Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
File: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft (raw, json)
Hash identifier: mhglhOZcwDB3ZyPX8MeSylvXA63nVsdzcoR0qVdThRw=
Subject key identifier: BB:C2:EF:00:63:22:59:69:15:70:4F:5C:C7:ED:E0:7E:3D:5D:C1:BB
Authority key identifier: D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
Certificate issuer: /CN=d6199013821ad99eb45b138af507984ef746d1ab
Certificate serial: 0194BD17FEDFA3405CFA978C024FE793A8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
Manifest number: 04FF
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: 1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl (hash: mJ5zJsC0maxEiBa3FZgjo+Y/uRxI9hZHmbi6uwdA8TA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fe:df:a3:40:5c:fa:97:8c:02:4f:e7:93:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6199013821ad99eb45b138af507984ef746d1ab
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=bbc2ef006322596915704f5cc7ede07e3d5dc1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:1b:b4:f8:f8:10:02:38:0b:a8:42:c1:8a:
1e:7f:bc:4e:39:9d:d0:89:88:d6:77:31:90:6a:5d:
01:3e:83:4a:1e:31:e3:1a:ea:8d:74:92:10:c7:6e:
28:bf:52:e0:73:47:b4:81:38:c6:53:c5:47:74:2f:
24:7d:f1:67:7b:f3:e5:de:d8:1a:0c:51:67:f2:ac:
ef:88:d2:95:83:1b:6a:0f:34:48:72:50:4d:1b:45:
f7:0f:31:92:9b:ae:09:9e:5d:10:d3:2d:61:9a:29:
f2:9b:85:0a:3e:ea:5c:22:65:fd:d7:12:a8:b3:8b:
16:bd:6c:15:f0:5b:72:b8:57:39:89:97:c5:db:4e:
73:80:cf:94:5d:87:51:35:63:d5:a8:41:b1:f8:22:
67:69:85:cf:ba:a3:06:71:d1:1d:62:61:58:5d:fd:
23:15:a7:1b:59:35:ca:50:73:c6:dc:d6:39:72:e9:
48:ba:c9:a4:e0:e1:48:30:c0:94:dd:e4:9d:c2:85:
cd:f4:24:2b:f7:fe:fd:4d:57:5b:d0:ca:86:96:61:
1a:2f:e1:3a:4f:74:31:c0:af:c3:dc:3f:a8:af:58:
50:03:47:46:ec:30:1f:b9:46:e1:dc:bc:b2:06:8a:
27:b7:5f:76:a8:3a:68:47:8b:00:9c:dc:b0:c8:37:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:EF:00:63:22:59:69:15:70:4F:5C:C7:ED:E0:7E:3D:5D:C1:BB
X509v3 Authority Key Identifier:
keyid:D6:19:90:13:82:1A:D9:9E:B4:5B:13:8A:F5:07:98:4E:F7:46:D1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hmQE4Ia2Z60WxOK9QeYTvdG0as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ed4470-0ea3-4e3e-ba85-316ef1e253c0/1/1hmQE4Ia2Z60WxOK9QeYTvdG0as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:7f:61:21:31:af:71:2d:16:81:c4:7d:63:7c:52:b7:c6:
40:ab:8b:9e:30:f2:15:8c:ad:23:c0:f1:cf:48:5b:a1:a8:0e:
5f:b9:57:8f:a1:b2:3d:85:eb:ae:7f:06:c7:29:39:1f:d6:33:
ba:1f:ed:bb:02:c3:18:c2:e1:24:78:1b:8b:5b:02:d1:da:df:
a4:34:c8:f3:3d:38:f3:9b:2d:e1:68:43:59:27:4e:25:ea:b3:
87:a0:31:59:00:c9:79:96:ef:38:89:56:69:12:82:5e:e7:00:
12:d3:20:20:78:22:91:a1:9e:f9:4d:9b:3b:ee:9e:3d:b7:bd:
ef:f2:6f:2f:e4:58:e5:d9:bb:c5:f5:8e:91:02:51:1a:02:89:
3e:05:3f:1e:ad:cc:73:05:90:c3:b3:11:8f:64:26:60:d8:3b:
e0:77:1b:02:f8:9c:72:d8:b8:db:2c:d3:01:93:b4:c2:b5:5b:
e9:5d:59:35:fa:d8:91:e7:ed:31:34:26:e9:3a:36:15:79:d1:
aa:05:1e:12:88:41:15:ab:ee:c6:a3:2b:75:6b:dd:2c:4e:e3:
59:f4:75:f7:4d:08:d2:b1:69:1e:d3:23:7f:b0:2a:89:11:f8:
42:3c:1a:ce:b4:db:5c:a4:23:0f:3c:4f:73:3a:be:94:c9:f2:
d0:33:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:18:23 2025 by rpki-client