Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
File: HY6N9cAxEHEY2mHymrT0GdKdWoo.mft (raw, json)
Hash identifier: uZI6WGbUT6tXBLEi/1cXzDj+Rng/GBxoVS78AW5N0Mg=
Subject key identifier: D5:45:C5:3A:42:2E:01:76:B4:58:E7:AA:F5:4A:44:84:79:57:0B:D5
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 0194BCAA2A49A45AF9568AA0B1C2CAAE821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
Manifest number: 3C
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: HY6N9cAxEHEY2mHymrT0GdKdWoo.crl (hash: IR/DZZrPPKh4M2RSVomOWAtHopj216eQ6GBCMRdvldM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:49:a4:5a:f9:56:8a:a0:b1:c2:ca:ae:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=d545c53a422e0176b458e7aaf54a448479570bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:47:4b:54:97:89:26:31:e4:d8:54:66:1c:
b0:43:67:d8:0c:a8:d4:88:0b:4c:12:6e:a4:05:c4:
fd:3c:eb:94:10:d7:ad:43:c4:7f:d3:c7:b5:07:16:
8f:e1:7c:49:87:0a:fb:44:10:b6:2a:86:36:6d:d1:
f1:92:dc:f3:b2:73:51:83:c9:5d:a1:0a:b4:6d:89:
d6:12:b9:e8:d5:f7:95:8f:23:83:38:d4:df:bf:15:
05:d7:00:92:65:44:8c:d7:1a:6d:dc:74:62:7e:05:
1e:f1:c7:6a:b9:8a:4f:da:0c:86:46:ae:75:9c:9a:
e5:a9:f2:1c:3d:55:f2:71:b1:b4:36:91:da:b9:dd:
d7:28:9c:9f:5d:1d:7b:fb:42:5e:bd:57:a3:f7:ea:
47:c9:43:00:9f:72:49:db:8c:c0:23:ac:a6:fd:a1:
83:7a:16:dd:37:cb:9e:6c:a5:40:ee:04:cc:7f:4f:
08:fe:cf:60:a4:b5:be:5c:a8:aa:0f:29:cf:f3:43:
75:60:b0:d2:57:d8:80:8f:c7:62:28:e2:54:21:d2:
44:06:27:1c:e0:33:a5:17:5d:67:75:6e:a4:65:e0:
f4:c5:be:39:6d:cc:38:a3:22:4f:31:17:bc:c0:ff:
da:33:11:96:59:7d:ba:31:88:1a:67:63:58:da:ad:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:C5:3A:42:2E:01:76:B4:58:E7:AA:F5:4A:44:84:79:57:0B:D5
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:70:65:24:d0:49:e4:7e:24:f1:16:62:b4:56:62:e1:68:81:
6e:33:8c:37:1c:f4:55:13:e4:8c:4a:1d:01:92:4b:1e:eb:c6:
60:ba:3e:37:b3:18:de:3d:c0:64:4a:f9:bf:e4:14:cf:4e:1a:
de:91:55:0f:b0:0a:fa:fe:64:40:ec:79:98:18:a4:aa:bf:0b:
18:ab:2f:8f:ca:0b:c0:06:49:d1:3e:90:3c:5c:d5:47:bb:d3:
90:91:33:77:13:39:41:be:4c:06:87:63:20:3f:b3:fa:44:08:
ee:fd:d1:81:bf:21:0e:8b:6d:a4:5a:b9:aa:9b:39:c8:39:b0:
f8:b6:24:9d:47:a3:24:d0:1b:ce:25:1c:b7:90:3e:7f:52:08:
6a:93:e3:e4:2d:aa:51:75:21:b3:6e:fa:fc:45:9f:3e:cb:c0:
69:f4:f5:64:45:c7:92:00:27:7b:6f:cb:56:6a:27:26:2f:8d:
24:bc:3d:7b:b4:8a:69:ad:e5:55:96:3c:a4:c1:25:68:69:0a:
de:d9:f8:54:f2:1f:c5:83:b0:b2:e2:5c:73:05:a7:9d:a8:b4:
84:9a:5b:7f:a5:10:d9:13:14:08:0d:9c:45:67:2b:9c:fe:5c:
fc:f0:84:0b:85:a4:01:67:d2:1a:3a:c0:b9:c8:dd:ab:b2:64:
a0:ce:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client