6:3f:2a:67:a9:51:c7:5f:b2:fd:66:f0:
98:f1:ff:96:73:cc:7a:c2:8f:99:6f:96:71:7c:a7:
d6:a1:1b:16:ff:f8:5a:1a:10:cf:98:d0:30:16:71:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:05:D3:9E:91:D7:23:5F:E8:D8:DD:F4:2C:DC:05:96:83:03:0C
X509v3 Authority Key Identifier:
keyid:87:37:F3:37:1A:DB:AD:0E:23:D9:02:93:F8:93:53:61:ED:C4:8C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a9d67d-c10c-47bd-9189-a5667a8e6368/1/hzfzNxrbrQ4j2QKT-JNTYe3EjHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:41:9f:92:fe:4d:f7:63:a9:eb:6f:c9:db:88:f9:ae:5f:19:
38:81:f5:40:65:0e:14:3f:e0:0d:84:25:2a:36:2f:e0:ef:9b:
11:de:c4:60:00:86:b1:61:c5:7e:f2:26:ec:47:c1:eb:9c:40:
b9:74:26:98:01:5b:19:17:74:be:5f:52:f4:65:3d:56:e0:30:
0e:da:40:b7:e1:e9:da:dc:c8:18:2b:ba:9b:73:59:a4:c0:00:
f4:33:34:83:75:ab:f2:7e:91:e3:5a:18:aa:ed:a4:94:75:37:
31:d1:fa:f2:97:f7:2e:87:9d:21:e0:8d:56:46:5e:a1:1d:2d:
53:22:60:15:c8:36:dc:b5:57:da:9d:2c:c0:11:b5:54:5a:05:
95:4c:f6:33:72:e8:21:5a:52:a5:bc:9a:c5:ce:a1:14:5b:e5:
f9:c6:f4:a9:82:68:34:27:d6:22:ca:c6:c5:20:a0:06:fe:0a:
8d:89:76:d7:64:96:b4:ce:28:4b:79:65:e3:71:4d:89:2b:bf:
e0:d2:cb:0d:6a:4f:3f:15:af:b3:1d:86:73:65:68:7c:26:55:
9c:1f:b0:a2:79:a1:93:c9:1f:be:49:c4:f6:d9:df:06:35:76:
a7:2f:49:18:6c:c6:ec:2a:92:2c:b7:ba:0a:59:dd:1b:df:ed:
0a:d6:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:01:52 2025 by rpki-client