Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
File: HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft (raw, json)
Hash identifier: Te+w98gHEnk5/y91RevKxmQtIZSmA2MUfUB9BVGSV4A=
Subject key identifier: D4:78:84:13:49:C0:CC:B2:8B:B2:1B:23:D5:C1:C1:B4:85:D8:DB:86
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Certificate issuer: /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial: 0194BC3C466876E8F603CBDB19D4565B6F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
Manifest number: 0F97
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 572na8_zoYemqPBejFGMRRPd8ps.roa (hash: vVsm+nWWBvjJ+3tIYusnSlDq71JJ2TZXjTfrysKXq88=)
2: HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl (hash: 3xvtdsHPV5OEgj429V4Li+nrZV00MEyBxHmRZskpjcg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:68:76:e8:f6:03:cb:db:19:d4:56:5b:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=d478841349c0ccb28bb21b23d5c1c1b485d8db86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:69:20:d1:37:b1:e4:b6:e9:77:87:7e:0d:
37:bf:c3:76:f3:08:e6:a8:2d:c4:01:64:38:06:ce:
c1:db:25:99:ae:1e:09:07:07:83:88:e8:e8:0d:12:
19:50:6f:25:a3:a1:39:ef:3a:55:3f:22:52:94:13:
46:61:30:dd:d0:cc:bc:d0:3d:34:79:3c:69:09:a8:
af:49:8c:20:6c:a9:f6:ee:78:3d:de:5b:89:7e:70:
eb:bd:a9:1c:c4:98:e5:02:3e:da:2f:23:97:d1:c8:
f8:08:1c:9a:a6:bd:cc:5a:dc:18:fd:3d:9f:53:f3:
71:2e:8f:b2:80:7e:5a:0e:e9:1f:50:b1:af:30:1d:
e4:d4:fc:c1:77:2a:d2:ff:96:86:7e:fa:90:0b:36:
a7:7e:24:84:16:b2:82:c8:de:4c:d5:f1:9c:de:5d:
7b:0b:ba:a2:ff:66:65:42:9d:66:66:93:a4:f7:ad:
06:84:d4:04:23:42:d3:c2:a8:cf:6b:c5:b8:1b:21:
37:0c:c5:9a:22:74:ba:8e:0c:90:61:e9:2b:87:a2:
42:b9:81:fd:39:32:30:2c:8b:8b:3e:ea:4d:49:01:
f2:ff:41:0f:86:b5:3b:f8:ff:de:6c:82:75:77:79:
42:89:2c:37:8f:65:56:0a:44:d8:f4:3d:38:d2:a3:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:84:13:49:C0:CC:B2:8B:B2:1B:23:D5:C1:C1:B4:85:D8:DB:86
X509v3 Authority Key Identifier:
keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:e2:0e:cb:5e:b1:9d:0e:58:b0:ee:04:d9:1c:3a:7c:31:
e6:01:1e:1b:76:cd:6b:9d:3e:13:8b:13:e6:14:56:5b:c6:12:
7e:00:41:5c:f7:38:0a:ea:34:76:0e:9a:98:99:0c:02:51:ca:
ca:91:e9:bb:42:62:20:b9:e9:2a:af:8a:78:8e:1d:f8:6f:0a:
05:84:8b:eb:9f:14:18:c2:b5:cd:70:b5:7e:70:33:eb:34:8e:
ff:72:93:27:d7:86:a3:9a:58:4b:bf:2c:cd:52:72:6a:1d:ff:
67:95:44:58:f9:2e:f8:37:95:8c:73:d0:ff:49:e4:b0:70:34:
d1:80:ff:0f:c8:3d:07:bc:48:d3:e6:58:79:d9:af:f9:f2:f1:
3b:a3:63:cb:0a:46:ba:fe:e9:57:e2:12:f1:b8:86:d4:30:48:
52:34:d0:ed:dc:64:8b:17:5e:4a:32:23:30:07:f3:4f:14:51:
74:bb:3a:a2:99:17:e6:f6:52:4d:c3:86:93:e1:8e:b9:45:2a:
2c:18:21:07:3d:94:80:67:07:36:e2:2a:91:8b:20:d0:cb:4d:
2a:b8:51:fd:80:ce:b2:b1:a4:3c:20:7d:65:1a:58:05:ab:19:
9b:ae:27:7e:8f:83:72:91:c4:fa:00:a5:f6:4f:9e:d5:7c:9d:
3e:67:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:30 2025 by rpki-client