Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: XWeYE96AczQlGI9S0Zfx71GNRe7ZQTPHYs7m77OL2JE=
Subject key identifier: 86:AC:FE:78:BF:C4:51:72:AC:FE:53:CC:C3:63:1D:10:04:7D:C8:99
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 01962F7468911325AFF1F42C017B67C80424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 10CD
Signing time: Sun 13 Apr 2025 14:01:20 +0000
Manifest this update: Sun 13 Apr 2025 14:01:20 +0000
Manifest next update: Mon 14 Apr 2025 14:01:20 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: GZPcRFI49cXo7p3Qzx40xutY6lvFqfDfBkmathZqoTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:74:68:91:13:25:af:f1:f4:2c:01:7b:67:c8:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Apr 13 14:01:20 2025 GMT
Not After : Apr 14 14:01:20 2025 GMT
Subject: CN=86acfe78bfc45172acfe53ccc3631d10047dc899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:ec:21:38:ee:10:5b:31:9c:65:5f:12:29:
8d:46:cc:f3:22:a2:5b:7e:8f:79:c7:74:6e:f5:76:
0e:b3:de:d1:13:0f:bf:b4:27:e0:ab:02:aa:d8:db:
68:95:3f:4f:d2:9e:05:ad:94:0c:7b:3f:d1:33:f9:
0c:82:07:0d:20:b7:13:2e:19:5e:a2:6d:d0:b5:69:
49:be:5a:c6:a9:e1:e9:8b:62:1e:e7:b8:5e:30:57:
87:79:7d:17:95:f7:0b:2c:14:c5:d0:02:1f:50:80:
8d:b0:3d:dd:95:b3:cd:35:9a:a8:ee:5c:59:c5:85:
43:83:e7:10:60:41:59:c4:93:94:69:ce:73:61:0a:
6b:12:17:cf:67:39:44:1a:6d:4e:36:bd:86:09:8c:
8b:69:80:19:a4:fc:be:1a:a2:4e:ac:a5:75:d4:34:
8e:f4:75:9a:bf:5c:02:33:da:2f:1b:d0:e3:b0:f6:
2e:31:00:d3:d3:bf:56:bd:6e:d3:a5:e4:d9:a3:a5:
66:80:3d:00:66:24:b0:0e:8a:3f:bf:c8:c9:87:50:
d2:f2:4d:db:04:22:43:b9:8b:02:0f:1d:3b:e9:f3:
c6:9d:3b:00:44:52:5f:7b:a3:d3:19:59:83:13:92:
0d:2c:1c:10:45:e1:6c:ea:45:a9:42:f9:da:2a:c7:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:FE:78:BF:C4:51:72:AC:FE:53:CC:C3:63:1D:10:04:7D:C8:99
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ad:db:da:ce:28:2a:13:eb:49:36:6e:6f:09:fd:d6:ad:3e:
95:cb:49:ab:fb:a2:46:cc:61:5f:f0:4b:10:26:57:ea:6f:af:
18:28:5e:8c:21:0f:b3:cc:5f:d5:08:e9:e9:7c:d6:97:e4:11:
a9:c4:fa:11:ae:02:98:a5:b8:95:5b:a2:9d:c3:39:0a:ff:b3:
c8:23:64:56:65:6b:3b:3b:5f:86:b0:2f:09:ec:76:e5:55:b2:
64:c2:f8:5a:df:bc:aa:a1:d3:8e:5b:4c:eb:f3:81:7d:9e:cb:
84:65:3e:3c:15:02:e3:d0:77:3a:bb:74:be:79:15:30:46:5d:
ba:1f:06:52:96:b3:8e:ff:cc:cb:2d:7c:e6:5e:da:fd:33:d9:
bb:23:a0:06:83:59:2a:79:07:e5:67:0a:97:e8:96:62:56:52:
1d:77:7e:b8:92:54:b9:03:6a:28:36:20:ed:fa:df:09:2b:5b:
ff:d9:0a:dd:d8:06:5b:2f:6c:9b:b8:07:bc:a1:95:90:65:7b:
40:42:bd:f0:29:0a:c0:c3:cd:35:5c:c9:e1:e0:bc:5f:d8:8a:
4e:d1:bf:a5:8d:ab:e7:1f:50:42:bb:8e:2d:02:14:1e:0b:1a:
ef:6b:70:02:14:d7:67:19:c6:a2:63:e2:5c:71:b0:36:4d:9a:
9d:4f:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net