Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
File: hr9faTt_Ts8TYEaBZIqmj9rKb38.mft (raw, json)
Hash identifier: tILElfPRoTuNIDQVza4cCDDNz3bpd21zyivf2PzkX68=
Subject key identifier: 1B:61:D6:0A:C0:8F:87:7F:CD:E0:63:DB:4E:FE:91:FB:59:AB:AF:BC
Authority key identifier: 86:BF:5F:69:3B:7F:4E:CF:13:60:46:81:64:8A:A6:8F:DA:CA:6F:7F
Certificate issuer: /CN=86bf5f693b7f4ecf13604681648aa68fdaca6f7f
Certificate serial: 0195A76AB5006C834ECDA0C336C17793FDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hr9faTt_Ts8TYEaBZIqmj9rKb38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
Manifest number: 0AD0
Signing time: Tue 18 Mar 2025 04:02:22 +0000
Manifest this update: Tue 18 Mar 2025 04:02:22 +0000
Manifest next update: Wed 19 Mar 2025 04:02:22 +0000
Files and hashes: 1: hr9faTt_Ts8TYEaBZIqmj9rKb38.crl (hash: 2fhTT5/RGfWAIM9mHNsCvGCvEdH0954aykE201NZPmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:6a:b5:00:6c:83:4e:cd:a0:c3:36:c1:77:93:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bf5f693b7f4ecf13604681648aa68fdaca6f7f
Validity
Not Before: Mar 18 04:02:22 2025 GMT
Not After : Mar 19 04:02:22 2025 GMT
Subject: CN=1b61d60ac08f877fcde063db4efe91fb59abafbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:b0:a9:c7:c8:c6:f9:56:45:64:36:33:2d:
2e:10:db:a2:3c:ee:e8:91:92:af:e5:51:4d:37:aa:
6e:5c:1c:96:8c:68:b6:38:6f:f1:d2:f3:cd:39:15:
43:34:c4:22:f0:4f:59:26:b4:13:7c:06:30:e0:b0:
12:4e:f3:5f:4e:a5:e8:b0:4a:c4:7a:f4:06:28:80:
29:83:25:07:46:16:08:71:12:9e:0f:8f:c9:be:4c:
77:53:66:59:ef:64:84:6b:6c:99:43:fa:0d:3b:ae:
e7:ff:d3:00:86:aa:ab:df:ee:40:6f:85:88:43:b6:
51:b5:22:34:51:86:00:50:3e:bc:95:ee:b4:8f:23:
90:98:87:e9:64:4a:e8:53:79:f6:0d:8d:0a:93:a0:
2d:a9:dd:68:74:d3:1d:1e:38:70:7f:c4:89:8c:a5:
0e:4d:45:35:19:9f:f0:57:b0:5b:b3:33:e5:ab:ae:
fe:d9:19:c1:4b:53:0c:9f:84:fb:22:5b:00:f3:0f:
8a:d6:e4:65:c7:b7:2e:28:3f:a1:0a:1e:ba:46:95:
92:9f:a1:46:d0:5c:81:74:55:c4:1f:30:6f:08:8b:
87:cc:00:ac:d6:c1:53:9f:96:e1:2c:3e:01:8f:8b:
d0:a9:bd:6c:59:ab:8a:66:f1:3c:3e:ce:f8:c9:bd:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:61:D6:0A:C0:8F:87:7F:CD:E0:63:DB:4E:FE:91:FB:59:AB:AF:BC
X509v3 Authority Key Identifier:
keyid:86:BF:5F:69:3B:7F:4E:CF:13:60:46:81:64:8A:A6:8F:DA:CA:6F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hr9faTt_Ts8TYEaBZIqmj9rKb38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/764671-69a4-4749-ad34-6148e454c730/1/hr9faTt_Ts8TYEaBZIqmj9rKb38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:be:6b:f4:79:65:67:92:a9:8e:ef:ac:de:7a:f4:ea:c0:
b0:69:e5:74:5f:9b:e8:4a:23:b4:fb:b3:90:fc:d4:f1:8e:e2:
7b:b1:bb:1b:1d:fa:e5:fb:68:91:63:dc:a1:5a:e9:46:45:d3:
0f:20:9e:20:a8:0b:a5:9b:84:3f:e0:9c:15:47:31:d4:f4:6b:
43:56:6c:0c:06:a2:a0:64:e1:ef:33:23:2c:9f:60:36:6a:57:
ba:c0:b0:99:8e:d0:78:c5:54:cd:da:6a:0d:05:21:b2:7a:6d:
db:ba:0d:c2:54:da:44:05:55:39:c5:6c:e5:90:bb:0a:5b:44:
10:53:c1:2d:e1:8d:47:4d:f5:85:69:0f:71:b0:e0:3d:2e:fb:
9b:19:38:de:a8:b0:5a:d3:04:dd:81:66:9f:4d:2e:2f:07:4c:
20:d7:c5:29:a9:a5:cb:8d:b4:d4:80:f7:80:96:ed:7c:41:ed:
de:87:f5:f4:e3:00:a0:54:b5:14:df:0b:c4:b9:52:27:b0:ad:
2d:36:13:33:3f:d2:be:ab:1f:27:11:e2:91:b8:c8:36:68:15:
37:2e:6d:d3:fe:21:76:54:08:15:48:5e:ea:02:05:f8:85:a0:
55:c9:49:35:3a:74:a9:20:0a:c9:38:da:95:f4:98:62:5f:2d:
bb:45:de:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:32:53 2025 by rpki-client