Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
File: hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft (raw, json)
Hash identifier: VbYM7u3QE62V7olL8iHOxdisQVmVXjooNfGLogVJIgc=
Subject key identifier: 07:B9:03:63:0D:58:4B:33:38:2F:01:EA:A2:9C:A0:B3:2A:3A:59:D7
Authority key identifier: 84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
Certificate issuer: /CN=84ac851a2bfaae15e85e162baa0788c85912a932
Certificate serial: 0194BBCE3CAEE50B9E6AFED65381A725422A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
Manifest number: 105C
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl (hash: zdmCGhUN+rjFyp+w+RMuDY1dsgBMJHQe1y0ArVjI5S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3c:ae:e5:0b:9e:6a:fe:d6:53:81:a7:25:42:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ac851a2bfaae15e85e162baa0788c85912a932
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=07b903630d584b33382f01eaa29ca0b32a3a59d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:ff:dc:58:56:df:d5:64:e2:52:df:05:7f:
8c:e5:3d:00:34:63:4d:a6:ff:9e:9c:ce:07:3b:ba:
ec:fb:a7:a0:ca:68:cc:77:65:df:53:62:8b:68:68:
1c:92:32:52:b9:94:ba:05:ad:59:58:fb:14:b3:76:
07:d7:01:8d:d2:1a:35:4d:0f:ac:ce:ac:dd:ca:05:
18:57:9b:ab:da:7c:fc:20:a1:c7:4b:21:36:71:11:
13:74:46:99:04:d6:03:2e:19:8b:fa:79:65:2e:e4:
64:93:da:b9:42:a2:de:a1:df:e6:ec:d4:1a:90:b6:
5b:56:e0:51:0f:f2:f0:15:18:3f:5b:89:62:d8:49:
e6:3d:71:f2:cd:67:ba:9e:20:8b:7f:b3:d2:03:c4:
4a:8a:29:3f:08:00:d0:9e:ac:1e:74:9b:1a:c9:36:
d0:70:90:a4:09:ad:06:b3:28:1f:4d:e0:8c:1f:3d:
c0:9d:7e:03:f2:49:ed:e8:7a:fa:bd:b5:2d:2b:2b:
fb:95:1b:bc:dd:49:3a:07:25:6a:3e:f0:85:f3:0a:
88:13:5e:5e:08:0c:33:34:03:2a:a7:d2:fa:d5:85:
47:08:2b:55:7a:61:30:2a:79:b5:6b:99:13:52:7c:
08:20:df:45:7e:3f:e6:76:f9:74:df:42:4b:86:54:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:03:63:0D:58:4B:33:38:2F:01:EA:A2:9C:A0:B3:2A:3A:59:D7
X509v3 Authority Key Identifier:
keyid:84:AC:85:1A:2B:FA:AE:15:E8:5E:16:2B:AA:07:88:C8:59:12:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKyFGiv6rhXoXhYrqgeIyFkSqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fcd8f2-3d56-42a8-824d-dc06e7538e04/1/hKyFGiv6rhXoXhYrqgeIyFkSqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:53:f6:8b:93:31:80:b1:48:7e:1d:e9:72:73:b0:07:80:
6e:fa:03:05:0d:0d:83:ac:c4:3f:2f:a9:7a:a3:a1:a7:c2:46:
a7:ef:24:4d:02:fa:54:2b:81:5d:f6:37:d1:3b:5c:79:1d:80:
81:bc:bf:e7:e7:f3:6b:54:0d:1e:59:14:2b:2f:76:96:fd:4b:
51:d4:57:38:95:80:f3:75:0a:ab:03:9f:09:8d:33:29:ba:e0:
91:eb:06:16:0a:bd:0e:7f:8d:f9:eb:c8:c1:c8:c8:38:6e:b3:
a8:a1:03:2e:87:b2:e5:14:a4:02:28:db:f1:56:fc:f6:4a:15:
15:f7:88:94:09:a6:3d:ba:1d:f2:5e:a2:3a:29:97:ec:ae:b9:
38:af:b1:67:d8:a4:f2:6e:4e:32:af:f4:10:ff:2a:12:70:18:
11:18:f7:a4:b2:34:bf:6d:83:bf:af:d3:54:db:23:04:48:80:
d5:ca:2f:6a:c6:63:2f:ef:a9:99:cd:fe:0b:0a:e7:32:ec:d1:
e1:59:04:72:42:1f:59:86:99:28:19:e0:60:67:df:08:dc:98:
bd:5d:52:47:eb:ff:6a:8e:cf:41:18:b8:13:c6:9d:a6:32:e8:
d3:99:67:1e:9a:54:da:79:8a:8b:22:4c:bc:ce:31:fd:09:e0:
1a:79:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:39 2025 by rpki-client