Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft
File: hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft (raw, json)
Hash identifier: AqX4RIikAFKVr/gxib9/foLHzVThN8MwtQo34CHV8vs=
Subject key identifier: C2:3B:C2:A2:40:E0:C2:51:01:A1:73:97:9D:EF:EF:9D:F7:11:BD:6C
Authority key identifier: 86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
Certificate issuer: /CN=864abd435f899d570a8e5fb83bdad1153455dee0
Certificate serial: 0194BC04C3E1C8B3713AF0F139900A9789BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl (hash: EZHkRJAtd+hlyCkYfgzrNXyPz8bxiUF103aspZaBRRA=)
2: xSS92RJP_9kDYA2uBQZz6tpYK1I.roa (hash: rR5n4U9xDx2H85hw0wOs3NY+BK3tAcVO4QlJE3rUQXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:e1:c8:b3:71:3a:f0:f1:39:90:0a:97:89:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864abd435f899d570a8e5fb83bdad1153455dee0
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=c23bc2a240e0c25101a173979defef9df711bd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:f8:ff:15:1d:45:50:a1:6d:4a:61:a2:5e:
69:18:a3:0b:5f:97:7f:c0:97:95:96:08:4b:14:f7:
1e:72:c8:27:72:e9:fd:19:f2:7b:41:4a:5f:e7:6d:
66:58:64:61:e3:da:fd:d9:e4:fa:d8:3f:5a:79:fe:
b6:df:b4:6a:e2:a2:b8:40:d1:b4:67:83:18:ce:28:
63:92:ba:e4:9d:d2:38:7b:6e:47:18:f3:82:50:d9:
af:5c:d7:8f:b3:ea:11:49:ef:66:c1:de:fc:96:36:
79:00:99:12:4b:a9:09:f4:fd:dd:ad:a2:b2:ec:fd:
62:6c:96:8f:48:4b:03:ce:d1:1f:09:a8:dd:0c:d8:
c8:5f:13:9d:c3:ea:f7:c7:24:6e:52:45:42:17:fb:
c9:c9:35:fb:fd:00:13:ff:6e:d1:bc:fd:60:c2:b6:
43:a5:72:e6:98:ae:d3:ed:93:f5:64:55:18:3b:5e:
b7:4a:73:34:2b:05:66:2a:d9:a9:78:ad:5c:d9:4f:
9a:a8:4f:92:97:bd:0f:2c:ee:8f:db:11:75:ae:ca:
db:cd:39:98:aa:63:31:ca:3c:2a:84:3a:b8:1f:b9:
30:77:3e:fb:f3:35:2e:d8:13:d1:4e:d6:ce:c1:f3:
33:a7:15:f0:13:97:ef:27:bc:cd:a7:4c:68:3a:ee:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:C2:A2:40:E0:C2:51:01:A1:73:97:9D:EF:EF:9D:F7:11:BD:6C
X509v3 Authority Key Identifier:
keyid:86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:5d:56:1c:9f:81:78:89:9a:d7:22:ac:6e:49:79:49:7a:
dc:cc:4d:20:3d:57:b4:15:b1:6f:f4:3e:be:b2:a5:49:c2:d7:
b7:1c:4f:5d:39:bb:ab:bd:9d:20:ab:40:2e:9c:42:c0:36:a5:
65:3d:26:08:30:c1:68:ac:16:82:5a:e4:5c:4d:bd:d0:aa:02:
18:9a:8e:9d:6d:b7:85:ed:e5:39:23:39:d7:29:a6:17:3f:31:
ec:65:7c:ff:6b:34:a3:05:13:b5:7c:08:5d:d1:46:e3:83:38:
bc:7a:e7:b4:8b:31:3a:41:f7:7d:6f:52:b8:07:8a:de:f9:fd:
7d:4e:8d:f2:9f:fa:40:48:98:ba:bd:bd:ca:9c:d6:31:3d:e7:
4d:72:89:60:39:86:75:fc:ff:90:9f:a5:4b:83:07:cd:d9:cd:
ba:24:60:ff:75:0f:91:6c:de:92:bb:10:29:1f:45:b3:c8:2b:
c9:0e:ef:66:1c:db:c1:4f:2f:e2:48:dc:d5:d4:b2:f3:64:24:
39:7c:ab:0e:74:8d:78:f7:54:dd:c5:08:17:71:86:9e:0b:54:
6e:05:9f:25:02:f4:a4:8b:c8:88:5f:55:16:21:f1:9c:d0:9d:
a0:29:28:cd:c8:c0:4d:d4:64:4f:f9:e7:ce:ca:27:0e:e9:cc:
61:f3:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:44 2025 by rpki-client