Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
File: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft (raw, json)
Hash identifier: TRPzt5OztJBsnIXM0l6+WNdB6QTdnRMLcA5VQ4e3rkc=
Subject key identifier: 23:4D:44:16:56:69:18:A6:CA:3F:D6:61:BF:71:F7:E4:A6:D3:03:89
Authority key identifier: 86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
Certificate issuer: /CN=8649aa4b328735536d27c168cdbf4ea177701dce
Certificate serial: 0194BD17C8ABFE0FD4364CD74EDE84DFF857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl (hash: 9JS5dQafrB72B3SAad3DYFLjFz2V6iJpfpCSDBAAucc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c8:ab:fe:0f:d4:36:4c:d7:4e:de:84:df:f8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8649aa4b328735536d27c168cdbf4ea177701dce
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=234d4416566918a6ca3fd661bf71f7e4a6d30389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:b1:37:7c:c6:38:ec:29:f4:2f:45:c7:2b:
6e:00:3e:eb:cf:0c:c4:f8:9a:34:ee:4b:ee:4e:eb:
05:36:6c:11:5e:70:77:43:10:38:ab:3d:2c:37:4f:
cb:a7:23:ed:48:87:a3:e6:07:ec:08:eb:5d:75:c6:
bd:53:50:ea:fa:10:f4:0e:25:4e:00:53:73:70:7a:
9b:50:b8:59:6a:9a:2f:fc:13:94:5b:cb:6d:69:48:
00:22:4f:75:31:2e:81:ee:2d:60:ab:41:8e:14:b0:
a5:b1:97:59:0a:12:44:08:73:78:20:e2:86:09:9c:
8f:0f:05:40:f6:f1:86:19:46:b5:5d:26:4e:09:52:
ee:12:70:eb:4f:44:d5:cf:0a:47:9e:c3:14:07:df:
4f:a4:b9:db:56:26:32:5c:b4:52:41:1b:89:5a:73:
77:d5:90:02:aa:0e:4c:1f:00:4d:aa:1f:12:a2:2d:
f6:ee:e6:99:4d:7b:32:bf:d0:e3:ea:ba:6a:c3:45:
9c:aa:a3:61:e0:d9:a9:4f:bf:04:a6:52:d9:7c:a4:
46:f8:30:4c:48:a7:d4:3a:ef:2e:d7:7c:8d:3c:dc:
17:b2:6d:5b:fe:c3:be:05:8c:90:40:0e:65:2d:f9:
e3:a9:b1:5c:e5:69:df:27:dc:9e:09:1c:92:dd:1e:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:44:16:56:69:18:A6:CA:3F:D6:61:BF:71:F7:E4:A6:D3:03:89
X509v3 Authority Key Identifier:
keyid:86:49:AA:4B:32:87:35:53:6D:27:C1:68:CD:BF:4E:A1:77:70:1D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c4d41f-60cd-4cbb-b253-19f1dab2d1b4/1/hkmqSzKHNVNtJ8Fozb9OoXdwHc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:63:01:39:c4:d8:67:20:bd:37:61:e7:66:4d:dc:f8:71:
09:76:6c:26:fc:85:a6:b9:ca:74:29:48:3a:cd:04:f8:4c:76:
05:1f:a7:d1:10:d5:cb:43:47:d7:0e:03:1e:d3:37:4c:75:7b:
d4:43:c2:d2:ed:16:9e:c0:67:d3:60:dd:5a:63:d2:f9:7d:8c:
3e:e2:77:28:d2:51:11:01:39:d1:12:37:74:2f:26:4f:16:3b:
29:06:c0:34:78:7f:c6:d3:21:41:fd:9a:3f:91:f1:6a:bd:be:
92:48:b3:e4:9b:e5:a6:43:b4:b4:17:a1:87:1e:9b:32:44:0d:
e2:67:f4:2b:74:ba:e6:ab:8b:13:9d:41:d5:42:e0:73:82:8f:
99:e9:d2:c4:12:2f:c5:b6:34:d4:10:fe:9f:d8:b8:52:05:c5:
ff:51:b4:36:49:2b:07:ca:58:67:4f:42:55:f6:2c:ea:64:4f:
e2:76:ee:19:98:81:c9:19:70:53:18:f5:f7:a3:62:34:15:89:
59:51:62:51:71:58:1a:27:00:25:c7:63:2a:94:9d:62:a7:08:
e0:f2:bb:db:08:8b:8c:08:b6:86:a6:b3:fd:3e:a2:17:b3:74:
13:1b:58:26:ae:d9:e1:49:42:b7:a0:35:c1:0b:cf:d9:4c:6e:
05:39:5b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8ir/g/UNkzXTt6E3/hXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDlhYTRiMzI4NzM1NTM2ZDI3YzE2OGNkYmY0ZWExNzc3
MDFkY2UwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
EygyMzRkNDQxNjU2NjkxOGE2Y2EzZmQ2NjFiZjcxZjdlNGE2ZDMwMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKxN3zGOOwp9C9FxytuAD7rzwzE
+Jo07kvuTusFNmwRXnB3QxA4qz0sN0/LpyPtSIej5gfsCOtddca9U1Dq+hD0DiVO
AFNzcHqbULhZapov/BOUW8ttaUgAIk91MS6B7i1gq0GOFLClsZdZChJECHN4IOKG
CZyPDwVA9vGGGUa1XSZOCVLuEnDrT0TVzwpHnsMUB99PpLnbViYyXLRSQRuJWnN3
1ZACqg5MHwBNqh8Soi327uaZTXsyv9Dj6rpqw0WcqqNh4NmpT78EplLZfKRG+DBM
SKfUOu8u13yNPNwXsm1b/sO+BYyQQA5lLfnjqbFc5WnfJ9yeCRyS3R5b0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNNRBZWaRimyj/WYb9x9+Sm0wOJMB8GA1UdIwQY
MBaAFIZJqksyhzVTbSfBaM2/TqF3cB3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jNGQ0MWYtNjBjZC00Y2JiLWIyNTMt
MTlmMWRhYjJkMWI0LzEvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jNGQ0MWYtNjBjZC00Y2JiLWIyNTMtMTlmMWRhYjJkMWI0
LzEvaGttcVN6S0hOVk50SjhGb3piOU9vWGR3SGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR9jATnE
2GcgvTdh52ZN3PhxCXZsJvyFprnKdClIOs0E+Ex2BR+n0RDVy0NH1w4DHtM3THV7
1EPC0u0WnsBn02DdWmPS+X2MPuJ3KNJREQE50RI3dC8mTxY7KQbANHh/xtMhQf2a
P5Hxar2+kkiz5JvlpkO0tBehhx6bMkQN4mf0K3S65quLE51B1ULgc4KPmenSxBIv
xbY01BD+n9i4UgXF/1G0NkkrB8pYZ09CVfYs6mRP4nbuGZiByRlwUxj196NiNBWJ
WVFiUXFYGicAJcdjKpSdYqcI4PK72wiLjAi2hqaz/T6iF7N0ExtYJq7Z4UlCt6A1
wQvP2UxuBTlb7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:30 2025 by rpki-client