Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
File: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft (raw, json)
Hash identifier: v1urdGs8oPUi+CuzDNxvwjw9DJwTIfqKrjg4j0xr/4g=
Subject key identifier: 39:7C:2F:DC:5C:9B:1C:D6:42:B3:07:66:B9:F7:77:8C:68:6C:6B:B5
Authority key identifier: 1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
Certificate issuer: /CN=1e68bf27dac705f3102ea88673470d27dc86866c
Certificate serial: 0194BBCDB1C0669A49813F4B34FAFD28AF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
Manifest number: 0B4A
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl (hash: dxG/he2W+SNBV8fafeb1tJbcI9bf4U78FoHRZrqKiyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:c0:66:9a:49:81:3f:4b:34:fa:fd:28:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e68bf27dac705f3102ea88673470d27dc86866c
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=397c2fdc5c9b1cd642b30766b9f7778c686c6bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0b:86:e8:c1:de:20:f9:60:58:0b:84:26:bc:
e8:3a:2a:6c:27:58:2c:cb:69:1d:64:e0:39:81:0b:
90:37:6b:70:54:c3:7f:b1:de:a1:2a:b0:71:41:e5:
c8:3a:c5:45:80:f9:f3:be:62:70:03:1c:8c:c3:59:
d7:02:1e:fe:d8:0b:af:d1:c4:ee:e0:71:8d:94:18:
f4:ac:4c:ee:6c:db:e4:46:e5:71:d2:ca:da:26:64:
1b:8f:39:c1:67:31:6d:93:1c:19:2b:11:ea:fe:a9:
46:58:44:fb:b8:54:ad:a6:1c:89:b7:b1:b5:97:8a:
f6:65:05:0b:4c:48:f5:34:36:dd:41:69:54:d4:e9:
87:8d:44:b8:5e:75:a5:5e:0d:c2:31:cb:22:af:f8:
49:ae:e1:20:47:61:88:e1:71:30:4b:f4:38:d4:46:
f6:ca:b4:b3:24:d4:22:72:a2:c0:88:cf:7b:46:57:
46:e9:ec:eb:66:b0:0d:99:b0:e8:20:ae:86:77:05:
08:ab:93:b0:f0:1b:2e:c0:93:ba:0a:d6:e2:31:f6:
9b:3f:14:bc:5c:8d:38:bd:26:b6:ed:7d:56:1d:95:
30:a4:2b:92:8d:c2:a1:40:08:f1:42:64:2f:fc:b4:
d7:b5:3d:15:45:ea:5e:ee:a0:de:c4:70:45:08:f5:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:2F:DC:5C:9B:1C:D6:42:B3:07:66:B9:F7:77:8C:68:6C:6B:B5
X509v3 Authority Key Identifier:
keyid:1E:68:BF:27:DA:C7:05:F3:10:2E:A8:86:73:47:0D:27:DC:86:86:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/061465-955e-407e-a708-c15647f57010/1/Hmi_J9rHBfMQLqiGc0cNJ9yGhmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:57:82:f1:5b:d6:7b:37:46:b8:d2:f0:9d:4f:66:c3:9c:17:
bf:42:a5:31:56:9f:b1:43:41:7c:53:c3:b8:d4:db:7d:13:c4:
7a:cd:b1:03:3f:cf:6e:da:e6:77:01:ba:ac:c0:a4:71:d6:cf:
b7:a9:fd:9c:ee:98:bd:22:37:1a:8b:df:41:1c:84:ba:e8:cc:
b1:37:98:04:a9:d9:e0:33:ae:f3:9e:79:e2:c9:2b:9e:e9:82:
91:98:2b:0c:2a:1f:51:83:b3:fb:3c:67:c9:63:ae:a7:7d:f4:
af:26:7b:77:81:f7:7c:39:b1:0d:44:b2:84:61:ba:e1:c8:81:
f6:bf:48:3a:b1:6a:6b:82:01:ca:c4:b1:1f:02:fa:c1:7d:6a:
81:47:52:b5:ed:7e:ee:15:58:8d:31:f3:4d:5d:7a:89:5e:aa:
b0:b0:e1:58:00:8f:00:79:5c:67:14:b2:22:9f:e1:f8:47:89:
a9:93:61:21:3d:fd:0b:39:65:41:83:e0:d7:a8:ba:3a:f0:28:
ef:94:e2:9f:ef:ec:42:c2:3b:25:a9:0d:ec:9f:2b:b9:49:c8:
0e:06:30:af:f9:a2:38:a0:65:32:b9:55:af:7b:df:4b:a6:8c:
3e:da:48:1f:20:51:4c:dc:38:7a:3f:b2:91:bc:b8:cf:33:80:
8d:e9:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:12 2025 by rpki-client