Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: ES1uS01OOEDIEtlC+e5YVW8LgZ0ZFuTohGA2zzXMzWA=
Subject key identifier: A5:C2:BF:2D:5E:17:61:83:A8:A6:30:8B:4A:A5:6A:58:63:6F:40:F0
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 0194BC3BF4EEEFCC133475B83B19E3F1C6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: DCTh5dU4eYQSQX0BmExg4ri2tBTWGPs4U5O/DEsmk18=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:ee:ef:cc:13:34:75:b8:3b:19:e3:f1:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=a5c2bf2d5e176183a8a6308b4aa56a58636f40f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:3c:53:16:97:be:67:d9:18:ac:58:06:03:
b6:86:17:ea:de:ed:b2:c2:a7:9d:8b:76:c2:74:e2:
a4:27:89:4c:9c:54:0f:21:7b:07:a7:c0:ca:2b:c2:
5f:99:a3:8a:81:fa:d6:38:87:bd:91:f3:de:a4:d4:
fb:84:0f:ee:28:92:5b:b9:fe:b4:6e:44:dc:d9:51:
e5:fb:88:d8:e2:20:ef:6a:4a:d1:5e:81:74:4c:ba:
3c:b3:17:d0:85:26:b3:ab:c4:34:81:0a:fe:2a:df:
5c:80:49:15:c8:a5:8b:48:fb:a3:61:25:c7:ec:db:
28:12:f8:b9:fd:a1:97:d3:cb:14:da:24:3d:d7:6b:
d0:8a:81:f4:7b:76:d6:c2:2e:65:08:03:20:6a:a2:
00:d1:8d:db:21:75:0b:cf:8a:61:5b:e7:53:e2:e1:
7d:d1:21:70:01:22:c4:86:d3:1c:f2:cc:9d:ea:ea:
c3:3a:c8:e2:e3:3e:ff:55:a1:62:1b:d7:4e:b7:d1:
f4:31:fb:48:7d:7c:b6:1e:5d:b3:75:e1:db:68:12:
ad:bb:54:54:8a:4e:1d:57:da:12:27:a3:93:a8:ea:
29:5c:67:a1:51:a1:9f:56:fc:93:30:91:e9:f4:82:
ac:7f:90:e3:b8:f2:51:a4:1a:09:5b:6d:6c:3c:59:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:BF:2D:5E:17:61:83:A8:A6:30:8B:4A:A5:6A:58:63:6F:40:F0
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:44:cb:7c:4f:03:af:83:d8:7e:76:9d:d6:6a:3a:a5:e8:
b9:04:42:e4:bd:f9:2b:3c:1c:d2:6c:34:ec:ba:a7:c0:3a:d8:
b7:55:16:bd:1d:50:3a:b0:99:bf:b6:1d:d1:4a:66:19:3f:85:
f2:05:51:54:5e:b9:67:86:24:ab:1d:5b:c8:58:4a:19:33:0c:
08:07:e3:a3:95:f7:79:3a:6c:6f:31:af:49:df:9e:73:d7:e8:
0d:d4:a5:d4:bd:ed:66:6e:09:9d:f5:51:6a:7a:c5:95:76:60:
c5:78:b7:ef:6a:d7:bc:5b:95:44:df:d0:ca:07:a1:57:c2:a7:
22:e9:8f:3d:6e:38:4c:fc:92:67:53:8c:b7:02:03:4a:18:97:
3b:f1:cd:c1:13:74:5e:73:04:f3:df:3f:23:bc:1f:19:22:e5:
13:90:38:ee:03:22:43:f3:52:41:9f:0d:17:5e:eb:54:18:19:
95:28:f2:3a:c4:df:6f:2b:7c:32:56:ec:29:f0:4c:86:b3:31:
f9:7d:a5:59:f0:39:9a:ac:1a:aa:3a:e4:01:6f:05:02:05:c8:
9e:7e:e7:15:9b:e9:78:05:67:44:87:1c:cb:61:4b:59:7b:2c:
ef:32:1d:52:17:c1:a1:a5:14:12:19:77:b6:2d:4b:9a:dc:d0:
80:44:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:10 2025 by rpki-client