Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
File: himZ5D_2yece78WG-jpj_f6irkw.mft (raw, json)
Hash identifier: I9lYomxi03gj44KS5hHaEytWMSRwFZkmX1M37XMVsdk=
Subject key identifier: 08:E1:9B:8A:B0:4D:50:70:98:29:D2:62:F1:1B:90:1F:01:BC:DC:84
Authority key identifier: 86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
Certificate issuer: /CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Certificate serial: 0194BD858B6F948212ADCFD7F173221DC416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
Manifest number: 020F
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: himZ5D_2yece78WG-jpj_f6irkw.crl (hash: Y3YC8hft+zkEmy908AkMN1zswuNuJMjLS1bcugcBGnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:6f:94:82:12:ad:cf:d7:f1:73:22:1d:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=08e19b8ab04d50709829d262f11b901f01bcdc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:bd:2a:a6:5b:57:3f:f9:d8:c2:4e:da:df:
54:dc:e5:0a:ed:23:5e:56:df:50:b2:e3:72:03:95:
3e:ad:e9:93:36:4b:a0:7f:bc:ff:78:d6:c3:0a:86:
db:af:85:13:72:1d:0d:94:5b:fa:b8:5b:64:bb:58:
c9:07:7f:ce:09:bb:4b:a7:a5:21:b8:af:96:31:00:
e8:89:e9:6f:24:5e:36:0e:19:f5:5b:5d:52:76:93:
35:b4:5c:62:83:2f:64:e5:d6:d7:76:a6:b9:f7:7b:
66:ad:fe:8b:6a:94:5f:01:a9:d8:c8:e4:73:b4:95:
05:3b:4b:1b:4e:65:9b:bf:6a:ff:7b:37:d2:30:67:
d2:4f:b9:45:ed:fd:2e:da:fc:83:fa:73:98:47:38:
a8:63:d6:8c:e5:e1:69:c4:34:94:30:c3:01:6c:c4:
e4:6c:dc:4b:9a:a8:c1:b1:c0:6c:6e:5a:bd:6d:d4:
1f:3c:99:74:9a:dd:53:5a:97:f6:bb:db:3e:8d:3c:
a6:99:6d:0a:25:44:b7:df:f1:08:aa:b7:20:86:eb:
98:d8:47:42:db:79:7a:6a:15:bd:f1:d6:1e:e4:74:
f4:c1:1f:9f:da:4e:d8:c9:2b:33:96:c2:58:0d:2b:
81:aa:3f:72:5d:88:98:7f:5f:8d:5b:80:81:f9:5b:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:9B:8A:B0:4D:50:70:98:29:D2:62:F1:1B:90:1F:01:BC:DC:84
X509v3 Authority Key Identifier:
keyid:86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:b4:fa:9f:36:b8:4d:5a:7c:70:4b:a8:06:9b:5c:d4:dc:
24:a2:54:00:2a:58:a9:48:34:4b:c6:b9:9a:b4:74:cb:29:33:
bf:59:30:1a:34:77:da:3b:cc:c5:15:af:54:c8:8b:c9:db:55:
db:12:ec:a8:a4:a6:de:bf:45:64:84:75:45:ca:a4:f1:5e:e6:
03:fe:31:71:67:6a:50:53:b5:f5:e7:6f:a9:bc:17:57:7d:72:
af:4d:0d:4f:3c:0b:74:38:64:45:d9:41:4e:3d:28:6b:4f:41:
16:1a:ef:ba:bf:68:70:c0:84:82:bf:ee:96:f9:ba:1e:f6:ac:
fd:7e:e7:1b:9a:4b:ca:ce:fe:ce:a9:16:e0:a9:a2:12:6f:0f:
ec:a2:79:e7:2a:7f:f4:2b:10:8f:7d:9b:f9:1d:2f:1d:bd:47:
b1:8f:87:c8:6c:bc:26:7c:29:14:dc:97:7f:6c:de:89:84:38:
78:f0:b2:26:cf:e1:4e:68:f4:ab:ad:79:44:67:71:86:76:2f:
dc:8e:fa:c6:46:97:9b:08:40:11:9d:f1:38:4c:33:3b:35:40:
32:df:3a:b5:a9:1e:ef:f1:38:75:89:d1:d8:01:65:ba:76:03:
32:82:73:62:39:09:d0:d3:8b:ae:0d:8a:52:f8:22:41:02:69:
5c:a5:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:05 2025 by rpki-client