Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
File: _hpSVPN9jCkbEd2r7YiwY0gdr2s.mft (raw, json)
Hash identifier: Ua0QJ7pvhiL8jOmojjpGT0Zmw8nde5Z56Dg9k35xhAk=
Subject key identifier: B4:E6:D6:D3:BD:A8:5E:B3:95:A9:41:20:50:02:F8:BC:97:0D:68:F6
Authority key identifier: FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B
Certificate issuer: /CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
Certificate serial: 0194BBCEFDA7A0CD20C196F20DD703D7EC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: _hpSVPN9jCkbEd2r7YiwY0gdr2s.crl (hash: HStMr+WBe8CNCPU/BXubI4HBPNdo6zr8lXht8a2twe8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fd:a7:a0:cd:20:c1:96:f2:0d:d7:03:d7:ec:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1a5254f37d8c291b11ddabed88b063481daf6b
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=b4e6d6d3bda85eb395a941205002f8bc970d68f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:6c:e3:a7:f6:25:9e:e6:46:e6:cf:9c:d9:
8d:79:e7:61:ae:15:25:0c:b3:95:b5:46:41:fb:3f:
8b:fa:e2:c1:39:a1:ba:44:90:60:c8:50:48:d8:89:
ee:40:36:b4:ca:55:8f:66:e4:a6:3f:24:4c:7b:73:
2c:33:db:aa:36:90:cf:a2:d5:1b:91:2a:ce:98:c7:
9f:b0:e4:25:fd:63:dd:f4:ac:d1:74:ef:02:bd:a9:
d6:04:8f:42:e0:d1:ed:b9:90:cb:6e:e3:94:3e:cc:
8a:62:1f:2b:f1:05:b3:97:ba:bd:01:54:ca:bf:70:
30:4d:c0:18:51:d5:20:ed:8f:9e:a2:53:0c:c1:89:
7e:ff:fb:09:91:da:f3:f4:91:e4:9f:b5:67:bd:1f:
44:63:da:a7:a3:dc:02:d3:8b:41:28:14:0f:80:94:
f1:b6:92:38:f3:6e:ef:ca:00:55:fd:74:23:ce:8f:
e6:5f:bb:82:c7:b9:1c:02:fb:fb:a4:6a:82:6c:bf:
0e:89:6c:d9:a7:3a:7a:c1:cc:d3:e8:b0:17:f9:8f:
bc:ad:66:9c:e1:9a:ba:f6:2c:0d:ba:e0:07:f2:b5:
c5:1a:19:02:f5:1a:62:9d:5c:17:34:e5:4e:4a:d9:
84:19:82:81:ff:72:62:2a:cd:bf:2d:ec:75:ac:e7:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:D6:D3:BD:A8:5E:B3:95:A9:41:20:50:02:F8:BC:97:0D:68:F6
X509v3 Authority Key Identifier:
keyid:FE:1A:52:54:F3:7D:8C:29:1B:11:DD:AB:ED:88:B0:63:48:1D:AF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hpSVPN9jCkbEd2r7YiwY0gdr2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/63f60a-27d7-491e-bdc2-fa0d0e805df8/1/_hpSVPN9jCkbEd2r7YiwY0gdr2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:79:46:82:7d:c9:3c:3d:3b:c1:cb:79:70:4a:56:db:f9:26:
e1:5a:a5:ce:7c:3e:f9:e6:71:85:75:c5:65:38:2b:98:dc:4d:
6c:7f:c9:97:2a:a1:2c:1a:a2:28:75:b1:3d:f1:2c:8d:fa:26:
ab:ba:31:8c:fa:99:94:4f:6d:cc:3c:b5:bc:83:cd:21:dd:e5:
ba:f0:ac:96:4e:d3:43:b1:f3:66:fa:93:61:ea:3c:cc:29:16:
46:91:ad:f6:fc:a0:f4:8c:1e:4f:d7:92:ff:62:c1:77:2d:f9:
89:d9:b6:d1:af:15:f6:90:97:db:ba:80:b2:eb:e4:8b:7e:a2:
e3:98:f8:d4:4e:1e:77:97:c9:d5:c4:69:76:9d:6c:bf:5a:06:
d4:d4:45:dc:97:74:db:6d:f0:0a:fb:9c:74:e7:bd:de:fb:fd:
50:d9:5d:7f:33:a5:38:54:c0:ba:bb:91:fa:cb:b2:3b:4c:2c:
b5:0f:51:ee:ff:3d:40:03:1b:c7:9f:0e:f7:88:6e:b3:15:d0:
7c:89:9c:c3:a7:51:b9:8c:02:32:2f:10:85:33:d1:87:0d:d5:
b2:00:02:58:2a:c0:0a:9c:18:2f:10:be:a7:b8:60:d2:a9:5e:
d4:7c:a0:b2:b1:d2:53:a5:7b:34:e3:76:01:30:fe:fc:54:fa:
e6:8a:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:22 2025 by rpki-client