Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: e0rp8UeVhArHn3YlaBRfQalSg63ZPHQFliY6Tyn+G2c=
Subject key identifier: 94:93:11:2F:3A:C8:B9:CA:85:3B:A4:F9:CB:C4:73:11:49:E9:1B:7F
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 0194BD8550EA6788B0A5DC5ED905CA174E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 0FB1
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: AFoF1GuFzHjl8hWS56zz0OT3Bgg.roa (hash: tZKNbZDCtPOdNWQDTedTIFStwLgZ/2vtLmBHU+SWAQk=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: ZZkVuElVfX6TAJBZam1Q+gEF7wUanjsvcNzaKacPD2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:ea:67:88:b0:a5:dc:5e:d9:05:ca:17:4e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=9493112f3ac8b9ca853ba4f9cbc4731149e91b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:19:e9:dc:c3:eb:ca:f1:3d:ee:8c:a2:cf:
e8:c0:7c:13:a3:46:e3:d1:42:38:0b:72:63:fb:35:
db:2c:d5:ef:89:26:8a:ed:d4:0c:7f:f5:8b:3e:80:
1e:ac:64:1c:7b:70:da:50:f3:c1:97:49:b3:55:9f:
cf:ce:1e:60:87:5c:b9:48:9c:aa:00:0b:7c:62:d5:
81:62:9f:6e:e3:db:2c:49:fa:79:4e:36:67:91:dd:
35:ca:d6:15:57:a0:0e:ae:f7:de:6a:01:30:d4:d6:
40:a6:b4:80:cb:4f:98:61:82:3f:66:1e:1b:17:1d:
8d:e3:8e:3c:8a:72:71:92:c4:bc:01:d5:1d:05:3e:
78:79:92:52:d8:2c:7f:a7:09:87:2d:6a:1b:ba:b8:
3e:52:51:e5:bd:4e:f0:a3:b5:72:46:e1:51:8a:10:
0c:88:09:04:23:7e:b8:30:cf:da:70:8c:ca:e3:0d:
d4:5f:4d:de:23:47:8c:15:f7:c7:f2:51:3e:d7:ad:
da:00:b1:cb:3b:8d:22:b6:2c:64:6a:72:01:87:eb:
c2:27:a8:35:6a:3f:45:2a:c7:8b:4c:d7:7b:fe:46:
5b:42:f8:d1:dc:e5:ed:01:58:89:d1:63:f1:ec:b5:
93:41:21:fd:b3:0b:d7:40:ba:72:c7:b9:bf:45:c0:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:11:2F:3A:C8:B9:CA:85:3B:A4:F9:CB:C4:73:11:49:E9:1B:7F
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d4:1e:40:97:87:34:8b:c3:4a:84:52:1b:67:e9:82:e3:64:
a1:45:be:98:af:08:e5:5d:1d:c7:cc:9f:37:c8:cc:36:45:b4:
62:e5:fd:20:ff:9f:93:51:39:d0:08:2b:21:72:b4:10:e4:59:
ee:4f:42:33:d1:5a:a2:22:c4:b7:64:fd:36:cc:1a:14:9f:81:
9d:54:04:65:99:93:1e:7d:02:4e:16:4d:11:8a:84:a9:a4:0e:
f9:b9:d9:31:09:9c:7f:03:f1:de:e3:ce:79:f4:e8:52:fe:85:
20:93:66:2e:ec:c2:0a:ed:71:70:e6:14:75:8f:9b:19:1a:bf:
59:61:c8:9d:0d:05:fe:92:1a:71:7d:55:c7:c5:27:7e:38:a9:
5b:0f:88:bc:b5:14:a6:e0:4d:a0:6a:34:38:62:ca:97:05:10:
81:19:74:17:24:63:2e:4e:d6:77:d2:a3:77:9a:b2:a0:85:ff:
67:1b:73:90:ce:ea:89:e5:90:5a:52:3c:8e:dd:59:dc:c7:d3:
a9:9d:1b:f5:86:fe:6c:0f:a8:67:e8:e2:e2:c8:2d:b0:91:1d:
f8:9a:ea:6a:45:3b:d6:96:e0:32:08:ef:5d:c6:3a:92:3c:44:
96:d4:da:ff:b3:69:bb:3b:a7:a1:4a:7a:ae:12:81:de:9f:56:
64:e0:7f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVDqZ4iwpdxe2QXKF06NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTAzNWMzMTc3MzRmNjYxYmJmODVjMjE4NDE1NWExZjM2
MTZhZGQwHhcNMjUwMTMxMTgwMDE4WhcNMjUwMjAxMTgwMDE4WjAzMTEwLwYDVQQD
Eyg5NDkzMTEyZjNhYzhiOWNhODUzYmE0ZjljYmM0NzMxMTQ5ZTkxYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1EZ6dzD68rxPe6Mos/owHwTo0bj
0UI4C3Jj+zXbLNXviSaK7dQMf/WLPoAerGQce3DaUPPBl0mzVZ/Pzh5gh1y5SJyq
AAt8YtWBYp9u49ssSfp5TjZnkd01ytYVV6AOrvfeagEw1NZAprSAy0+YYYI/Zh4b
Fx2N4448inJxksS8AdUdBT54eZJS2Cx/pwmHLWoburg+UlHlvU7wo7VyRuFRihAM
iAkEI364MM/acIzK4w3UX03eI0eMFffH8lE+163aALHLO40itixkanIBh+vCJ6g1
aj9FKseLTNd7/kZbQvjR3OXtAViJ0WPx7LWTQSH9swvXQLpyx7m/RcAWywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSTES86yLnKhTuk+cvEcxFJ6Rt/MB8GA1UdIwQY
MBaAFIaQNcMXc09mG7+FwhhBVaHzYWrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEt
NjAyOGMyNjU0OTQwLzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZmQ3NzQtM2Q3OS00NGIxLTg3OGEtNjAyOGMyNjU0OTQw
LzEvaHBBMXd4ZHpUMllidjRYQ0dFRlZvZk5oYXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdQeQJeH
NIvDSoRSG2fpguNkoUW+mK8I5V0dx8yfN8jMNkW0YuX9IP+fk1E50AgrIXK0EORZ
7k9CM9FaoiLEt2T9NswaFJ+BnVQEZZmTHn0CThZNEYqEqaQO+bnZMQmcfwPx3uPO
efToUv6FIJNmLuzCCu1xcOYUdY+bGRq/WWHInQ0F/pIacX1Vx8UnfjipWw+IvLUU
puBNoGo0OGLKlwUQgRl0FyRjLk7Wd9Kjd5qyoIX/ZxtzkM7qieWQWlI8jt1Z3MfT
qZ0b9Yb+bA+oZ+ji4sgtsJEd+JrqakU71pbgMgjvXcY6kjxEltTa/7NpuzunoUp6
rhKB3p9WZOB/Vg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:35 2025 by rpki-client