Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: eDL4l68xzuiuB8u0w+3XiIaIKt6fROnrJfT7VvC17Hk=
Subject key identifier: F8:F1:BE:B6:37:63:6F:CE:12:51:B5:B6:08:53:0B:6B:E6:63:5C:01
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0194BD4E8B090BB57D888EF7087EDF012865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0AE9
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: dgw5RZpn2evz5FFjKdpx9Y+Gtz+RNakDbCiaPuXSzSI=)
2: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
3: mWerV9ecmS13bC31nbnCHc6FJxA.roa (hash: rKACMdpnyV7aqjlY5sgpyk7TvN/15ypEQqYmvbC0Kys=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:09:0b:b5:7d:88:8e:f7:08:7e:df:01:28:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=f8f1beb637636fce1251b5b608530b6be6635c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:67:ab:4e:e1:21:0e:ea:38:83:1a:56:57:
87:18:8a:20:c4:6b:9b:8a:75:ba:60:83:e9:23:c5:
44:2a:0e:20:eb:9a:13:fa:f3:4e:c1:a7:0f:22:29:
d4:e2:af:3e:12:83:8f:ad:76:d3:4d:89:d1:c3:94:
a6:d4:97:1f:b3:ea:43:7f:e2:71:43:d4:e1:ae:7d:
66:4b:8b:5c:d7:30:d5:ba:1f:f6:19:21:ec:9e:cf:
8c:d1:ca:54:8c:8d:9f:7c:53:3d:42:3a:2e:50:59:
65:d5:b8:f6:60:b3:d0:c7:c7:91:b7:85:1e:f8:52:
5f:ed:a5:20:8a:f3:fe:73:29:7c:0e:a4:dd:89:15:
6d:2e:a1:09:eb:26:f4:ff:52:85:9d:d5:00:98:40:
32:cb:e3:56:05:0a:8a:51:15:5c:68:01:57:d0:27:
ca:44:26:95:60:c7:33:ca:c2:03:2e:2f:7a:9d:d1:
a2:14:28:af:3e:e6:a8:96:1c:61:f8:b5:71:a8:28:
c8:45:75:27:5b:8c:46:a9:9c:fd:8c:03:ec:b7:70:
89:d2:d0:78:0b:ab:c5:d7:fc:6a:d7:96:6f:31:73:
b1:7f:52:ba:bb:a0:55:f0:d9:1c:4c:4b:6d:11:b4:
39:62:fc:c7:1b:89:9c:c6:64:88:04:36:ba:32:f3:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F1:BE:B6:37:63:6F:CE:12:51:B5:B6:08:53:0B:6B:E6:63:5C:01
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b2:ff:44:28:bd:a9:97:46:2c:a7:8a:c0:eb:50:20:64:c1:
4d:68:de:08:dd:ba:da:f3:82:cb:11:82:6f:f0:cd:42:1d:be:
a1:80:7f:7a:77:66:c5:e1:0d:b1:79:a8:61:72:28:f3:d5:3a:
c9:4f:a2:26:9e:ae:3b:65:90:a4:4b:1a:77:f8:e2:ae:7a:a3:
f2:a8:f3:91:98:e7:29:95:08:83:31:93:9a:23:29:cc:20:a4:
83:09:ae:e9:3b:75:fc:69:e1:99:56:ea:28:6b:65:b7:f2:8e:
5d:5f:86:b3:f5:d2:13:85:c1:ed:7b:43:56:a4:f5:b2:07:10:
71:c5:3d:7a:ec:cb:d0:c9:82:ab:a1:7a:4e:b8:a0:a9:08:1a:
43:45:12:72:61:b0:11:6e:76:f3:42:39:f7:53:de:e5:f7:c4:
68:a3:24:7e:43:c3:6b:ff:90:b3:27:ec:49:fb:41:3e:02:a3:
a2:35:25:2c:e9:93:1a:97:29:26:6c:ae:08:85:b2:35:b6:ab:
e8:9e:1a:a1:ba:92:90:a8:8e:9d:df:c7:dc:90:c2:21:93:07:
9b:7e:a3:3c:ad:41:cf:d3:21:e6:fd:3b:5b:48:b5:d6:86:0a:
a8:89:96:a8:72:5e:be:95:50:9d:ef:b0:56:ff:23:83:06:2c:
d1:08:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:24 2025 by rpki-client