Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
File: HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft (raw, json)
Hash identifier: oQClXyOb3mi59Q7QVnATdrZYCQo+EOZFYAOX+XJgROg=
Subject key identifier: CB:77:A0:BF:BC:A1:C8:5A:D4:04:5B:E5:5B:B1:ED:5A:69:D2:6C:72
Authority key identifier: 1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
Certificate issuer: /CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Certificate serial: 0194BBCE2D6A3CCF992396B81527D88A0416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl (hash: mvlETN9DI0Myg6Dxwhw/YJcHgJgCVArrBCZGVoRJkqY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:6a:3c:cf:99:23:96:b8:15:27:d8:8a:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaa87c6f8e320c93da9162250dac558c871dc93
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=cb77a0bfbca1c85ad4045be55bb1ed5a69d26c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:8d:df:54:c9:f2:14:17:81:f4:72:fb:a1:
d1:ee:8b:62:45:3e:43:04:c2:40:fd:4a:31:b8:b4:
4f:66:cd:c7:67:b0:a7:f2:68:5d:21:00:65:54:98:
2e:06:d3:06:56:a9:92:da:60:ee:1c:c3:8e:7f:24:
8f:df:a1:ab:bb:ee:9e:2e:38:14:c8:05:24:4a:9f:
01:07:69:f8:a3:29:8e:78:4e:6a:41:73:51:f8:1a:
d0:11:b2:dc:62:0b:94:aa:90:9a:9e:78:13:7b:20:
3b:28:fb:0f:98:5a:18:27:ed:93:9f:3f:2f:df:fb:
4a:12:5e:a5:29:9a:9e:4c:62:69:2a:d9:5c:41:c2:
c6:89:f5:49:b8:a8:b8:84:70:12:3d:65:09:32:ff:
9e:7f:9a:90:1d:64:19:73:d7:36:1b:09:fe:37:9d:
32:bb:4e:d4:7c:ad:56:cb:d1:c1:78:6a:3c:4c:cc:
ab:e6:51:6c:70:e7:aa:c4:34:04:53:b8:a9:04:1e:
08:fc:08:e3:d3:2a:48:ea:cc:b2:0a:8b:a4:ba:be:
0e:9c:64:70:d0:d3:51:f2:e1:08:3c:c5:e7:ea:86:
5f:c5:ed:1f:03:3e:cb:0a:71:a4:d8:f8:36:a6:9f:
69:a0:db:8a:e4:79:68:08:23:d4:46:25:d8:9f:25:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:77:A0:BF:BC:A1:C8:5A:D4:04:5B:E5:5B:B1:ED:5A:69:D2:6C:72
X509v3 Authority Key Identifier:
keyid:1E:AA:87:C6:F8:E3:20:C9:3D:A9:16:22:50:DA:C5:58:C8:71:DC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqqHxvjjIMk9qRYiUNrFWMhx3JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ea9c46-0b4f-48a6-899e-1af568d8908a/1/HqqHxvjjIMk9qRYiUNrFWMhx3JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c2:d5:92:65:1a:c9:f3:2d:6e:02:66:dc:5a:a9:d9:ad:90:
ba:c1:30:79:bb:8a:8e:c9:3f:6d:42:7c:78:37:62:d6:f6:56:
d9:b9:ae:f6:cc:d8:8f:24:e1:10:0d:6f:76:44:fa:92:f7:f6:
a2:8c:3c:79:c8:4d:36:99:84:35:5e:57:e4:44:40:f1:c0:a2:
f0:4c:99:e1:bb:e4:fa:1b:0d:41:80:74:ec:90:49:75:cb:b7:
b5:73:79:45:21:3a:e7:de:a8:44:f8:26:83:25:58:a0:a0:db:
f2:6b:02:1d:ea:22:c6:de:4c:f0:18:b9:e1:4a:77:ce:cd:08:
ff:a2:15:cb:12:1a:95:8c:68:79:d2:08:6c:c8:54:e1:0e:33:
01:0f:16:1a:0b:9a:15:f4:0c:63:35:bb:41:79:7c:c7:77:a3:
30:9e:df:fe:d5:40:04:57:11:98:0c:d5:d6:fd:5f:6e:f1:94:
14:49:af:43:74:3b:34:dd:a0:61:95:01:41:28:14:75:f8:c3:
e6:a9:7f:83:32:bc:25:54:e4:52:da:1e:ec:41:9c:d7:cf:1a:
2f:48:9f:cc:2f:b3:ff:fe:da:2b:9b:59:9d:57:75:03:44:63:
21:86:e0:34:86:c7:86:4e:6a:ad:e5:23:3f:db:a5:50:22:8a:
16:f4:5a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi1qPM+ZI5a4FSfYigQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWE4N2M2ZjhlMzIwYzkzZGE5MTYyMjUwZGFjNTU4Yzg3
MWRjOTMwHhcNMjUwMTMxMTAwMDM4WhcNMjUwMjAxMTAwMDM4WjAzMTEwLwYDVQQD
EyhjYjc3YTBiZmJjYTFjODVhZDQwNDViZTU1YmIxZWQ1YTY5ZDI2YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovKN31TJ8hQXgfRy+6HR7otiRT5D
BMJA/UoxuLRPZs3HZ7Cn8mhdIQBlVJguBtMGVqmS2mDuHMOOfySP36Gru+6eLjgU
yAUkSp8BB2n4oymOeE5qQXNR+BrQEbLcYguUqpCanngTeyA7KPsPmFoYJ+2Tnz8v
3/tKEl6lKZqeTGJpKtlcQcLGifVJuKi4hHASPWUJMv+ef5qQHWQZc9c2Gwn+N50y
u07UfK1Wy9HBeGo8TMyr5lFscOeqxDQEU7ipBB4I/Ajj0ypI6syyCoukur4OnGRw
0NNR8uEIPMXn6oZfxe0fAz7LCnGk2Pg2pp9poNuK5HloCCPURiXYnyWsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt3oL+8ocha1ARb5Vux7Vpp0mxyMB8GA1UdIwQY
MBaAFB6qh8b44yDJPakWIlDaxVjIcdyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUt
MWFmNTY4ZDg5MDhhLzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lYTljNDYtMGI0Zi00OGE2LTg5OWUtMWFmNTY4ZDg5MDhh
LzEvSHFxSHh2ampJTWs5cVJZaVVOckZXTWh4M0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcLVkmUa
yfMtbgJm3Fqp2a2QusEwebuKjsk/bUJ8eDdi1vZW2bmu9szYjyThEA1vdkT6kvf2
oow8echNNpmENV5X5ERA8cCi8EyZ4bvk+hsNQYB07JBJdcu3tXN5RSE6596oRPgm
gyVYoKDb8msCHeoixt5M8Bi54Up3zs0I/6IVyxIalYxoedIIbMhU4Q4zAQ8WGgua
FfQMYzW7QXl8x3ejMJ7f/tVABFcRmAzV1v1fbvGUFEmvQ3Q7NN2gYZUBQSgUdfjD
5ql/gzK8JVTkUtoe7EGc188aL0ifzC+z//7aK5tZnVd1A0RjIYbgNIbHhk5qreUj
P9ulUCKKFvRaYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:31 2025 by rpki-client