Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json)
Hash identifier: 4XLRL+pWv/4L4UxtzdTlQYrrqH/wupvAot+DJibw6Ok=
Subject key identifier: 14:FC:B0:57:B9:17:39:64:14:B0:90:1F:20:BE:1B:FD:35:C4:48:FC
Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Certificate serial: 0194BD4EA3E2D8C29A347D597DC7EFBC4CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 1WUnRPC7TQDCpNLBGqvpavEUfIY.roa (hash: 9QvvOYrRTeWxJPVmSD6bFU7GJTKQU/1G/slvGit4Jc8=)
2: RNRuwUDah5HvDqZL8fLpyHsOiSQ.roa (hash: IBeeTINphPH0VAeRRmwtztVgI3ETdvS9ro285LvOBzI=)
3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: OV5OPrHPOOqnQ3kaTxV0Sx8lSSLpWNo80J/FfNkdERA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a3:e2:d8:c2:9a:34:7d:59:7d:c7:ef:bc:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=14fcb057b917396414b0901f20be1bfd35c448fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:12:2f:1a:21:f7:36:f7:4d:54:58:a7:11:
2a:34:b7:05:88:8d:05:7c:3e:ff:85:cd:cb:54:f9:
52:07:e2:ac:d1:57:41:93:40:84:7c:be:c7:40:9c:
2b:34:8a:65:42:ac:1b:6a:88:f8:de:5b:56:45:a8:
97:f1:08:8c:71:f8:bf:9e:8e:0f:96:d4:94:16:be:
30:71:1b:bb:2d:a7:e9:13:e9:8a:94:e4:14:59:4c:
66:24:c4:ef:09:aa:e3:90:12:c7:98:8f:35:e2:d6:
52:da:e3:55:e0:d3:56:83:7b:7f:51:3c:c3:9d:68:
18:df:d4:0a:7b:19:11:ac:7e:e7:ec:20:ff:a2:88:
9c:9e:8e:28:f1:93:3e:65:aa:9b:f2:39:8a:85:41:
cb:1a:f6:26:36:04:52:b8:fb:b7:eb:38:4e:23:73:
ac:dd:df:7b:cb:ba:2f:01:3c:a9:7a:f1:42:19:16:
a0:45:df:41:ff:56:7e:b3:5a:20:d0:22:da:18:1e:
23:ab:3d:f3:fd:12:23:70:58:76:95:b0:38:45:87:
54:e2:7e:02:25:f7:e3:20:ba:76:48:7d:75:44:bf:
a7:1e:71:f3:21:d3:7d:e1:43:a7:58:7e:18:12:6b:
f1:6a:37:c0:2f:12:03:bc:fe:e7:8d:8c:6a:5f:a5:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:B0:57:B9:17:39:64:14:B0:90:1F:20:BE:1B:FD:35:C4:48:FC
X509v3 Authority Key Identifier:
keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:88:2c:e3:10:c9:52:e4:ce:d1:77:c0:90:ce:86:36:bd:80:
1b:3c:70:f2:e0:cc:e9:79:e1:22:50:f1:06:7e:47:72:c5:a4:
f3:ff:af:74:b3:35:b7:8c:74:26:15:d8:8c:95:b8:17:d7:d0:
0f:cb:a1:0d:86:6b:79:22:c7:a3:a3:8d:e8:73:18:2f:63:ae:
fc:de:84:e4:89:e2:b8:b7:3b:6e:b2:e6:65:98:da:1d:79:11:
cd:2f:4e:56:e4:aa:4f:99:e4:cc:58:ea:f1:e9:fb:60:47:95:
4f:5e:db:e9:05:aa:47:fb:9a:bb:02:a9:aa:01:f2:5a:94:20:
6b:4b:a8:14:c9:eb:1f:67:9d:19:f1:7c:bd:aa:81:d1:7c:90:
42:63:61:52:bd:c6:1b:83:a0:21:5c:c5:33:77:64:58:1d:50:
e3:1d:a6:15:fe:1b:9a:ea:fe:9a:36:a0:d4:43:b7:b6:c4:65:
95:96:ce:95:e2:78:d9:20:ca:e1:44:02:a6:9b:fd:82:09:2a:
9c:93:6d:49:37:e9:1c:92:3c:f9:fc:36:34:e7:30:89:a3:f4:
23:ab:8d:d1:eb:34:6a:94:e5:96:a2:94:fa:c5:ab:c0:72:a3:
0b:a0:38:31:08:bb:1a:c6:4c:40:18:63:50:c6:83:a4:28:e7:
a2:d0:22:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:17 2025 by rpki-client