Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
File: hpNlUyawRyyGbFyZMC4rLXjL3fc.mft (raw, json)
Hash identifier: 29gpAJkgIfBFRXSJmBMkcPpx9QBgQ1kKe7cftGvSje4=
Subject key identifier: 91:37:AF:D6:C6:62:FB:9B:29:AB:EC:CD:B6:13:08:E3:03:7C:30:BA
Authority key identifier: 86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
Certificate issuer: /CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Certificate serial: 0194BD4E48AE1A5AD3188756BE606EF19A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
Manifest number: 0D02
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: hpNlUyawRyyGbFyZMC4rLXjL3fc.crl (hash: XWfPJ2ogmQrp0jshgcqjuUNQNGm+5CozDad4hOkTMTc=)
2: z8Qgne-FkfA3KYq3e01ob5TLZp0.roa (hash: 7fco4lzAt1GZtpXkjpIq4UVmOihkqjl0I1nfOSI77gY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:ae:1a:5a:d3:18:87:56:be:60:6e:f1:9a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693655326b0472c866c5c99302e2b2d78cbddf7
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=9137afd6c662fb9b29abeccdb61308e3037c30ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:92:dc:a7:10:94:1f:72:74:98:35:d3:ad:
7d:a9:a5:0a:69:3c:1f:f3:41:83:7a:e4:9a:f9:7e:
e8:95:35:41:c3:b7:a0:28:b2:0e:a7:53:ff:89:c9:
35:a2:23:75:c5:fd:14:69:67:58:3f:df:a8:ba:20:
3d:67:68:6f:4f:a2:7c:ff:69:31:7a:10:24:ae:4a:
81:b8:00:34:00:d4:dc:c3:71:24:a1:5d:05:0d:0a:
fe:e0:51:c8:16:49:48:cc:7f:23:e4:5f:2c:ce:43:
11:14:f2:7a:5c:0c:00:60:64:0c:e4:c7:13:27:0c:
6a:48:ba:2c:24:01:67:d8:15:f3:51:3a:b6:81:3c:
50:dd:95:a0:87:d8:cd:6f:85:fa:4a:8b:b3:68:6f:
e5:f0:71:c3:0c:c4:b9:6d:41:dc:71:79:cd:5b:19:
41:b6:26:4d:4e:9e:63:fb:84:74:bd:41:f8:c7:1e:
60:ce:90:70:4b:aa:0a:49:0b:36:dd:60:14:80:bc:
88:7b:52:a2:39:c0:6a:84:72:4f:a7:7f:5c:77:1c:
2a:60:e9:74:bd:ed:19:45:d1:08:b5:c3:47:cd:7f:
b7:05:40:65:db:b4:f0:74:92:11:87:f0:bd:8d:be:
98:3f:8a:29:87:48:1a:74:ac:23:e4:01:09:c1:d3:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:37:AF:D6:C6:62:FB:9B:29:AB:EC:CD:B6:13:08:E3:03:7C:30:BA
X509v3 Authority Key Identifier:
keyid:86:93:65:53:26:B0:47:2C:86:6C:5C:99:30:2E:2B:2D:78:CB:DD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpNlUyawRyyGbFyZMC4rLXjL3fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dac337-8079-43bf-9fe1-9e6772ed39a6/1/hpNlUyawRyyGbFyZMC4rLXjL3fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:04:0a:72:3f:f5:e5:4c:f2:9a:9c:69:9a:22:0b:10:95:
1c:34:14:e5:e5:d3:a4:60:73:07:d0:e2:e0:28:5f:bc:83:b6:
d6:5c:ac:38:77:9e:93:cf:20:a3:9d:b1:ea:ef:7f:66:98:ba:
50:f4:2c:d8:df:aa:92:38:a9:8c:ee:67:bc:5a:42:fd:b4:72:
1d:3b:5d:c4:78:0a:44:5d:a9:e8:c3:fd:6d:fe:23:a5:c7:b2:
d3:e4:ee:1d:b2:5e:4f:27:e6:08:64:22:6a:5a:ca:77:24:cb:
53:4c:6b:ee:cf:cd:2f:ce:f5:18:c1:c3:38:33:2a:c5:13:b0:
d6:ff:84:3c:e7:73:53:a2:f5:fb:a4:58:d1:bd:2c:0e:61:19:
72:4b:46:e3:62:c1:ec:3f:a9:f7:db:bc:c9:26:d1:c0:a0:62:
dc:51:82:c4:dd:fd:27:ba:81:0f:1f:fe:4e:5b:9e:66:69:24:
43:74:d5:b4:2e:14:6c:6b:e2:f5:71:f4:91:bc:1b:58:4f:e0:
2a:9b:fc:ab:ef:a9:d6:9a:fa:f4:47:b6:7b:0e:31:a3:50:12:
79:5d:20:f8:dd:d6:60:1d:18:a7:bc:6e:aa:6f:6c:f3:fd:d7:
8d:b9:b0:19:06:98:31:4c:cd:e3:22:56:75:71:16:b7:d6:4d:
fb:93:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client