Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: vVbYlGtPAg6aH+tZLgWm7W+S31b94RSHaGI3YEonk+o=
Subject key identifier: B3:C9:06:FD:00:DE:0D:A5:55:E5:88:C7:18:67:00:9B:41:E9:6C:E1
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0194BC72DD07035C156E29CCBC08CE84C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0E2A
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: 6JdP7zZbL0wUqMZNwrMvm3N+Mc9+NamYOJcDH32S4b4=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dd:07:03:5c:15:6e:29:cc:bc:08:ce:84:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=b3c906fd00de0da555e588c71867009b41e96ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:7d:7a:c2:68:20:51:3d:6b:ea:71:d0:b9:
b1:08:c1:6b:dd:d3:73:86:d2:c2:84:b6:06:f4:58:
aa:78:f3:7b:6d:38:96:b7:3d:da:0a:2c:fa:bb:05:
71:48:02:59:76:d3:bf:92:82:f5:d8:66:c3:b3:fd:
e7:a9:bd:c7:1a:ed:23:36:0e:b5:82:e6:59:70:f3:
c7:bf:a8:40:cf:42:78:09:e3:ff:73:2d:c4:9a:50:
3c:ac:e1:bc:c3:55:d1:84:fb:84:db:5d:07:3e:a3:
17:3c:bb:89:26:56:49:3c:d1:e9:88:0c:52:52:a9:
56:d8:d1:08:9a:19:fc:00:2b:cc:97:b8:51:49:0b:
dc:71:3e:e1:46:e0:a3:21:36:4b:1e:9a:e7:b5:fb:
c5:f5:e4:ef:54:c0:c2:50:94:16:1a:cc:d9:4a:36:
a3:5a:be:dd:1f:42:bf:2b:7f:f3:2f:49:c9:cb:3e:
ad:2e:e7:f3:ce:92:83:f3:31:0f:f4:b0:a4:49:a1:
7c:80:3e:b4:3f:14:ed:f3:dc:30:c6:90:d5:3c:8f:
cf:45:5c:e7:a5:79:f1:92:34:b7:09:11:a0:e4:a6:
d2:36:f4:f4:66:73:2c:63:1b:c1:32:4b:bf:85:da:
82:51:41:b0:6a:9d:07:c5:7b:cc:bc:bf:02:4d:51:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:06:FD:00:DE:0D:A5:55:E5:88:C7:18:67:00:9B:41:E9:6C:E1
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:15:37:52:24:3c:b3:31:d5:95:40:14:e2:99:c0:b3:ee:7c:
35:65:a5:6e:8c:6f:4e:3f:77:6c:64:7b:0a:e0:ba:07:76:73:
09:6d:7c:30:f8:b7:ae:2b:f2:b5:fd:ce:48:49:cd:21:09:fc:
cd:c9:01:dd:d1:c8:1d:9d:91:84:5c:59:71:24:e1:5e:35:1d:
bc:cc:10:5d:8a:ec:44:e8:13:83:9d:d8:7e:65:8e:f5:58:21:
7f:12:4d:23:3b:1f:fb:15:83:99:2d:f2:ef:27:d6:fb:a8:ad:
59:a1:a3:f3:cf:9f:2e:bb:7e:d5:22:1e:b9:88:ba:c4:47:94:
fc:d8:ad:de:3d:55:b3:fd:2e:75:15:81:8a:ef:75:ac:9f:fe:
a2:b9:2f:db:44:6d:1f:4c:1b:e2:5e:6c:35:53:a1:47:09:4d:
a1:ac:fa:5c:5d:8e:63:59:a7:46:2d:5f:f5:ec:f6:c1:c7:8a:
c8:c4:79:8c:23:14:79:09:ea:fe:df:bd:a5:3d:f3:6b:5d:f0:
02:2f:04:c8:30:6a:04:22:e0:f3:6c:32:30:b7:61:d4:9c:16:
b6:81:c9:4b:5b:d2:a9:a6:49:d7:44:b0:d1:26:68:2e:e6:07:
1e:49:83:12:85:89:ca:8b:98:84:85:47:d1:63:49:c9:26:1a:
17:b3:c6:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct0HA1wVbinMvAjOhMEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzY3OTQzNTczZDZiMzVlYmFjZTFhMmYzNDhjYTNmMDA1
NmMxYWIwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
EyhiM2M5MDZmZDAwZGUwZGE1NTVlNTg4YzcxODY3MDA5YjQxZTk2Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2h9esJoIFE9a+px0LmxCMFr3dNz
htLChLYG9FiqePN7bTiWtz3aCiz6uwVxSAJZdtO/koL12GbDs/3nqb3HGu0jNg61
guZZcPPHv6hAz0J4CeP/cy3EmlA8rOG8w1XRhPuE210HPqMXPLuJJlZJPNHpiAxS
UqlW2NEImhn8ACvMl7hRSQvccT7hRuCjITZLHprntfvF9eTvVMDCUJQWGszZSjaj
Wr7dH0K/K3/zL0nJyz6tLufzzpKD8zEP9LCkSaF8gD60PxTt89wwxpDVPI/PRVzn
pXnxkjS3CRGg5KbSNvT0ZnMsYxvBMku/hdqCUUGwap0HxXvMvL8CTVFCPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPJBv0A3g2lVeWIxxhnAJtB6WzhMB8GA1UdIwQY
MBaAFB52eUNXPWs166zhovNIyj8AVsGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTct
YTQwOGQ2N2JmZjM3LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZTA5NTctYzk1MS00NTAyLTlmZTctYTQwOGQ2N2JmZjM3
LzEvSG5aNVExYzlhelhyck9HaTgwaktQd0JXd2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphU3UiQ8
szHVlUAU4pnAs+58NWWlboxvTj93bGR7CuC6B3ZzCW18MPi3rivytf3OSEnNIQn8
zckB3dHIHZ2RhFxZcSThXjUdvMwQXYrsROgTg53YfmWO9VghfxJNIzsf+xWDmS3y
7yfW+6itWaGj88+fLrt+1SIeuYi6xEeU/Nit3j1Vs/0udRWBiu91rJ/+orkv20Rt
H0wb4l5sNVOhRwlNoaz6XF2OY1mnRi1f9ez2wceKyMR5jCMUeQnq/t+9pT3za13w
Ai8EyDBqBCLg82wyMLdh1JwWtoHJS1vSqaZJ10Sw0SZoLuYHHkmDEoWJyouYhIVH
0WNJySYaF7PGiw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:05 2025 by rpki-client