Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: Mfeu2/fm2MWb1zCoErIhfZA3f5QRfcHKhrubE8rUkgk=
Subject key identifier: 2A:E6:BF:4B:D9:E1:11:D7:E7:58:6E:12:99:2B:A8:34:01:F9:FB:A9
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 0194BD855D77C101FF049672AAC37BE5F64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 11E6
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: Y494MeYs5G6IGdatLzl5oZKTgA3bMY8yfYH6Fxr0+m8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5d:77:c1:01:ff:04:96:72:aa:c3:7b:e5:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=2ae6bf4bd9e111d7e7586e12992ba83401f9fba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:a2:8d:9f:dd:7e:0b:c6:90:ae:e9:54:1a:
f2:f2:d1:44:ee:ed:43:47:af:a9:d6:6f:9a:e6:55:
cc:b3:f7:12:7c:f1:aa:3f:5a:01:3f:7d:a8:b7:e9:
7f:b2:41:5d:23:af:fd:83:d5:91:eb:ec:af:9f:4b:
d2:0f:8f:3d:b6:79:d6:81:a6:06:ef:38:05:06:4b:
f5:b8:fd:50:a5:ed:9f:78:f0:71:40:1b:d9:ce:82:
75:55:dc:2e:5d:5b:f5:72:91:ed:6d:0d:a8:b4:84:
88:51:1e:d6:81:34:fb:63:f2:f1:77:8e:39:3e:23:
57:07:1f:fa:30:80:32:14:16:14:41:45:ce:f6:39:
42:f2:49:82:ad:1d:50:93:e1:58:0f:55:4a:f9:a0:
40:91:cd:25:ec:69:87:f4:c0:18:7d:fe:6d:fc:e4:
1a:f7:71:c9:0b:0f:9a:57:9c:77:c3:0b:2a:62:60:
22:7a:2c:10:47:6d:cd:d9:06:5f:64:99:d2:c3:9b:
b4:c5:c4:fc:76:b3:b4:8b:7c:4a:f1:22:3d:e3:b4:
6d:9a:97:d3:6f:9f:9a:79:c5:01:7a:cd:46:7c:73:
4a:68:7a:aa:03:2d:bd:f0:ae:c2:88:1d:ee:bf:ef:
5e:e0:2a:4f:91:53:9d:93:10:bc:9d:53:dd:76:f9:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:BF:4B:D9:E1:11:D7:E7:58:6E:12:99:2B:A8:34:01:F9:FB:A9
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:16:aa:63:55:7c:39:f3:fe:e8:72:04:10:39:ed:a0:5f:
65:bc:81:67:83:2c:e5:a7:f8:08:71:77:f4:7e:af:55:3c:ab:
ea:0a:70:47:59:57:8a:93:c4:7e:bd:cc:b0:cf:11:10:6e:15:
d9:13:d6:43:1a:5b:8d:15:45:5c:87:04:0e:14:4d:ce:b6:76:
e8:ce:a2:6e:75:3c:f2:22:b7:1f:9a:d9:1c:41:ac:35:54:da:
b7:56:cc:e0:05:30:90:2c:2c:b3:b5:f1:50:c7:0f:ed:5e:01:
c4:82:22:df:32:fb:6c:42:35:74:a2:ea:58:6a:d2:1d:13:80:
50:d3:81:4f:bb:4c:f9:01:6d:26:d8:60:88:35:00:0d:a5:05:
84:c0:20:5d:3a:ae:34:e7:a8:c2:21:38:69:ee:80:35:08:5b:
c6:52:8f:8b:2f:a3:60:80:1c:20:ba:45:58:62:b5:f8:e7:60:
5b:68:9c:cd:54:2d:6f:ed:9b:5f:19:55:57:e0:95:96:2a:6e:
f8:59:fb:d7:56:cc:54:c8:7e:6c:e7:3b:0b:53:c2:d7:b8:ac:
5c:c7:61:1c:9c:83:f4:65:94:c1:df:17:b6:76:26:b8:ef:dd:
13:95:60:ed:98:71:ce:51:1c:a0:af:44:d0:62:77:e5:6b:08:
45:74:c0:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hV13wQH/BJZyqsN75fZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
EygyYWU2YmY0YmQ5ZTExMWQ3ZTc1ODZlMTI5OTJiYTgzNDAxZjlmYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GKijZ/dfgvGkK7pVBry8tFE7u1D
R6+p1m+a5lXMs/cSfPGqP1oBP32ot+l/skFdI6/9g9WR6+yvn0vSD489tnnWgaYG
7zgFBkv1uP1Qpe2fePBxQBvZzoJ1VdwuXVv1cpHtbQ2otISIUR7WgTT7Y/Lxd445
PiNXBx/6MIAyFBYUQUXO9jlC8kmCrR1Qk+FYD1VK+aBAkc0l7GmH9MAYff5t/OQa
93HJCw+aV5x3wwsqYmAieiwQR23N2QZfZJnSw5u0xcT8drO0i3xK8SI947RtmpfT
b5+aecUBes1GfHNKaHqqAy298K7CiB3uv+9e4CpPkVOdkxC8nVPddvlaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrmv0vZ4RHX51huEpkrqDQB+fupMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP38WqmNV
fDnz/uhyBBA57aBfZbyBZ4Ms5af4CHF39H6vVTyr6gpwR1lXipPEfr3MsM8REG4V
2RPWQxpbjRVFXIcEDhRNzrZ26M6ibnU88iK3H5rZHEGsNVTat1bM4AUwkCwss7Xx
UMcP7V4BxIIi3zL7bEI1dKLqWGrSHROAUNOBT7tM+QFtJthgiDUADaUFhMAgXTqu
NOeowiE4ae6ANQhbxlKPiy+jYIAcILpFWGK1+OdgW2iczVQtb+2bXxlVV+CVlipu
+Fn711bMVMh+bOc7C1PC17isXMdhHJyD9GWUwd8XtnYmuO/dE5Vg7ZhxzlEcoK9E
0GJ35WsIRXTAjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:59 2025 by rpki-client