Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
File: hqnzrkX3AVCvF-uHiel4iQKe5dM.mft (raw, json)
Hash identifier: F7MGvPs4H/AUTzitRSnZBlvipDpCbxcG5f76rP9psBg=
Subject key identifier: 8F:C7:BA:53:D7:84:56:FD:61:DA:23:75:AE:EF:1F:BF:84:4E:3A:5A
Authority key identifier: 86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
Certificate issuer: /CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Certificate serial: 01962F06F5FEDD1297E947BDDEE606F7DC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 12:01:47 +0000
Manifest this update: Sun 13 Apr 2025 12:01:47 +0000
Manifest next update: Mon 14 Apr 2025 12:01:47 +0000
Files and hashes: 1: 6b_z1nYhros0lFsJJ-v5kZEUQbE.roa (hash: lcqP5Znx2EuUXx9SjdDPzhxT49PtsEmnOX0/yWwCL10=)
2: hqnzrkX3AVCvF-uHiel4iQKe5dM.crl (hash: i/8YOYScLSF/RvgfCeiVuUOc7KZZ47sTOtwG+NqXVdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:f5:fe:dd:12:97:e9:47:bd:de:e6:06:f7:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86a9f3ae45f70150af17eb8789e97889029ee5d3
Validity
Not Before: Apr 13 12:01:47 2025 GMT
Not After : Apr 14 12:01:47 2025 GMT
Subject: CN=8fc7ba53d78456fd61da2375aeef1fbf844e3a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:d2:ad:ef:7d:eb:8d:49:df:4f:b0:34:d6:
c9:94:a1:f3:81:29:44:34:92:e9:a0:ff:4a:6f:15:
ba:da:cd:32:06:bd:d1:bb:a9:f2:85:cb:cb:b4:50:
70:40:18:3c:26:2a:c4:88:c9:23:98:96:99:cb:a8:
18:80:36:20:7e:23:e5:ec:0c:82:32:fc:cc:31:c8:
5f:c6:6d:e7:1b:e6:4f:5b:95:7f:97:1c:d2:16:a9:
a9:a3:92:53:77:9f:be:da:76:42:76:cb:9d:8e:f7:
d3:84:a0:26:28:d7:0d:32:1f:6d:38:a2:9c:65:94:
ed:f1:e0:2b:9c:81:0a:1e:56:17:9d:50:1c:bf:b3:
ba:31:1b:bf:d2:d8:70:3b:fe:21:18:d1:ff:a7:8b:
9b:b0:93:e2:d8:65:69:79:32:54:59:ed:b3:4a:60:
82:df:8d:38:68:7a:0b:c3:7d:f3:a7:b5:ed:5b:3b:
8a:f7:52:4b:26:21:a2:90:c9:d1:f8:99:27:c3:1f:
fd:fd:0b:2d:7b:df:b6:67:14:9e:a2:e7:55:1d:ea:
2f:e6:3e:e4:e1:7f:89:f7:04:80:3b:d5:1b:fc:92:
df:da:44:e2:f5:12:07:91:95:7c:45:c7:43:00:2a:
70:e2:b1:99:01:7f:69:22:8d:6d:bb:c1:0d:27:e3:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:BA:53:D7:84:56:FD:61:DA:23:75:AE:EF:1F:BF:84:4E:3A:5A
X509v3 Authority Key Identifier:
keyid:86:A9:F3:AE:45:F7:01:50:AF:17:EB:87:89:E9:78:89:02:9E:E5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqnzrkX3AVCvF-uHiel4iQKe5dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/131274-7334-446b-a935-3487ae82b20d/1/hqnzrkX3AVCvF-uHiel4iQKe5dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4d:a4:59:53:b4:a5:43:03:93:75:bd:6f:00:87:21:a2:c1:
ac:03:9a:b0:36:16:fe:76:a8:61:96:28:d8:9b:55:e0:6a:8f:
89:43:d3:8a:64:f4:f6:d0:f3:d0:bc:55:f5:87:a0:6a:50:7e:
e6:33:c4:5e:7a:69:b6:b9:ca:f4:27:9b:09:eb:83:b6:31:9b:
8c:98:7d:18:a1:75:38:a3:ff:84:40:1e:fe:88:61:8a:d3:fd:
0c:fa:ef:1b:51:f6:3b:21:22:d5:9a:03:e0:8b:50:92:dc:4c:
0f:80:ea:bd:74:64:56:0a:8f:47:46:22:dd:94:b2:c3:33:6a:
9d:c9:85:6e:6b:84:91:4d:6e:02:a2:13:cb:32:5a:0e:b3:a7:
f6:8a:f1:5f:31:68:00:7c:ad:e5:6f:86:35:b3:8c:2a:c8:75:
e6:d2:a2:5b:20:a0:ff:d0:c0:96:fb:5a:a9:e8:7b:0c:07:22:
00:ee:5b:55:c4:3c:83:1a:3c:f0:16:f7:6c:bc:1e:e5:2a:b6:
70:7c:f2:9d:18:e8:43:d1:f6:44:5c:13:06:f3:bd:56:f5:55:
54:6b:09:17:67:13:50:4c:c8:c5:65:eb:6d:99:03:38:03:5f:
b5:37:0f:bd:5a:57:90:3e:1b:d8:a5:6b:0c:9a:96:55:65:fc:
97:da:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net