Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
File: hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft (raw, json)
Hash identifier: nTiNRfvliX4QHA6pf8V8rVUEeSK299fPr+BceIlPumw=
Subject key identifier: F7:44:93:86:74:63:F0:A8:96:34:B8:F5:BD:4F:AA:67:7A:95:B8:23
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Certificate issuer: /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial: 0194BD4EADD6A5356F6B598FAC6F98B47F5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
Manifest number: 10E3
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: ZDU98pLej6G5Y69Flle0aPv1r5A.roa (hash: A41/y0PjRZXqiD5cmhEr4Mj1BgTXTsWtK/kWghBv8z8=)
2: hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl (hash: JzEVnd991+4I0Ew+dWauP7xK+9UJS+5P+F6+PcAqGIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:d6:a5:35:6f:6b:59:8f:ac:6f:98:b4:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=f74493867463f0a89634b8f5bd4faa677a95b823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:a5:4d:5f:ad:c9:9e:a6:83:6a:e5:73:b6:
f5:1d:0b:0f:41:62:f8:1c:7c:00:4e:62:93:6b:b9:
91:1b:56:f6:4e:cc:0e:e5:41:ef:14:b4:6e:0b:5f:
17:41:e0:e9:b8:08:ff:59:17:cd:e9:b7:12:d9:19:
0d:14:8b:66:67:ee:28:c1:21:53:fa:1a:2c:13:b1:
d4:26:54:af:d2:37:db:20:e0:ee:22:ba:a0:ec:0a:
0b:76:76:6d:8f:fc:5d:3b:76:a0:d1:fa:97:f9:a8:
38:5e:d6:b6:b8:75:45:59:ca:e8:5f:6e:67:d6:5f:
f9:d0:62:17:46:cb:27:97:fe:46:43:cd:d9:4a:ec:
9b:29:92:92:a4:20:8f:c1:14:4b:bc:61:5f:de:07:
d1:bf:d3:39:a7:73:e1:ea:8c:cf:5f:6b:5e:0a:58:
88:e6:8a:32:f4:66:88:f8:20:43:e0:62:2b:48:9f:
c0:92:65:e1:24:4b:d6:3b:27:76:29:06:70:87:b0:
5c:bc:13:33:54:5e:42:8a:02:da:1d:ad:0f:37:f4:
a9:2c:6f:91:19:3d:00:bd:57:af:0b:db:f9:b2:ea:
b2:df:ee:3b:3c:ca:a0:27:3c:c6:6d:9a:9c:f4:75:
d5:f3:b3:78:dd:62:5b:c3:19:de:f1:20:cb:15:59:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:44:93:86:74:63:F0:A8:96:34:B8:F5:BD:4F:AA:67:7A:95:B8:23
X509v3 Authority Key Identifier:
keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:06:c5:aa:b4:c4:63:68:2a:46:29:dc:73:9d:8a:e9:29:9d:
1a:35:33:ac:64:f8:5f:98:ac:4f:f9:89:46:8e:33:ae:9a:d8:
88:ca:0b:70:bc:1f:9c:2c:2c:90:d3:ec:73:11:ce:a6:4e:36:
81:4e:ef:b3:74:bc:0b:a6:d7:22:94:8c:2b:22:6e:b7:9d:b4:
75:2c:4c:82:fd:4d:87:c3:7d:38:38:0f:f6:c6:f0:63:fc:10:
2d:d5:9d:8c:02:7f:13:c1:12:77:1d:11:b6:ee:59:48:f0:da:
ac:68:0b:1d:59:61:42:b0:c9:1e:6a:e2:5b:37:46:5a:26:8e:
ae:0e:d5:fa:78:ea:1d:61:a8:ce:69:9a:92:89:9e:a2:94:af:
04:e9:4c:c7:d1:6d:2c:38:b6:f4:6d:5e:5e:84:63:bb:0b:f7:
c6:a2:bf:77:e5:9a:75:16:64:3c:d8:0a:15:ca:34:de:1b:92:
28:0e:47:b2:b1:c4:77:92:e2:32:d8:fc:ec:86:d8:75:06:7b:
73:6a:53:7c:52:c0:da:19:20:b5:bc:21:e7:b2:a9:27:2d:af:
f0:43:ab:18:8b:f2:24:10:90:66:d5:5c:78:f8:f8:cd:ec:62:
de:0d:f8:30:23:68:46:c3:22:86:26:85:6c:c9:3c:35:35:c6:
8d:64:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:57 2025 by rpki-client