Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: FthMhiA4+UHFaBNM3dAQm3FziSD32CS4rztpY9Rc5/M=
Subject key identifier: 9A:26:BE:97:29:36:45:64:E3:0A:A9:8B:28:55:BF:95:75:30:92:A8
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 0195E07DB2C29A567CDDB74AFDDD16BC475D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0270
Signing time: Sat 29 Mar 2025 06:01:28 +0000
Manifest this update: Sat 29 Mar 2025 06:01:28 +0000
Manifest next update: Sun 30 Mar 2025 06:01:28 +0000
Files and hashes: 1: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: qBbKxYm36O/T3WFx2IVNTQlp3AmV214vyH/sqj1OVMY=)
2: xi5pD87H7qmbjEvJ4DLQQdWIHBQ.roa (hash: 0u3oeLmadIHdO8gJo9TuHf58jO+Kc4uU+vliawAHBrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b2:c2:9a:56:7c:dd:b7:4a:fd:dd:16:bc:47:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Mar 29 06:01:28 2025 GMT
Not After : Mar 30 06:01:28 2025 GMT
Subject: CN=9a26be9729364564e30aa98b2855bf95753092a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:52:6e:28:15:ed:2d:48:25:b4:8c:dc:25:
13:b7:61:62:62:38:90:f5:5e:d7:48:88:e2:9a:47:
1d:49:2d:0e:c2:f7:e5:58:5c:d7:21:a0:af:a1:dc:
51:96:ec:42:77:1e:7b:e9:1d:e8:73:e0:06:b7:4b:
2d:39:f4:c9:aa:24:e0:82:a2:9c:2c:1d:bf:05:b8:
bf:dd:9e:13:20:73:cf:e7:9a:54:0b:3a:c6:bd:4b:
95:58:bc:8a:04:08:12:3a:15:fe:16:b4:9d:32:1b:
33:a7:31:5d:d2:51:bb:df:1d:17:85:03:0a:0a:2d:
22:53:1c:f3:ff:b6:55:bf:c9:0e:7b:eb:3e:3c:e0:
b2:f0:64:34:6a:f7:89:80:bc:7e:1c:35:6a:5f:8b:
42:db:c4:a3:7e:74:13:d2:92:8a:8b:01:83:6f:30:
3d:eb:fd:d2:89:ea:d3:a6:eb:63:52:10:aa:8c:91:
2a:0a:9d:47:c9:4a:83:2c:b4:23:86:c3:db:23:bf:
21:54:47:27:90:01:29:9f:ab:68:d4:a4:32:25:69:
48:26:c7:ce:e2:18:26:00:0b:6e:39:d0:91:7c:a8:
5a:47:44:8c:f3:92:24:b3:83:90:26:9e:c3:32:db:
27:87:8c:7f:b4:95:2d:e1:91:67:62:df:c7:92:87:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:BE:97:29:36:45:64:E3:0A:A9:8B:28:55:BF:95:75:30:92:A8
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ef:96:52:ac:c9:5c:96:54:97:47:c9:4b:02:18:49:48:90:
ea:22:83:cc:42:fe:86:c6:30:fb:55:34:8a:ff:7e:95:81:e5:
7b:24:81:1a:44:7f:94:48:5d:08:9f:32:16:33:07:4d:bc:ac:
0a:ae:fb:a0:fa:bc:2d:4b:17:c4:6d:b2:40:92:f6:a8:5d:79:
16:3e:5e:21:f3:bc:cd:fe:ac:e8:5f:02:85:14:ab:b2:3b:27:
a0:63:cb:9c:bf:99:5d:52:9c:93:31:85:98:ec:a3:87:f5:dc:
60:f3:94:5e:c5:94:7f:eb:e7:b4:22:6c:93:35:31:44:b3:b1:
fc:7c:a3:d5:e5:4c:6c:51:ca:20:00:ac:78:62:08:9e:de:8e:
5f:52:26:81:1b:19:87:f6:67:35:9d:90:a0:67:9e:3f:e6:d8:
39:88:4c:69:13:2f:4b:da:d4:66:09:f7:63:9f:be:cb:8f:38:
c2:64:3c:f4:c9:f9:0f:f0:ce:36:5d:d8:04:3b:fc:38:08:2d:
db:91:b0:d3:e8:37:60:27:8d:93:f7:fa:36:50:69:ab:24:6f:
9b:ad:68:8b:83:eb:00:35:76:43:dd:6b:67:1b:e0:74:0d:28:
9b:ab:03:74:ea:3a:0b:be:f7:f1:56:2f:b7:af:39:29:78:ff:
93:eb:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:13 2025 by rpki-client