Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
File: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft (raw, json)
Hash identifier: SA+En/3oUH+VtFDqozj4NHMD9hwUz9EoI2fz5/s+EsE=
Subject key identifier: 25:0F:A5:ED:01:06:C7:3C:E3:81:F8:86:0F:41:D7:62:AD:10:EF:22
Authority key identifier: 1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
Certificate issuer: /CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Certificate serial: 0194BD17F33C3A6BAFFA12B03B4D3FECD4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
Manifest number: 0A9A
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl (hash: eKOVKlLP49qnmuOyV/4Z6iWgGzmt9OCgt3NKZXCsjtU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:3c:3a:6b:af:fa:12:b0:3b:4d:3f:ec:d4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ca4bf6c9a50c81f04b029836a427861ad72829a
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=250fa5ed0106c73ce381f8860f41d762ad10ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:ec:c1:ee:1a:29:e1:2e:2a:df:6b:40:77:
65:74:41:07:9b:e9:98:42:dd:ee:50:48:3e:ca:1e:
6b:66:64:af:e8:42:bb:6f:3c:3a:d6:d5:d3:16:8d:
04:2d:70:3f:9b:90:4d:35:14:85:a2:fe:a0:e9:7a:
16:3c:88:7a:db:88:85:90:04:3e:56:c6:68:f1:5c:
0f:cc:ee:74:72:0a:06:85:05:2e:49:4e:4e:20:57:
bf:ff:bf:77:35:2d:c2:ba:4d:a7:f3:eb:0e:67:b5:
8d:75:16:4f:a6:de:57:ec:d0:8a:82:f5:69:db:dd:
b5:9c:b1:33:a7:1b:f1:f0:6f:02:6b:80:85:16:50:
5d:bf:56:05:43:36:25:da:1f:69:de:65:8d:21:53:
77:ae:13:2f:a9:ba:09:ae:91:80:ab:c0:d5:66:44:
b4:e0:a9:bf:a3:d3:80:09:e4:b3:44:fd:da:10:7a:
cb:e9:99:e6:9d:70:b2:08:c3:f0:8e:15:86:3f:a7:
8b:e2:ec:fe:d9:8f:33:64:6e:7f:ba:0b:d5:21:03:
20:92:5f:8f:14:8d:9b:1b:73:c7:bc:5d:e2:4d:ca:
8e:b2:66:23:34:39:0b:13:37:c9:1c:80:1b:b3:f5:
99:c7:be:ea:75:87:6a:d8:15:d5:89:0d:83:15:b4:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:A5:ED:01:06:C7:3C:E3:81:F8:86:0F:41:D7:62:AD:10:EF:22
X509v3 Authority Key Identifier:
keyid:1C:A4:BF:6C:9A:50:C8:1F:04:B0:29:83:6A:42:78:61:AD:72:82:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ebd061-6c00-4c8b-a88e-5f84b68dd044/1/HKS_bJpQyB8EsCmDakJ4Ya1ygpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:34:1d:3d:7c:7d:19:bd:af:b7:36:4b:65:a2:07:48:5d:
82:22:7e:86:3b:44:3c:89:6c:cf:52:2c:04:44:04:86:50:06:
ec:5c:c3:ba:1d:12:89:d1:72:4f:30:23:f7:92:85:38:3e:0a:
7d:fc:1b:38:6b:b7:ee:f1:f6:17:d7:e5:af:37:58:5d:f9:69:
b9:00:34:db:69:e1:51:96:27:5b:00:86:af:66:5f:b3:07:9c:
ff:e1:8e:16:7e:55:cf:ac:2f:f1:43:43:8a:4e:7c:29:41:bc:
24:bc:70:60:a2:d1:b6:c6:de:32:6a:98:2c:7e:2a:97:af:8f:
76:bd:82:1b:b1:e8:57:93:78:cf:9e:26:db:0d:7a:41:5a:97:
35:cc:c2:69:d5:b1:ad:a6:98:fd:b8:9b:b3:f7:50:25:08:6f:
8c:20:82:78:51:14:4c:28:84:4b:96:7d:7f:54:1c:69:29:81:
58:be:95:41:d8:11:19:47:df:b2:ee:e6:97:e3:30:57:f7:2a:
06:63:1e:ba:44:bd:3d:d9:11:fa:06:e9:da:b4:d9:0a:2b:fe:
40:aa:7e:23:3f:f2:bb:3e:2f:8b:e6:ec:72:dc:a6:74:34:8e:
e4:d1:42:7f:34:1f:fd:33:c9:1b:b3:66:f1:b4:0d:c4:0f:ff:
e2:20:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:43 2025 by rpki-client