Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
File: hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft (raw, json)
Hash identifier: NMJoW7jzyO6beagT/CKtd8hZBqVcjon00AO/NgDhfF8=
Subject key identifier: 63:A5:94:D0:23:B5:4A:88:12:02:F0:A0:1E:7F:D0:8C:D3:98:5D:41
Authority key identifier: 86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
Certificate issuer: /CN=869ab33046862ab58405e5e927ddf41272dfc714
Certificate serial: 0194BBCE9F12F313AA8AEEF0430C36A34B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
Manifest number: 021B
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl (hash: 6AQe11+ouWPHb3Iq16Khu831icRNv8mCcsK8uQIvB1Q=)
2: p8T_kCS-MYJ8fc4C7hUc5E1T1qg.roa (hash: CHS1S8lMOJ2pkxab6trVxWbo2qQA5JXICjYrqXb1IdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:12:f3:13:aa:8a:ee:f0:43:0c:36:a3:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869ab33046862ab58405e5e927ddf41272dfc714
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=63a594d023b54a881202f0a01e7fd08cd3985d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:d6:2f:74:5c:85:a7:9e:65:82:c6:ab:d5:
3f:6c:aa:19:86:76:15:7c:23:50:07:59:b2:fa:c5:
7b:82:b1:75:e2:2f:0f:4a:0d:f6:2b:e2:37:c3:a6:
98:c5:f6:ea:5d:02:8c:b9:f7:ff:53:27:02:72:4f:
fe:ce:51:2d:aa:a8:be:e9:70:04:9f:84:d7:3f:37:
fa:27:56:60:44:88:69:a2:19:20:60:f6:41:60:52:
22:fe:5b:ec:fc:c8:6a:1e:2e:97:71:2d:a4:b9:f4:
59:de:e1:92:2a:b5:00:4b:00:05:83:de:aa:88:48:
40:82:cf:35:44:d7:43:22:9a:9e:83:25:02:61:db:
c0:a3:f2:65:c6:b5:d0:d1:e1:31:5b:71:6a:4e:3c:
61:af:de:91:5f:c6:22:b5:68:9a:89:73:64:33:5a:
0e:25:24:84:e0:0e:85:3b:29:aa:ca:7f:b8:b0:ea:
7f:1f:59:04:02:af:e4:8b:3c:32:fb:54:25:f8:0f:
5e:45:0b:93:16:b0:b6:82:b7:3d:aa:64:c4:52:44:
da:ec:8c:77:2d:71:4d:98:14:0e:0d:1b:15:d3:33:
97:7c:5a:44:f3:60:5d:84:83:2c:1a:cb:27:b1:ce:
1a:98:f0:8c:3f:07:0b:cd:a5:a8:b3:09:5e:e7:33:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:94:D0:23:B5:4A:88:12:02:F0:A0:1E:7F:D0:8C:D3:98:5D:41
X509v3 Authority Key Identifier:
keyid:86:9A:B3:30:46:86:2A:B5:84:05:E5:E9:27:DD:F4:12:72:DF:C7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpqzMEaGKrWEBeXpJ930EnLfxxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f8e8e5-692b-40a9-b32f-394c47ff45ae/1/hpqzMEaGKrWEBeXpJ930EnLfxxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f2:a0:5e:8b:26:ed:7e:99:db:16:d0:36:a4:43:d4:80:33:
48:8f:0d:0e:25:d3:8e:66:35:ca:ef:99:c7:a6:73:1f:66:d5:
e9:6f:f9:d9:59:1b:27:38:f3:ad:63:1c:5f:f1:21:8a:da:27:
3c:fb:13:7e:cb:94:27:36:55:82:26:ac:17:0b:59:7e:34:21:
1e:7c:9e:a4:25:70:57:0f:80:3d:eb:e9:af:aa:55:0d:97:52:
7c:53:8c:ad:60:5d:c9:16:22:20:d7:85:ea:ad:cd:73:03:cc:
83:80:3b:70:20:8c:21:dc:05:a2:0a:93:01:b5:b2:3d:b7:93:
44:17:38:59:84:1c:2c:3a:8d:f6:86:3f:46:f6:65:fb:6d:e8:
9a:54:15:74:22:34:b1:b0:3d:38:bb:25:65:3f:6a:0b:10:cc:
bb:3c:aa:8a:f2:bc:42:8f:de:cf:14:2d:03:91:47:12:10:25:
98:90:47:d6:98:e6:0e:4e:42:79:38:8b:c6:b8:9e:f1:70:68:
b4:06:bd:10:c2:32:06:19:9a:27:ca:c1:39:eb:73:7a:c2:8d:
1c:b0:23:1c:d7:5c:56:df:5f:14:58:b4:8d:6f:16:81:c2:69:
7d:64:6e:13:34:4f:39:eb:9c:56:cc:64:c3:09:8b:5a:c6:34:
95:73:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client