Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: kOFqb/WlP92S/7V8aymf33XszvVgdNXdmx9LKcT73M8=
Subject key identifier: E2:1A:91:F9:74:8C:4C:CE:8D:FF:E4:60:F6:94:20:C6:09:3B:13:65
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0194BC72ECC86E3767856A2995E255F39E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 0FE1
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: X5LUYDhlrkYtJSquIoUy7W517wPUahoSpB5eDHKACUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:c8:6e:37:67:85:6a:29:95:e2:55:f3:9e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=e21a91f9748c4cce8dffe460f69420c6093b1365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:c9:58:90:fe:88:0c:46:ae:8e:37:22:73:
dc:83:a7:55:1c:3b:3b:bc:2d:60:35:0c:fa:6b:b7:
cd:da:0f:86:47:95:60:d9:a0:78:45:74:5e:fd:eb:
f9:4c:16:10:b4:ec:f3:31:9c:c2:8d:51:fa:67:ed:
e2:c2:fe:e9:0f:c7:d3:72:69:96:d1:c7:69:d2:ee:
b7:1d:87:21:d0:d9:e3:23:d9:fb:16:14:fd:e0:b1:
44:86:95:23:0b:f2:01:ea:1f:3a:bb:a8:e8:05:22:
a0:0e:e2:89:1d:90:a5:b6:69:0e:a4:11:80:46:5a:
51:05:63:39:8f:88:8d:15:ff:bb:e7:3d:b7:04:2e:
2c:76:6e:2e:8c:ca:70:c8:0c:ed:f2:31:30:97:42:
6e:6c:31:e3:9f:eb:15:38:2e:c6:bd:dc:54:48:04:
8b:fb:4b:48:f0:78:78:38:d3:96:6c:5a:e9:e9:40:
09:4d:4c:29:17:aa:22:c3:b1:b8:8b:b6:65:0e:12:
94:6c:07:17:ee:41:eb:15:95:2a:c5:3e:66:71:a0:
84:dd:2c:96:41:a6:b7:44:db:b3:c0:17:6c:a2:a6:
39:99:7c:3a:be:7d:d6:a9:97:fb:37:72:3f:fc:2a:
94:fc:bb:b4:da:02:86:bf:48:31:af:70:83:31:2f:
ba:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:91:F9:74:8C:4C:CE:8D:FF:E4:60:F6:94:20:C6:09:3B:13:65
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:03:7d:b0:ee:dc:56:36:32:17:c1:40:e6:e7:9d:54:5a:f7:
3e:d9:95:07:38:13:6d:a7:cf:a8:b2:35:2a:f3:73:f6:4e:7e:
2f:eb:1c:da:47:53:86:6a:ad:11:a4:d5:ff:3b:ee:64:e0:83:
e1:27:48:7f:f2:8f:1e:04:3a:c8:85:ab:d1:83:de:e2:0d:0c:
ed:f7:95:5a:2b:0a:ae:f7:de:06:76:ac:8d:2e:ee:6f:62:93:
14:fc:d8:66:4d:56:e8:ee:6f:c1:40:95:23:33:b1:c2:c3:86:
76:1e:f4:68:7b:ce:0c:62:d1:3d:5e:cb:ef:8b:7e:7b:0d:20:
bc:04:d7:ba:d4:11:70:a9:fb:59:e2:17:de:2f:9f:2a:02:6f:
a0:3b:e1:ad:96:6b:71:0f:44:8d:73:93:2c:de:7d:b8:ff:a4:
94:e7:b7:c6:8b:1d:fe:ea:24:a0:9f:a1:06:a0:42:c2:dc:40:
47:17:d4:31:eb:39:f5:d9:2c:2e:60:b7:89:28:13:40:56:e1:
bc:fd:a6:00:7c:1c:06:2e:bb:33:b3:6b:cc:c9:eb:b9:a1:a5:
d6:10:8e:28:88:24:e0:54:22:1c:b9:83:e3:23:08:07:da:8d:
4e:e1:59:32:c0:9e:d9:52:db:9a:b4:07:df:6e:3b:ab:55:3a:
73:c5:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:00 2025 by rpki-client