Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
File: hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft (raw, json)
Hash identifier: s9ptwFuImex2XVDPwyPxO41aagJcGuztKBjczkSCNNo=
Subject key identifier: 15:CD:FF:43:8D:AB:3C:E5:BD:3A:AB:65:AF:47:08:05:D0:95:3B:31
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 0192E1295E95DD5F49740667C86449E00BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
Manifest number: 1341
Signing time: Thu 31 Oct 2024 06:00:37 +0000
Manifest this update: Thu 31 Oct 2024 06:00:37 +0000
Manifest next update: Fri 01 Nov 2024 06:00:37 +0000
Files and hashes: 1: T4vEqiKTdVYoUTm2eUtL58YzJSc.roa (hash: q4zo2EQCBioAOfoYjPbq046hPQfa0Ma7LR74g9rlEjM=)
2: hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl (hash: H9M9xcT7OU1DkuYXqmN1opzPVj44N3MTcGzOrvMs2NI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:29:5e:95:dd:5f:49:74:06:67:c8:64:49:e0:0b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Oct 31 06:00:37 2024 GMT
Not After : Nov 1 06:00:37 2024 GMT
Subject: CN=15cdff438dab3ce5bd3aab65af470805d0953b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:ed:c8:4e:c4:af:eb:27:9c:3a:11:7e:f1:
22:83:28:f6:8e:50:91:21:a6:8d:f7:b4:27:2f:2e:
71:d0:de:36:aa:83:56:a6:36:42:d1:d4:d9:de:29:
fb:08:30:6e:b9:3b:43:5b:7e:10:d4:f1:b5:43:d1:
d3:95:2f:ec:fa:a1:5c:d6:2f:65:c0:dc:93:48:50:
ae:78:b5:c9:fd:c6:ee:3b:f5:6c:30:d9:5f:fb:4d:
c7:64:49:00:09:b3:ca:5f:fc:67:01:1d:0e:73:3d:
cf:51:d7:fe:5e:8b:19:81:0a:f2:c8:89:23:80:f3:
3b:62:63:36:19:81:b8:b6:5c:ac:52:fd:31:cc:50:
d4:17:b8:ce:5d:96:2a:91:09:81:21:f8:30:c4:c9:
61:e0:2c:b7:32:ee:73:82:57:4f:10:3c:58:78:64:
8c:0f:dd:6f:a8:94:74:15:8d:91:21:d7:71:cd:2a:
12:72:39:d1:f9:c1:5b:59:69:c0:5d:28:42:69:c3:
5f:69:c2:df:39:00:90:17:76:2a:33:3f:6a:ab:24:
67:28:60:3b:08:12:27:fe:52:e1:55:0c:ef:e5:f1:
3a:03:a4:80:9b:7b:55:ee:4f:6b:53:5f:75:0f:25:
40:86:14:03:1d:31:5b:a7:84:76:7e:9d:95:ee:39:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CD:FF:43:8D:AB:3C:E5:BD:3A:AB:65:AF:47:08:05:D0:95:3B:31
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:60:37:42:3d:33:fd:33:c9:f3:05:04:f3:56:6c:77:d1:
41:1a:1a:29:a4:f4:a7:06:c9:e5:3d:0b:d6:02:7a:50:f5:b7:
2a:18:7a:fd:55:9f:ff:67:16:4e:32:7f:f0:b4:19:4c:fb:3e:
b8:1c:f1:f5:34:c0:59:e4:a1:e3:a8:cd:ec:bf:8c:84:26:f2:
9b:85:53:a2:b3:b2:3c:a8:75:59:ed:64:6a:e4:1a:b2:d0:a9:
fe:fd:d6:77:cd:fe:bf:40:f8:cd:ca:2c:63:aa:db:f9:a6:0c:
fd:0f:78:ea:41:d5:e3:4e:b9:f8:05:07:c5:2b:1d:c8:a2:e0:
31:4c:02:a0:b2:5a:00:98:2c:55:56:4a:db:ce:0d:07:55:0c:
c3:10:a3:7c:fd:3e:29:f6:89:c8:be:31:4a:3f:11:b0:78:59:
fb:4c:b5:65:b5:d8:2f:29:a2:d8:d6:f3:6c:b8:1f:cc:5e:b7:
bc:dd:96:b7:69:43:70:a6:35:da:41:f5:25:e5:7b:67:f0:84:
b6:08:b5:98:02:cb:e9:27:48:b9:1e:02:0a:82:1f:6d:ad:c3:
0b:19:82:0e:ed:d5:de:1f:a5:18:5f:12:5f:b0:45:8a:29:6f:
c7:ac:6f:a0:78:4b:c2:3b:94:a5:33:17:10:1c:fb:c4:a1:0c:
7e:1b:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:49 2025 by rpki-client