Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
File: hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft (raw, json)
Hash identifier: Iv6L8W5cy8jRWcpO0GvkobXiWL86/Do5RvCX+PEfS10=
Subject key identifier: C2:65:45:F8:E5:6C:3D:D2:16:EE:25:9A:A0:EA:66:CC:87:82:C2:D8
Authority key identifier: 86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
Certificate issuer: /CN=8618b054d20dfdc9c5493c52c86234774904be77
Certificate serial: 0194BBCE035CA66205AD6BF82C6EA79393C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl (hash: tL6/epzYS19mBfIeqalN1Mu1nwheSe0B67SANNOuTx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:5c:a6:62:05:ad:6b:f8:2c:6e:a7:93:93:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618b054d20dfdc9c5493c52c86234774904be77
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=c26545f8e56c3dd216ee259aa0ea66cc8782c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:51:a5:7b:ed:5b:3b:83:b5:57:e0:80:bd:
20:a0:17:59:88:6b:04:83:79:83:bb:e3:75:b8:01:
73:86:43:a2:4c:63:51:08:43:52:e1:47:20:46:7b:
ed:14:aa:e4:3a:33:2d:ce:51:25:1b:30:ee:74:ff:
f9:d6:d8:6b:e3:29:63:e1:3d:1b:fd:23:7b:17:e5:
01:b7:6c:60:d2:75:eb:9f:ac:04:c9:40:d2:84:c5:
57:79:37:8f:a1:2f:ae:a2:f0:5d:26:d4:a2:e8:6a:
77:02:86:8f:3b:9a:e4:b1:54:44:0b:29:74:31:eb:
4c:63:97:f1:7a:16:ae:c3:12:64:d3:c9:b6:91:5c:
c8:f2:5b:cb:06:f0:75:0e:ac:56:d3:aa:7e:53:64:
5b:f9:a3:20:f0:1b:16:b0:be:4a:94:53:02:f6:1a:
07:96:c5:83:6d:1a:82:ff:96:8e:2f:0f:d4:d0:9b:
58:57:a3:53:39:df:17:22:51:77:b8:47:05:49:ef:
07:2a:fd:cd:a7:c3:ca:85:3e:df:64:04:11:ca:8e:
b3:51:27:79:bb:0f:ab:41:46:4e:69:ea:3c:75:d5:
69:8c:54:1c:78:2c:bd:67:99:e0:68:a7:85:38:7e:
4f:18:99:9e:40:3a:54:8c:0c:d7:ba:3d:01:c0:b2:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:45:F8:E5:6C:3D:D2:16:EE:25:9A:A0:EA:66:CC:87:82:C2:D8
X509v3 Authority Key Identifier:
keyid:86:18:B0:54:D2:0D:FD:C9:C5:49:3C:52:C8:62:34:77:49:04:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiwVNIN_cnFSTxSyGI0d0kEvnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f7f17c-c27d-408f-99c1-c4736ca5c25a/1/hhiwVNIN_cnFSTxSyGI0d0kEvnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cc:60:47:b8:da:80:db:b6:70:3c:6b:d1:a6:e2:7b:ee:02:
d0:94:c3:e3:f4:eb:5b:2e:9a:ef:69:54:94:84:40:2f:34:20:
e6:c7:b9:e5:fd:5d:2d:e1:ea:09:01:51:4a:d5:a3:b7:aa:9e:
1f:1e:9c:23:3b:b1:46:bc:cd:86:d7:46:98:f3:b0:d5:2e:13:
13:ed:cb:ed:38:b4:52:3b:19:1a:bd:c3:19:e4:25:4e:be:70:
d8:5a:66:f0:43:eb:f8:11:0c:aa:75:2c:7f:4b:ed:f3:04:00:
24:36:d8:2a:13:31:30:17:62:a5:a5:45:e0:a5:b4:22:f4:7d:
44:77:ae:7a:14:28:0f:c2:e2:59:45:37:e9:42:b0:11:3c:7d:
94:e5:19:b1:d0:01:0f:3a:0d:2c:e0:28:ab:1b:5c:0c:06:2c:
b0:4b:5e:be:71:9a:1e:7d:c1:41:02:86:76:8f:6e:0e:8e:92:
ba:bf:ff:bc:54:41:b6:a3:78:f7:7d:91:82:85:cf:d5:80:bb:
a2:bd:e9:33:9a:1e:6f:3c:64:ac:1f:dd:73:76:6c:de:be:fd:
ab:9a:83:ec:e6:29:db:e4:5e:41:0a:9f:e0:59:8e:bb:b9:c9:
72:a5:2c:a8:fd:90:aa:e9:38:7c:46:38:d7:bd:41:9c:48:97:
1e:19:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client