Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: ZfqMmIkO4iDghxuSPAk8yEgUNCbz0W4S505v/sfc3IQ=
Subject key identifier: 4B:83:E1:C4:35:5D:46:3A:31:F7:A6:C2:05:73:F0:11:DE:5B:84:C6
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 0194BBCEBDA9CEB3F60805928184DF4A4BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 088B
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: mQwdERpkPhYO1Mti63MYgU8r7fL+SMLeZ0QKnaUglIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:a9:ce:b3:f6:08:05:92:81:84:df:4a:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=4b83e1c4355d463a31f7a6c20573f011de5b84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:38:10:fb:ed:61:68:6b:09:f0:fa:e3:21:
b9:88:a9:38:18:43:7a:52:fb:cb:37:2a:4b:32:99:
7a:09:cb:a3:f7:27:15:2c:74:49:39:30:2d:3c:f7:
f4:f9:bd:44:1f:86:60:64:53:c6:ce:4e:d1:17:70:
7c:6c:11:d3:8a:e1:5a:47:a8:b0:56:6c:17:c8:de:
d4:ca:9a:b6:77:33:b6:72:2b:a5:a0:c7:65:c2:52:
5c:01:60:e6:3b:8a:3e:03:e1:2c:c4:6e:95:c7:6b:
8e:3c:4f:94:f0:d3:1d:59:7c:68:9f:9b:8f:f9:cc:
5f:a9:2c:d9:bc:35:d4:97:2d:27:f8:1e:cf:15:93:
9f:d8:d4:e2:ca:3f:81:1d:9c:9c:29:8d:91:49:20:
9f:3c:ab:90:43:68:7a:9d:72:5c:34:be:c9:60:37:
e9:2f:aa:79:1c:ac:f4:09:fd:6c:15:f9:e2:0e:b1:
ba:0a:84:13:d8:1c:9b:30:74:4c:7a:29:05:3c:10:
fc:2e:1a:4f:dc:7d:d5:23:a3:10:18:ba:b7:2a:b7:
39:6b:bb:d3:03:59:db:3a:0f:aa:62:52:97:21:c1:
30:46:f6:5f:11:e7:5f:69:dc:b5:a4:ae:cf:3d:57:
5e:79:d7:b2:d2:01:52:b1:24:ed:1d:59:73:17:ae:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:E1:C4:35:5D:46:3A:31:F7:A6:C2:05:73:F0:11:DE:5B:84:C6
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:67:f8:a5:47:dd:c3:1d:6c:e1:62:1b:80:c7:be:7d:dd:86:
80:5c:3e:26:b5:89:3e:57:40:94:b8:9e:1f:b9:fa:71:8f:c3:
12:d1:5e:2e:74:ce:77:ba:76:8a:27:88:6e:c5:78:c9:e9:02:
29:55:9a:b9:6a:04:5c:e6:7e:fa:6d:55:ea:c3:8c:f7:9c:88:
45:6a:ea:12:eb:33:fc:58:18:3f:8c:0e:eb:38:07:fc:42:f9:
09:6f:1c:5e:c9:36:0d:35:fe:7a:9a:39:a9:7f:2e:69:77:13:
7b:db:5b:9c:04:a5:a8:df:99:ac:c8:e7:63:8a:cb:cc:1c:d2:
8c:de:fe:10:bd:b9:14:bb:07:05:2d:e6:e6:e1:fc:61:c3:bd:
c8:95:fe:6e:0f:ad:f9:13:3d:05:89:6a:56:8c:9a:a9:40:64:
5b:d8:79:fb:7d:17:d2:c9:a5:2a:8e:96:63:0a:41:32:2c:f3:
7e:76:b2:30:f3:37:fe:5f:06:b0:82:19:14:75:cf:cf:3e:d2:
01:eb:c0:5e:c6:2c:56:36:43:b0:89:7c:b4:58:f8:69:aa:73:
06:b1:3c:87:56:b8:35:87:8a:51:96:25:7d:06:10:ea:5e:a4:
3c:ad:53:e1:b2:b2:ac:ef:f6:c8:dc:56:90:9f:d2:30:99:75:
27:72:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:16 2025 by rpki-client