Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
File: RHhnr-yeLyk5So9fl_kJKdkoIQI.mft (raw, json)
Hash identifier: SIlb6ihbtNfwZz3ej6rX/TwqnkOZwrw8zNBzvumDFNA=
Subject key identifier: 99:19:EA:90:8F:0B:5B:B5:0D:A5:69:E5:B7:A3:26:F0:3A:4C:3A:FD
Authority key identifier: 44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
Certificate issuer: /CN=447867afec9e2f29394a8f5f97f90929d9282102
Certificate serial: 0194BBCDD6B734FCA5A535EED4904A848F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: RHhnr-yeLyk5So9fl_kJKdkoIQI.crl (hash: L7Om4vFAPkDx1L5Ii5YooUOhfaP0duNkRICioaqliqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:b7:34:fc:a5:a5:35:ee:d4:90:4a:84:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447867afec9e2f29394a8f5f97f90929d9282102
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=9919ea908f0b5bb50da569e5b7a326f03a4c3afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:f4:71:0a:e9:66:f8:93:98:cc:57:af:dc:
b7:63:d3:94:9e:8e:20:de:7c:9c:7b:82:23:35:73:
2b:0a:86:d2:76:6d:17:55:0c:c4:47:b1:44:4b:de:
f4:cc:3c:81:9a:b8:66:11:c4:1d:90:a1:eb:f9:a3:
37:36:21:ce:7c:dd:0a:55:c0:07:18:77:84:34:37:
e3:9e:b3:02:3e:36:a8:bd:a5:e2:ae:35:62:f3:0f:
fc:05:01:e2:3a:a0:38:de:4e:91:29:ae:84:20:97:
1e:f8:6b:32:79:f2:c9:e4:98:81:1f:61:42:99:1b:
88:c4:72:2c:71:89:da:4e:13:f2:e2:a1:9b:11:8b:
41:1d:25:05:9a:06:31:b8:42:28:1b:1e:43:64:77:
82:4b:58:89:65:07:10:e7:9e:51:2e:1e:22:3e:dd:
a6:7f:2f:5c:b7:55:60:e5:4c:9e:01:3b:a5:3f:71:
bc:9b:c5:da:c8:f4:5a:e2:ae:75:c0:a9:5e:64:80:
c5:55:9b:bf:90:33:4a:23:06:53:5d:f7:1c:81:5f:
48:b5:f7:a2:06:3b:60:b0:91:5f:27:48:bd:08:ff:
56:dc:02:f3:83:01:ff:a2:5d:41:96:48:f3:94:5a:
7a:8b:0a:88:2b:ae:59:5b:bf:c5:d9:56:15:b7:81:
a2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:EA:90:8F:0B:5B:B5:0D:A5:69:E5:B7:A3:26:F0:3A:4C:3A:FD
X509v3 Authority Key Identifier:
keyid:44:78:67:AF:EC:9E:2F:29:39:4A:8F:5F:97:F9:09:29:D9:28:21:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHhnr-yeLyk5So9fl_kJKdkoIQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a322b-6482-44a5-b3d2-3e109107ceb6/1/RHhnr-yeLyk5So9fl_kJKdkoIQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:30:0b:07:53:41:0b:d8:8b:e4:68:f2:cb:84:b8:10:39:49:
b4:be:40:18:ce:46:37:a7:44:f6:62:04:dc:10:97:1f:0b:df:
fd:69:88:30:fe:42:2d:ff:a1:78:ac:7e:ac:a3:db:82:8a:02:
0b:b5:79:49:14:57:bd:92:f8:47:d1:7d:94:ec:85:37:0d:1b:
31:f2:7e:80:78:de:86:d3:75:fa:87:e9:08:55:04:0e:d0:2f:
11:75:d6:f3:06:b9:23:cb:7c:2d:ff:f8:0f:07:08:ab:93:8e:
89:3c:e5:fa:8b:88:d1:40:e9:ac:77:58:86:b0:e8:ae:f0:ea:
d6:82:d8:37:b7:a7:f9:a3:4c:4a:d6:c8:eb:72:4c:1a:4e:c5:
09:46:80:e2:cf:3b:3d:a5:27:a9:07:2d:6c:6a:ec:db:31:97:
cf:26:cf:18:46:c5:3f:42:cc:d5:2f:44:fb:42:bb:64:b8:8d:
ad:ad:96:70:0e:b7:eb:06:ec:57:d4:4e:90:0a:f7:b5:a0:01:
4d:60:9d:ef:4b:a8:79:e3:14:75:2b:1c:b4:e5:09:91:bd:0d:
97:24:c4:c8:4d:3d:77:63:88:83:43:bc:e8:e3:29:88:c1:bc:
7c:14:92:44:24:ed:66:2a:a6:98:c9:a5:3a:15:2d:b1:11:7e:
c6:59:e5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:27 2025 by rpki-client