Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json)
Hash identifier: dVroEIUnmjahR9B15pDCPg+ti1FDanRG5GAUYzIIDLE=
Subject key identifier: 65:8C:57:A0:C5:AA:09:5A:64:27:C1:29:DD:BF:30:24:29:3C:F1:C4
Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Certificate serial: 0194BD85B4A9E515D64D2E9DE50353566CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=)
2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: hjNDi3V+B3397tDqz5zmMEibMwrCSHiOwbgGC1AkxeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b4:a9:e5:15:d6:4d:2e:9d:e5:03:53:56:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=658c57a0c5aa095a6427c129ddbf3024293cf1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:69:6b:ce:2b:85:fa:66:42:e5:ad:01:b3:
2c:43:25:d7:5f:e5:2a:57:9d:b5:90:d2:99:08:b7:
8f:70:a4:c5:b3:23:12:3e:15:27:c9:a5:2a:0c:f6:
77:88:8c:1d:82:2e:dd:85:89:87:c7:30:1d:1c:17:
b4:fc:96:92:61:20:42:c1:91:18:a7:e4:86:d6:ff:
53:aa:54:24:11:4c:a3:1c:20:13:fb:fa:05:eb:8a:
13:b4:b5:34:71:7d:c2:ac:02:3d:36:75:cd:56:b7:
df:0a:9c:12:9d:18:98:98:32:7d:0c:40:75:12:8c:
ac:a5:fe:a3:d9:a5:89:a8:cc:ee:27:df:97:91:ca:
8c:2e:65:4c:0f:1b:c3:04:d6:83:c7:83:91:09:d8:
60:6c:d0:a1:8b:72:a1:75:8f:e7:a6:df:df:b5:90:
a5:81:bf:d2:c3:b6:77:79:2f:76:30:3e:f8:26:32:
0b:c9:de:f6:86:9b:73:c7:62:52:df:0e:c6:b0:fd:
64:7c:19:54:75:ea:23:c8:32:8c:cb:4f:ab:3f:57:
b5:c0:fa:59:09:91:d2:9f:14:56:67:3c:50:a8:ef:
cf:0d:d1:d1:09:d7:c7:16:79:0f:23:67:67:1e:32:
10:76:7d:2c:52:90:7b:b1:61:6a:37:c9:6c:76:28:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8C:57:A0:C5:AA:09:5A:64:27:C1:29:DD:BF:30:24:29:3C:F1:C4
X509v3 Authority Key Identifier:
keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:11:aa:05:41:e2:d6:81:d2:4e:47:a0:ef:6f:24:59:08:7d:
75:8c:6f:97:77:79:65:96:a8:7b:07:d1:9b:9e:f4:9c:18:57:
5b:dc:57:a2:3a:9b:da:e0:e1:29:73:f5:70:f1:34:12:fe:c0:
b0:d6:0b:b2:0c:ad:33:fb:cf:83:c3:6c:ef:64:17:5a:dc:c2:
13:bf:18:ee:6b:bc:cc:af:f8:50:34:1b:59:34:1b:7b:a1:ea:
44:69:df:35:10:78:0a:e8:41:61:d6:b2:ae:16:99:86:11:6d:
95:9e:56:e3:1b:ff:38:88:e9:d9:63:6d:39:d7:b8:73:37:d1:
83:7c:59:c6:fd:b4:10:ba:64:9f:3a:bc:90:be:4e:bd:48:49:
35:51:60:23:3f:ea:e0:00:31:41:bb:6e:90:15:ce:73:ad:d2:
ab:0c:24:90:46:d4:38:b2:74:39:69:f8:ec:7a:6d:b5:0c:77:
94:62:90:10:60:74:b6:6b:f7:ad:08:43:9f:c9:33:e6:d9:13:
08:a0:71:f6:fa:72:e1:f9:47:86:1d:fe:01:c6:56:20:6c:76:
61:62:cc:fe:2f:af:73:5f:4e:a6:69:cd:17:f7:6a:1b:cb:5c:
b1:aa:06:23:f6:82:08:c8:ee:3d:93:58:9c:96:75:29:a3:3a:
48:04:c3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbSp5RXWTS6d5QNTVmz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj
YmY0YmQwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
Eyg2NThjNTdhMGM1YWEwOTVhNjQyN2MxMjlkZGJmMzAyNDI5M2NmMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Glpa84rhfpmQuWtAbMsQyXXX+Uq
V521kNKZCLePcKTFsyMSPhUnyaUqDPZ3iIwdgi7dhYmHxzAdHBe0/JaSYSBCwZEY
p+SG1v9TqlQkEUyjHCAT+/oF64oTtLU0cX3CrAI9NnXNVrffCpwSnRiYmDJ9DEB1
Eoyspf6j2aWJqMzuJ9+XkcqMLmVMDxvDBNaDx4ORCdhgbNChi3KhdY/npt/ftZCl
gb/Sw7Z3eS92MD74JjILyd72hptzx2JS3w7GsP1kfBlUdeojyDKMy0+rP1e1wPpZ
CZHSnxRWZzxQqO/PDdHRCdfHFnkPI2dnHjIQdn0sUpB7sWFqN8lsdiifxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWMV6DFqglaZCfBKd2/MCQpPPHEMB8GA1UdIwQY
MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt
NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi
LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhGqBUHi
1oHSTkeg728kWQh9dYxvl3d5ZZaoewfRm570nBhXW9xXojqb2uDhKXP1cPE0Ev7A
sNYLsgytM/vPg8Ns72QXWtzCE78Y7mu8zK/4UDQbWTQbe6HqRGnfNRB4CuhBYday
rhaZhhFtlZ5W4xv/OIjp2WNtOde4czfRg3xZxv20ELpknzq8kL5OvUhJNVFgIz/q
4AAxQbtukBXOc63SqwwkkEbUOLJ0OWn47HpttQx3lGKQEGB0tmv3rQhDn8kz5tkT
CKBx9vpy4flHhh3+AcZWIGx2YWLM/i+vc19OpmnNF/dqG8tcsaoGI/aCCMjuPZNY
nJZ1KaM6SATD7g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:38 2025 by rpki-client