Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: qthN9l5y6OV0F2NAGB5p5ZXbVNbbUDNJjoRGeZQ03XY=
Subject key identifier: B4:04:22:70:76:BF:FE:75:76:84:6D:01:F8:AF:7F:5E:62:D1:B7:2A
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 0194BD17F45019A06B174CF8159C2246DE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 101C
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: v8SvgFXC75Jng8yB2ydGtS3n8o/HH1wuthzAR/k8LIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f4:50:19:a0:6b:17:4c:f8:15:9c:22:46:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=b404227076bffe7576846d01f8af7f5e62d1b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:c3:8e:da:65:b1:a0:78:8a:09:07:37:32:
4d:ec:cd:18:0e:a5:25:33:94:67:4d:f8:da:f5:0a:
34:35:d6:26:66:77:dd:d0:04:1d:ae:48:ed:1a:ab:
50:b7:93:0a:4d:81:98:02:ab:12:6b:77:94:09:97:
70:50:9e:b8:33:f2:66:be:45:75:6e:d8:c9:8f:c5:
c0:c3:07:5f:07:16:01:5c:47:57:77:31:5a:97:e7:
54:2b:61:37:a7:39:7e:72:4b:71:b2:e5:e1:84:67:
cf:73:7c:cb:72:bf:82:85:9f:1f:74:cb:2d:b8:42:
d4:16:c9:c9:ec:5f:84:e3:1c:a4:b4:81:2d:bf:7b:
6b:3c:c1:02:9d:8c:c3:a1:ea:69:bc:1f:7e:9a:6c:
35:98:75:0e:a8:1e:d3:5d:07:cc:dd:3c:e1:4c:ec:
ea:8c:01:31:c5:de:54:f3:57:87:aa:36:3b:70:a8:
ee:44:b1:93:9c:9e:6d:1f:85:48:39:e5:2f:41:c5:
19:49:25:cc:27:99:62:df:be:26:6c:95:18:c4:ff:
3c:0a:3e:33:eb:0b:4d:fc:e8:20:f3:8e:30:9a:c2:
38:1a:ec:83:26:36:f6:31:0c:aa:9b:b8:18:05:08:
65:5b:db:83:22:e1:ac:25:cc:48:03:72:c5:99:0e:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:22:70:76:BF:FE:75:76:84:6D:01:F8:AF:7F:5E:62:D1:B7:2A
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:12:78:56:4e:25:ef:f1:ce:22:58:02:2e:cb:30:9a:67:d3:
21:5e:43:cc:16:11:83:2f:9d:4c:50:78:c6:90:6d:02:e5:b4:
41:b8:ac:26:9f:05:c3:c6:cd:20:ab:d6:e4:66:42:7c:ca:6d:
9b:a2:d0:21:bb:30:4c:9a:36:e1:9f:df:1a:8f:b8:1e:35:b6:
0e:08:c0:d3:26:7c:2f:90:69:85:e2:d6:2a:68:ed:c8:c9:d5:
c5:bd:9d:ae:b8:8c:5f:c9:b9:d9:f6:f0:cd:c3:f7:cc:07:c9:
10:bb:28:dd:73:37:f5:12:84:31:1c:c2:b2:01:b4:16:e9:c4:
ae:a9:1d:e5:53:33:11:ba:78:3a:4c:13:e7:7d:cf:13:1a:2b:
f0:eb:d0:29:55:b7:9d:1c:8e:7d:dd:98:1f:a4:ab:54:d9:fa:
73:af:de:31:0f:f7:29:60:7b:15:f6:4b:e0:66:23:6c:57:c0:
eb:13:cd:fc:5f:51:d6:fe:75:d5:f3:61:1a:47:c3:e9:84:33:
ac:61:0b:cd:6c:ef:4e:95:ec:4e:11:d1:a3:12:47:3d:0f:d7:
d6:f1:5e:c7:b2:e3:a3:0b:94:b0:58:19:e2:a2:f3:03:d3:7a:
0e:20:b2:ed:82:cd:2e:bf:a4:de:1c:05:3b:4c:b6:1d:bd:15:
f0:e9:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:08 2025 by rpki-client