Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: D7/hgngcCxkqCHCTY+S8Mk5zaoZlKvfdsc/e/e31qug=
Subject key identifier: 64:27:39:E3:BD:22:F3:68:98:24:45:68:B8:06:9B:25:EB:FC:49:AE
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 0194BBCE4B2656EC373DA2080A8FB23EFFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: gbgGmIrD1t7MGFTf94aTVKjs8B0.roa (hash: Otjj2ijeLs3yno3O8LPTcW45eqy2npRC+4K8wG8FwHQ=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: Mh2CHJ3D5FCHa+TVMZDpurs5E3fghr2P0qgJLC4q2ZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:26:56:ec:37:3d:a2:08:0a:8f:b2:3e:ff:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=642739e3bd22f36898244568b8069b25ebfc49ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:16:03:64:34:af:14:38:62:9b:92:26:88:
b4:6a:63:c6:8e:aa:d9:e2:b1:c0:b6:76:15:cd:54:
8f:15:39:27:17:8a:1c:87:20:d2:c6:ce:de:ff:34:
54:a7:6d:5e:96:3f:a5:83:d5:bc:e0:df:ac:e7:7f:
9c:83:6d:96:29:76:c2:91:51:63:e3:e9:53:c0:37:
a6:16:aa:5f:b9:c3:7f:16:9a:16:02:b1:2e:29:6d:
a8:ec:56:45:f7:1b:8f:bf:b3:4a:f8:a9:12:5c:fa:
28:49:fd:a1:3a:0b:2c:f2:1c:7d:62:0c:c4:28:ec:
39:43:8a:41:85:b7:61:ed:59:cd:be:52:42:0c:57:
5e:3b:e3:64:51:e7:c2:48:1a:d7:64:43:c7:35:e8:
7e:a8:26:93:55:d3:6b:24:a1:d2:c5:f5:d4:be:36:
89:15:d2:59:a9:76:0a:ac:a3:f4:fb:78:2e:a1:52:
22:57:25:21:78:cf:34:67:85:25:ec:38:a4:05:7c:
44:b5:71:d2:3d:ca:34:38:4e:25:14:f7:17:ae:7b:
ad:05:57:d9:50:e9:ff:1b:7e:1c:53:fd:7c:1c:80:
5f:73:23:aa:42:6b:be:dd:c9:37:15:5e:c2:61:50:
33:28:75:cc:1f:1b:35:fe:ac:99:f5:7a:ec:02:dc:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:39:E3:BD:22:F3:68:98:24:45:68:B8:06:9B:25:EB:FC:49:AE
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d0:48:1e:90:83:d5:8f:37:42:1d:15:63:ac:44:06:30:60:
ee:8f:48:e0:0e:49:1d:f9:2f:12:ce:51:7d:ba:27:1c:7f:44:
84:43:2f:86:63:b5:9d:34:71:c1:aa:ba:7d:0b:17:22:d2:91:
50:fb:42:da:68:9f:c8:6a:56:e3:04:6b:ad:45:f7:23:2e:00:
85:39:fe:f6:b3:64:bf:8c:a9:c2:28:0b:7a:4e:40:62:88:77:
66:2e:85:8c:7a:a3:64:7e:2a:e0:f9:e2:da:68:ca:08:4c:85:
20:7e:69:eb:aa:a3:fd:76:33:92:e3:42:4a:f2:e9:3c:a1:06:
c5:14:56:0c:83:59:d6:81:e0:a9:3f:f3:02:73:3f:1e:c1:00:
a1:4d:11:49:fb:3f:e9:db:f5:06:10:bf:ae:00:d0:a8:e3:ad:
4e:1a:d8:55:10:85:9b:b0:dc:f4:91:25:ff:c2:65:19:66:8b:
f0:f3:3c:a4:4f:93:54:92:7a:36:03:f8:8e:77:34:28:7f:f9:
e2:64:c7:02:de:61:6e:e5:18:11:6c:14:10:e3:ad:ac:80:ad:
60:97:91:76:6a:ed:ab:ca:3a:32:3d:c8:36:b7:f2:fd:c1:1d:
0f:e4:72:24:76:44:b6:db:6f:36:97:38:af:7b:ab:5c:1f:22:
d5:10:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:17 2025 by rpki-client