Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
File: HQH03_1vumbN-MN0ybDwR1UnBd0.mft (raw, json)
Hash identifier: UPapBnBADEnBJSIXdwLW/19YC3clh5VHV5fO4sForgA=
Subject key identifier: F8:EE:88:28:91:4F:96:07:25:04:A0:DC:E8:32:69:C5:7B:E5:4F:AA
Authority key identifier: 1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
Certificate issuer: /CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Certificate serial: 0194BCA9D9846BC97DAB15789A06B4A514FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
Manifest number: 1473
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: HQH03_1vumbN-MN0ybDwR1UnBd0.crl (hash: gVsQtJy+dwd6wOqfGX56oEx4ItlcBaKrIwj6NXUo9VI=)
2: ZV7Mwh8ZSNOok8Cl_6w6xbXd1QM.roa (hash: Q8BEzpuX5kr5QFNdR8ExGubNlojo8W9UU/GtWU/NKmM=)
3: zG080oPzQ7rUD2R7hxV-XMU_OR0.roa (hash: KCxH/ifXlQAl04FGcXC3J2HL9Sc2PbI+s4bKHHGNkKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d9:84:6b:c9:7d:ab:15:78:9a:06:b4:a5:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01f4dffd6fba66cdf8c374c9b0f047552705dd
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=f8ee8828914f96072504a0dce83269c57be54faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:ab:b4:25:05:d2:be:11:68:be:f7:ad:c9:
15:b6:69:1d:a4:d9:1f:e5:24:b5:3b:30:08:1f:db:
76:b0:a4:d0:aa:80:5f:7a:4d:99:14:37:e9:4c:db:
33:f7:66:3a:d7:a7:e1:2a:20:45:ea:19:01:3c:d0:
69:e5:04:1f:aa:e6:ba:02:05:c2:11:b8:9a:6d:9f:
76:a1:cc:d3:b7:2b:1e:b9:f8:52:93:53:cb:26:e6:
43:bc:c1:45:37:b7:ce:ba:51:8e:73:b3:3c:e7:fa:
00:67:4a:f4:8a:7e:cd:10:9d:e6:10:ea:8e:de:66:
16:9d:b7:86:21:24:80:72:9e:5d:b1:45:38:4d:e8:
52:37:1c:6a:fa:01:fd:25:94:b9:29:5d:77:2c:df:
f4:5b:f7:08:92:3b:c8:39:27:a0:ec:58:5b:00:24:
89:bf:88:c9:12:b5:6c:fc:73:d2:ec:92:08:e3:cd:
ec:3d:0a:35:ac:fb:a3:a2:24:b7:53:89:08:7c:fd:
bb:7a:c5:b9:a6:93:e0:e0:fe:a5:63:c1:07:00:b0:
ee:e2:01:0b:fd:21:de:05:6f:a7:3e:29:bf:1e:7a:
02:ea:dc:b3:d9:89:97:db:c5:a7:a0:66:e3:48:1a:
18:40:20:54:3a:9e:e5:7c:84:ed:79:9b:d7:d8:ca:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:88:28:91:4F:96:07:25:04:A0:DC:E8:32:69:C5:7B:E5:4F:AA
X509v3 Authority Key Identifier:
keyid:1D:01:F4:DF:FD:6F:BA:66:CD:F8:C3:74:C9:B0:F0:47:55:27:05:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQH03_1vumbN-MN0ybDwR1UnBd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b80384-f2fe-4456-9cae-fe4a02caef7f/1/HQH03_1vumbN-MN0ybDwR1UnBd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:29:02:06:b6:88:1e:89:a8:41:8a:b4:7a:77:17:66:66:29:
ce:ce:d6:e4:1e:f9:c9:f2:3f:cb:44:cd:55:8d:d7:47:8b:67:
14:02:05:4f:9e:83:7b:4f:50:f1:1e:cd:a4:ef:37:d3:f7:ea:
35:a3:ba:80:3c:17:64:50:ac:f7:9d:5d:fb:77:6c:d4:9d:a1:
9a:61:60:de:b2:3b:e4:30:af:48:32:7d:d4:8f:e6:69:6a:79:
13:b7:7a:f2:34:56:e1:31:cc:00:72:85:46:45:22:f2:a8:77:
9d:df:f6:1e:9e:55:6b:a0:5e:03:25:cb:eb:0e:c6:b6:a3:d1:
92:4d:b7:fb:7c:26:36:48:97:ae:bd:35:0d:28:81:1d:37:01:
56:56:86:70:21:c0:53:6f:94:81:59:48:0c:e1:eb:de:24:96:
21:63:39:d6:c3:b8:7d:c8:fc:2a:44:99:61:93:24:7f:ac:e0:
57:d8:61:e2:58:82:83:29:6c:97:8c:92:2e:87:ad:a4:23:4a:
44:e5:61:4c:2a:37:9f:7c:12:83:b2:fa:34:33:0e:16:51:4c:
82:34:7b:59:01:d4:df:c3:25:63:71:83:70:ae:a5:38:6e:9f:
12:90:b4:41:93:1c:e2:0f:51:7c:32:b8:6a:fd:cb:41:e7:7d:
79:84:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:16 2025 by rpki-client