Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File: HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier: vlfJtZriuvD9SyX7uqxGlPEkUcAquhMaPFKKtxervik=
Subject key identifier: 48:03:52:67:8C:4B:74:0B:18:63:3C:E9:0C:9A:93:B8:A1:59:B0:27
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer: /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial: 01965C4C7FB20120EF27F2BF80F38AF6ACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number: 01E1
Signing time: Tue 22 Apr 2025 07:00:39 +0000
Manifest this update: Tue 22 Apr 2025 07:00:39 +0000
Manifest next update: Wed 23 Apr 2025 07:00:39 +0000
Files and hashes: 1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: T8aO08CTKjeQDs/0uv1GniGzEr4GaQtVoYfFFRUks6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:7f:b2:01:20:ef:27:f2:bf:80:f3:8a:f6:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
Validity
Not Before: Apr 22 07:00:39 2025 GMT
Not After : Apr 23 07:00:39 2025 GMT
Subject: CN=480352678c4b740b18633ce90c9a93b8a159b027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:58:4e:f8:e7:e4:81:21:7d:4f:1c:03:38:
05:0b:dc:ff:c7:4d:d7:c7:4a:ec:a2:0d:b4:81:cf:
4e:51:2c:d9:52:dc:ed:7d:65:e9:aa:74:83:2d:30:
d6:42:54:e2:f0:93:76:50:21:c7:08:1b:77:7c:c2:
2d:0d:cd:6c:4d:59:05:c1:fa:19:93:48:fb:c9:98:
11:46:a8:b0:9c:03:2a:1c:d0:b8:71:79:a3:26:ab:
e2:8f:85:b7:c2:12:2d:f7:0a:25:2a:0b:6a:03:db:
de:8e:03:49:9d:3f:3d:a4:b7:0f:e2:b9:cf:72:3e:
7d:26:27:48:1b:35:18:d5:65:30:58:6d:0c:7e:43:
b3:54:75:38:62:de:c1:0e:55:04:45:82:fb:d7:28:
f9:60:fd:ea:ee:c9:9e:33:60:81:bd:07:f3:a5:7a:
ab:04:0a:cf:c0:e3:43:a4:3e:b5:7c:b0:ae:e3:79:
cc:e0:7d:77:1e:ab:8f:9d:a3:9d:6d:8b:82:8b:9a:
46:27:38:d3:53:91:4b:c2:9b:ff:a3:4f:ad:1a:df:
ae:ad:98:1c:38:85:c5:77:6c:13:d7:d0:f3:90:c9:
3e:9b:6e:a3:f4:66:d4:e9:bc:7d:16:7c:e2:b4:77:
aa:b1:e3:34:08:2b:73:8a:3d:ff:08:e3:2c:fa:f5:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:52:67:8C:4B:74:0B:18:63:3C:E9:0C:9A:93:B8:A1:59:B0:27
X509v3 Authority Key Identifier:
keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:53:79:a4:7a:61:fc:e1:a8:46:c6:ba:f8:ba:f5:94:81:59:
f6:3b:6c:da:c0:9e:31:01:fc:df:d8:dd:89:18:ef:cd:a9:98:
af:2b:7c:30:55:f4:63:ec:6e:da:d0:af:bb:b1:0c:93:96:bd:
a7:ca:a8:94:c3:63:c8:13:bf:e3:54:a2:e6:1b:5d:78:b7:8e:
86:28:47:6e:7e:de:db:fe:52:b5:d1:0c:0b:d8:0d:b4:f4:7c:
75:8c:ea:f2:5e:9a:2b:89:e8:97:a4:c7:1b:0b:79:a1:42:9d:
f5:06:77:b8:07:c2:6c:c2:9f:ce:5f:8c:e4:cf:c1:4a:66:72:
4c:d1:32:f7:90:56:ea:a3:22:e7:6a:e4:2f:af:c9:95:c0:0b:
89:4b:29:4e:47:de:96:e4:c8:25:74:c9:aa:8b:c7:88:fe:72:
11:f8:bd:12:13:85:24:5d:cc:f8:cd:92:f8:d6:cc:0e:2f:20:
c3:f9:b1:c4:d9:da:5b:2f:d6:01:43:7a:59:9a:72:2f:8a:66:
57:75:57:b1:c7:4f:26:16:fb:83:a8:a7:b5:b6:6d:5e:23:43:
35:41:88:87:35:c3:75:52:d0:4d:16:8f:1b:bb:d0:fa:ef:11:
6f:9c:9f:55:c9:e2:02:3a:82:32:f3:a2:cb:b5:6e:b2:78:5d:
2b:47:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:35:48 2025 by rpki-client