Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: N2jaerFwnt7MfCMkSImasw+8sDVszr9Q3HDdZeGhPu4=
Subject key identifier: D8:29:CC:08:61:E4:CE:4D:35:7E:65:65:3A:2B:AF:9D:0B:65:5B:F8
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 0194BC72965A3E57C55B4210D469C1355044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: iEmT2Hhj7dCU0Dw+13kzIDNWgM6zrZq2giC41VCpS44=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:5a:3e:57:c5:5b:42:10:d4:69:c1:35:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=d829cc0861e4ce4d357e65653a2baf9d0b655bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:12:a1:2f:29:94:9e:59:2f:d1:aa:ef:99:
77:16:ac:ab:6b:72:e9:90:67:06:4b:d3:7d:72:2f:
c2:bf:23:5f:58:03:18:d9:3a:98:09:5a:f0:bd:9e:
7e:f9:63:fd:46:4e:e1:bb:be:58:80:dd:cf:93:cc:
d3:e9:4b:80:8b:f4:73:cf:3d:9a:49:75:9a:56:e8:
59:6c:f0:17:b7:b5:6c:3c:25:3b:f5:60:1d:13:8d:
4b:37:ce:87:2a:cf:b5:f1:0f:de:31:2a:bb:d3:98:
dc:65:4b:15:c8:aa:c8:eb:cc:17:ff:d3:74:23:cb:
e3:f0:0d:53:42:a7:4b:34:fd:ed:35:eb:68:14:04:
69:63:98:f5:c9:09:5a:8d:ff:f6:92:2c:2b:8d:1c:
76:06:29:e3:d1:57:78:c2:d4:19:4a:65:bd:fe:ea:
20:f1:6b:fa:06:fd:c3:21:c9:13:2f:f7:d8:b5:db:
df:0f:53:bc:fc:f3:3d:68:52:6a:8d:32:59:2f:cc:
ac:e3:db:2e:ad:7e:4b:da:e9:8c:97:e2:c4:71:c2:
8d:ed:8d:66:71:7d:60:d0:6c:d6:20:28:27:bc:b7:
61:00:fe:0f:5c:50:b9:1e:f8:e5:21:26:40:8f:91:
9a:96:2f:14:e0:51:44:92:c2:82:24:28:f5:79:79:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:CC:08:61:E4:CE:4D:35:7E:65:65:3A:2B:AF:9D:0B:65:5B:F8
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:54:35:78:32:a2:8a:d1:2e:cb:c0:10:b1:39:46:27:b7:7f:
dc:70:ab:34:05:40:03:8e:72:83:39:e3:f1:dc:36:78:0f:15:
91:c1:37:0d:f0:8a:5e:2a:49:c5:4e:68:44:5a:38:56:32:f5:
3a:46:ea:8e:04:6a:58:48:b9:c9:52:01:32:6a:7a:44:bb:d5:
6b:5a:4a:8c:0a:d4:c5:0c:a2:58:57:05:8a:a9:85:3f:64:73:
a3:9f:90:db:8e:4c:73:31:70:d9:2c:86:b4:05:4c:73:71:77:
e8:2e:c4:86:03:15:ab:fc:03:f0:2d:5b:13:9e:16:12:9c:6d:
dd:99:3a:96:39:0e:74:b5:d4:0f:7d:4a:6b:e5:63:5f:53:fd:
f6:5a:95:90:a6:35:bd:93:39:dc:b0:b7:36:15:c7:60:34:0a:
a0:83:b5:7f:9a:19:ec:5d:7b:95:aa:d6:f7:64:70:74:c1:73:
68:02:16:4d:84:03:f8:9a:28:b9:20:16:ac:68:0f:93:db:22:
b1:fb:9e:a0:55:52:6f:1c:3e:39:a0:39:65:38:b1:0d:b0:2d:
6a:d9:97:28:2d:38:27:63:42:36:53:82:4a:25:3c:69:a9:5e:
05:c6:97:a7:35:f7:da:bb:b2:d3:ef:48:52:e7:25:b1:bf:6b:
ae:a9:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:42 2025 by rpki-client