Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
File: hkl2gukwfEaHk1AIFzFH0TKijGQ.mft (raw, json)
Hash identifier: 86L+hdba8tAi76V1NbvrN24yY0bf0DiUW9DyDGKwFVY=
Subject key identifier: 54:42:75:62:F2:65:16:91:B1:C5:31:D7:1C:55:82:AC:DA:BC:2C:37
Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64
Certificate serial: 0194BC72B73C7043336187D4A275081D06BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
Manifest number: 0FF7
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: BO3NQSZ4VV4Ik2Xgm0m98xsd8Po.roa (hash: zwimVc6fdY5wMVCx/Pfq1/VebJPothW3yZi++5QRFE0=)
2: hkl2gukwfEaHk1AIFzFH0TKijGQ.crl (hash: Z4ZL7XaLgxVfBC80Z+QTP/wgak7PUrXUdPb0U8A9A6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b7:3c:70:43:33:61:87:d4:a2:75:08:1d:06:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86497682e9307c4687935008173147d132a28c64
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=54427562f2651691b1c531d71c5582acdabc2c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:05:c5:92:b0:7b:71:a9:39:a7:63:e1:1e:
51:e0:d3:c5:5f:93:84:52:8d:0e:c7:25:fb:67:18:
15:9e:58:55:a5:13:f4:01:bc:6a:29:5b:40:61:a4:
e5:ae:e3:3b:cd:20:30:62:c1:a2:c3:d2:1b:57:47:
fb:e5:0b:06:17:ed:b6:24:20:c5:1c:8a:a1:1a:2d:
07:b9:0f:dc:33:43:2b:6b:3a:15:a2:9b:48:58:7b:
e7:0c:ab:b1:51:d6:2e:80:84:93:fc:46:f5:e0:95:
f4:33:8e:cb:c9:54:3f:a1:74:6d:fe:5a:c2:c2:f0:
fa:91:af:c4:bb:98:c3:f0:69:02:c9:fe:65:c0:90:
ef:88:88:86:52:b7:72:4f:08:d0:1d:6a:47:f2:0f:
6d:91:5e:3b:8b:03:b1:51:4d:b3:27:89:8b:94:8a:
1f:03:63:36:5e:b7:e1:a2:f6:85:91:50:a3:64:96:
a5:40:5d:d1:ac:33:63:1f:5d:cb:8a:84:07:47:30:
71:82:a1:d3:85:e9:f3:3b:64:44:7d:22:d5:3e:ed:
b1:9f:a7:f9:9e:04:5c:fb:7f:dc:10:ef:61:c4:59:
a4:4b:5c:b8:46:ab:f3:de:8a:3d:bf:62:3e:b9:8b:
2a:e8:9a:f7:d5:05:4a:e3:6f:ad:73:47:b4:a4:57:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:42:75:62:F2:65:16:91:B1:C5:31:D7:1C:55:82:AC:DA:BC:2C:37
X509v3 Authority Key Identifier:
keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:95:71:d9:55:da:e6:49:f6:d5:fa:3e:36:25:4b:f3:28:a9:
68:97:c6:2e:df:1f:ae:56:b9:6c:98:54:71:49:b5:cb:5f:1a:
e8:0a:7b:c6:ae:88:86:00:62:6b:d9:4c:2a:33:c8:7f:b3:c7:
3f:ad:64:6b:2b:d9:fa:a0:62:6d:36:33:18:e3:46:a9:b8:ee:
47:5b:56:17:c6:35:a3:35:49:39:20:eb:c8:13:cc:7a:f0:0e:
df:99:99:c7:ba:d1:6b:de:fd:dc:89:61:c6:66:93:ae:59:cc:
c3:ab:c1:05:28:d1:68:f4:77:53:fd:37:83:7d:55:c8:28:62:
c5:73:63:f6:bf:58:f8:10:e0:17:d3:b1:6b:b5:53:a5:8c:f5:
22:3a:61:1a:28:82:17:78:15:9e:3d:62:b7:af:2d:58:d1:3f:
58:37:75:0d:5e:4f:e1:82:39:bc:d5:f1:c2:db:75:15:66:bd:
7c:ee:e2:8f:21:6e:2c:40:7c:3a:50:77:c6:fd:8a:a2:f3:3f:
97:08:6b:5e:38:b8:47:8c:c6:5b:24:2d:25:07:1b:f1:4f:7b:
c7:35:97:31:8d:14:57:48:83:af:68:48:82:71:c8:a1:f0:ab:
a6:9a:2b:2f:ce:cd:1a:ce:a2:17:02:a7:c8:a0:e4:fc:50:2e:
a9:a9:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:33 2025 by rpki-client