Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
File: hlonCgsIptsPlMdDV96OSC1944Y.mft (raw, json)
Hash identifier: jRo4lr933Y9lYfyMRaG6n6fkgSHDCxEjcEte1RMqrGw=
Subject key identifier: D8:E2:33:37:3A:6B:3B:47:F8:E4:0E:2C:F1:26:E8:48:D3:51:63:41
Authority key identifier: 86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
Certificate issuer: /CN=865a270a0b08a6db0f94c74357de8e482d7de386
Certificate serial: 0196B28F311BB86D9AFB9CA49DCD7BBD04E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
Manifest number: 0700
Signing time: Fri 09 May 2025 01:00:50 +0000
Manifest this update: Fri 09 May 2025 01:00:50 +0000
Manifest next update: Sat 10 May 2025 01:00:50 +0000
Files and hashes: 1: hlonCgsIptsPlMdDV96OSC1944Y.crl (hash: VDiyhX8rCcCK44xDAFQR55J4m2ocp/ACyt3gRPUNa3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:8f:31:1b:b8:6d:9a:fb:9c:a4:9d:cd:7b:bd:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865a270a0b08a6db0f94c74357de8e482d7de386
Validity
Not Before: May 9 01:00:50 2025 GMT
Not After : May 10 01:00:50 2025 GMT
Subject: CN=d8e233373a6b3b47f8e40e2cf126e848d3516341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:14:6c:e6:c4:c3:27:6c:81:a5:17:e8:10:
64:88:78:76:8e:17:57:bb:b8:ba:6f:c3:98:19:b5:
53:4e:5b:c0:4b:7f:95:ea:91:fe:50:40:69:de:82:
de:6b:d2:bd:86:95:e0:e4:70:d3:8b:99:3b:6c:c9:
7f:29:23:43:02:c9:4f:c3:9d:28:6a:d4:32:b6:2c:
e2:09:3b:7b:f7:ac:ff:65:0b:bb:0e:96:32:f0:f4:
ad:5b:86:57:e9:24:29:0b:fc:9e:01:b5:2b:16:2b:
4d:8e:6e:52:6b:4d:ce:61:e7:c9:16:62:31:1a:0d:
4b:ff:e3:f0:e4:a6:c7:9b:76:05:24:ce:22:71:53:
4e:b0:37:ba:67:75:51:5c:50:42:9a:d8:1c:75:13:
ec:9a:1b:e7:ca:ce:87:54:bc:d1:ed:6e:83:ca:4c:
3d:38:cf:63:e0:ef:ab:1b:c4:85:75:09:8e:b8:21:
e4:30:d8:cf:9e:39:66:67:ec:88:f1:2f:1f:0b:ed:
e8:67:96:17:1b:73:0d:5a:f4:63:a9:3c:25:a1:9c:
19:d4:6e:0c:3e:62:a5:2f:b0:cf:21:ea:68:0d:b7:
27:ee:fc:92:5f:5d:56:0f:fb:c7:d2:0d:cd:b7:00:
ee:01:2d:69:32:6a:48:ae:6c:c9:6e:d6:3b:52:df:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:33:37:3A:6B:3B:47:F8:E4:0E:2C:F1:26:E8:48:D3:51:63:41
X509v3 Authority Key Identifier:
keyid:86:5A:27:0A:0B:08:A6:DB:0F:94:C7:43:57:DE:8E:48:2D:7D:E3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlonCgsIptsPlMdDV96OSC1944Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/df8278-9b6e-4b8c-a0d0-65a99eee50c5/1/hlonCgsIptsPlMdDV96OSC1944Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:ed:b9:f0:43:7d:40:f8:0c:3b:fa:96:40:d3:23:ca:7f:
81:e8:bc:36:23:e2:dc:27:35:c9:ac:77:16:25:27:d6:65:7d:
dc:0b:08:d7:dd:13:6d:da:3c:1c:b3:53:60:21:91:42:82:30:
9b:45:ee:0a:30:76:04:30:15:ec:82:46:1b:e1:c0:b3:ec:d1:
c0:94:43:88:6a:ab:54:cb:72:85:4a:2e:b6:c2:29:b8:bf:80:
c7:0b:bc:49:2e:58:4c:52:dc:48:84:24:54:31:06:d4:2d:6b:
05:b3:7e:e0:7a:6b:38:cc:3f:7b:98:45:77:63:88:ab:2c:00:
38:0d:78:23:3a:7f:b3:c9:c2:f2:8d:96:d5:40:83:b8:2b:9a:
c2:c1:f5:09:f0:ed:5e:e1:25:66:de:ef:df:24:c3:95:f4:16:
51:c6:a4:1a:b3:4c:79:a3:72:e4:ff:b0:bf:9f:45:4f:f4:cf:
68:67:92:ca:96:0f:b8:69:b5:71:bd:54:7a:2a:a0:95:c5:13:
c9:72:61:4b:3d:d7:ba:3a:e7:2b:83:b2:e5:9d:2f:58:d1:29:
30:86:02:de:fd:5c:1e:47:1e:57:03:6a:8f:29:ef:95:ca:f3:
ac:b2:a6:2c:ed:6a:98:cc:5b:b1:69:cc:c7:a1:cf:7f:62:3a:
9a:ca:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:55 2025 by rpki-client