Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
File: HMIQHIyT1FjSXDElyMm8ya8TKHE.mft (raw, json)
Hash identifier: UOZvWrq+Pf1O3/MM0NSufv+oEddheQZrIK8bg1AnBj8=
Subject key identifier: 8B:E2:19:F1:AC:4E:E4:39:90:71:8E:6B:EE:75:32:16:76:73:41:7D
Authority key identifier: 1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
Certificate issuer: /CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Certificate serial: 0194BD8581DB3E360177101B84C926635CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
Manifest number: 025F
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: HMIQHIyT1FjSXDElyMm8ya8TKHE.crl (hash: gYs0o7VLQHzL15qjkF+lAv34RoA7ol27+8PZsN9Jevo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:81:db:3e:36:01:77:10:1b:84:c9:26:63:5c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc2101c8c93d458d25c3125c8c9bcc9af132871
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=8be219f1ac4ee43990718e6bee7532167673417d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:5e:b6:a8:5f:2d:41:27:d4:cd:51:fb:7c:
54:48:c8:ad:d4:13:4e:46:b8:8c:30:f9:c4:a0:47:
51:ea:75:3d:a9:5d:d7:e1:f9:ce:38:6b:0a:89:ec:
88:48:6f:c2:37:db:30:36:90:ac:66:dc:71:9c:ed:
ce:05:d1:ec:e4:f7:7f:68:d6:1d:e0:fb:1b:ce:33:
a3:72:20:73:f4:3b:cb:13:07:30:57:28:1c:90:c7:
29:a5:92:be:b4:9c:f3:5d:3e:d1:3b:eb:07:78:02:
5f:3b:90:62:90:e0:e3:c7:4f:18:9c:d9:54:84:16:
ae:c7:3e:28:48:8b:e9:c7:2c:bc:b3:bb:9e:70:19:
a6:db:89:ed:81:70:68:5a:64:57:ad:e9:76:72:b4:
1a:5e:59:f9:ee:24:a2:2e:e9:f6:33:53:7f:85:d8:
5c:31:a4:4e:3e:c0:41:c6:b0:2c:08:ea:8d:5c:98:
d4:31:8f:97:b7:11:d6:90:04:06:59:4e:7e:ac:c5:
d3:b7:3e:90:cb:32:17:96:6a:1d:3e:32:31:68:c8:
52:2a:20:39:81:76:17:97:3a:62:b0:aa:73:02:3e:
51:83:67:91:c0:f9:0c:e0:8f:8f:ff:30:e9:0f:fc:
d4:e0:bd:55:69:89:08:a5:f3:fe:e9:a4:6a:89:c5:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E2:19:F1:AC:4E:E4:39:90:71:8E:6B:EE:75:32:16:76:73:41:7D
X509v3 Authority Key Identifier:
keyid:1C:C2:10:1C:8C:93:D4:58:D2:5C:31:25:C8:C9:BC:C9:AF:13:28:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMIQHIyT1FjSXDElyMm8ya8TKHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3c293f-789d-4695-b57f-6aaf5496065e/1/HMIQHIyT1FjSXDElyMm8ya8TKHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:88:77:99:5e:e0:6d:d4:b5:cc:e4:c5:ca:d1:9a:70:9a:a7:
4c:2f:e6:56:b6:1f:e2:28:37:1b:aa:89:86:46:3a:1a:5b:a3:
33:85:d6:19:6b:4b:3d:fd:73:cf:6c:98:1f:52:49:74:9c:06:
cf:a3:f1:42:77:10:7e:ba:d2:41:8a:08:26:f3:d9:f6:02:29:
aa:0a:9b:52:03:2e:2f:e6:86:33:5c:99:6d:5d:53:d2:48:ec:
1e:7b:63:ac:2c:58:41:88:b0:a6:33:ff:5f:b3:f2:2a:31:24:
c7:73:76:c0:82:4c:85:3a:ac:36:eb:3f:96:cb:57:a8:ed:b7:
d2:d0:24:1c:1c:72:f4:43:05:1a:c7:9d:d0:26:2f:32:0a:25:
5f:5e:73:ba:67:99:c4:e0:d2:7b:62:92:ab:b1:2d:f8:54:a8:
c5:ac:98:4b:55:05:54:6c:55:d2:47:5e:ed:f8:42:39:5f:0b:
15:a1:6c:58:bf:83:1d:e5:bb:c1:96:38:42:fc:d8:ad:79:96:
ee:0d:d6:b0:db:0b:f8:44:66:48:fb:63:78:6b:5c:af:c0:f5:
89:b1:99:dd:27:d0:e0:1e:cb:31:cb:05:92:f3:93:bc:7f:a5:
34:ee:19:f1:cf:65:48:37:1a:f2:87:20:92:79:c1:49:5e:13:
4f:3b:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:07 2025 by rpki-client