Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
File: hhiHKrn6K6AssBpEzo64dkEoHBw.mft (raw, json)
Hash identifier: S0t+pu28GNfeKchlPdyrR9TjR76u4T20KyuIRo/ff3Y=
Subject key identifier: E5:13:D3:05:BC:CE:D9:AC:71:90:6C:12:98:C4:C0:51:9C:EF:8B:DE
Authority key identifier: 86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
Certificate issuer: /CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Certificate serial: 0194BC3C4570B305CB445B0B2E1CC770B212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
Manifest number: 03C9
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: hhiHKrn6K6AssBpEzo64dkEoHBw.crl (hash: aN7gfK2O6pqB7GURrwoDrtoMNk3HJfHKGaATV6qOhs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:70:b3:05:cb:44:5b:0b:2e:1c:c7:70:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8618872ab9fa2ba02cb01a44ce8eb87641281c1c
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=e513d305bcced9ac71906c1298c4c0519cef8bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:ea:c5:35:b6:c7:80:9a:03:81:30:fc:e5:
14:c6:d9:55:88:e6:07:dd:48:70:2c:11:ab:5c:31:
68:eb:06:a4:53:86:97:7d:f2:fa:3c:70:34:3a:b5:
f4:c4:31:99:32:90:cc:84:27:79:83:86:30:8d:73:
27:b9:04:79:0d:78:4d:5d:99:75:08:49:7d:37:e8:
10:85:f7:9b:ca:5b:90:4c:65:bf:c4:ac:9f:c5:f3:
fe:93:0f:f6:c8:10:a5:91:ea:9e:71:69:9b:e6:9a:
f7:02:16:d5:ea:73:c3:fe:76:5e:e7:53:35:7a:79:
fc:66:bf:dd:35:f0:32:6c:e0:ff:39:d7:dc:37:6f:
11:c3:0e:33:33:59:72:23:61:d3:62:b1:a9:5d:c5:
bb:ab:51:37:bb:57:e4:eb:b3:d7:03:c5:03:c2:27:
93:29:05:50:49:07:96:cd:38:41:f0:05:08:05:f8:
76:e6:5f:92:9e:27:71:64:b0:fe:a1:ea:7c:52:b9:
49:6d:88:07:e6:79:f4:4b:39:a9:60:32:e0:2a:af:
6a:11:25:8f:1d:92:5c:30:50:53:02:aa:58:2b:41:
b9:ab:ad:07:88:38:7d:db:84:25:ab:06:cc:aa:12:
10:d8:6f:21:f7:64:77:08:53:32:29:12:c6:64:d3:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:D3:05:BC:CE:D9:AC:71:90:6C:12:98:C4:C0:51:9C:EF:8B:DE
X509v3 Authority Key Identifier:
keyid:86:18:87:2A:B9:FA:2B:A0:2C:B0:1A:44:CE:8E:B8:76:41:28:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhiHKrn6K6AssBpEzo64dkEoHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/829a87-22fa-4632-862c-bd69f526181b/1/hhiHKrn6K6AssBpEzo64dkEoHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:1c:69:4f:53:ff:06:a4:0c:09:ee:0b:8b:c9:75:16:79:
18:a5:70:b5:0f:dc:c2:67:ea:57:74:6f:c6:03:11:18:2b:19:
f7:34:f6:af:23:f8:f6:ae:16:5b:20:04:53:6f:31:56:69:0e:
17:76:af:10:e0:45:1a:a2:df:4c:93:0b:0e:9e:54:6e:7e:ed:
07:fc:f4:2d:24:f4:55:ed:a8:d1:25:93:aa:24:1d:60:c1:8c:
08:28:e1:0f:32:54:ec:c1:a6:f8:f6:29:3b:4c:95:cc:f7:46:
7e:e0:06:03:3e:ee:43:99:ad:50:51:41:63:10:43:92:c6:9e:
bb:82:0b:d4:7f:9a:6a:10:e9:1d:d8:fe:d4:09:dc:3c:4b:ca:
9d:ca:18:44:32:8c:a5:d6:d1:5b:3c:39:1c:9a:b8:32:b5:9b:
3e:71:89:4c:96:60:87:1c:eb:7c:a6:06:80:b3:66:22:d9:44:
5c:3a:32:9b:7b:17:92:7a:7e:46:53:bb:f8:81:70:03:3c:ca:
96:82:9e:b7:fc:d9:d0:ad:4d:4a:6b:f4:24:6a:c8:de:34:66:
3b:ca:4a:ef:5d:11:b4:6c:7f:86:4b:e6:46:2e:83:ac:47:b0:
d6:f3:ed:24:43:d6:bc:38:a9:0e:88:b5:1e:17:a0:db:99:fb:
c6:25:ce:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEVwswXLRFsLLhzHcLISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MTg4NzJhYjlmYTJiYTAyY2IwMWE0NGNlOGViODc2NDEy
ODFjMWMwHhcNMjUwMTMxMTIwMDU0WhcNMjUwMjAxMTIwMDU0WjAzMTEwLwYDVQQD
EyhlNTEzZDMwNWJjY2VkOWFjNzE5MDZjMTI5OGM0YzA1MTljZWY4YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7qxTW2x4CaA4Ew/OUUxtlViOYH
3UhwLBGrXDFo6wakU4aXffL6PHA0OrX0xDGZMpDMhCd5g4YwjXMnuQR5DXhNXZl1
CEl9N+gQhfebyluQTGW/xKyfxfP+kw/2yBClkeqecWmb5pr3AhbV6nPD/nZe51M1
enn8Zr/dNfAybOD/OdfcN28Rww4zM1lyI2HTYrGpXcW7q1E3u1fk67PXA8UDwieT
KQVQSQeWzThB8AUIBfh25l+SnidxZLD+oep8UrlJbYgH5nn0SzmpYDLgKq9qESWP
HZJcMFBTAqpYK0G5q60HiDh924QlqwbMqhIQ2G8h92R3CFMyKRLGZNMmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUT0wW8ztmscZBsEpjEwFGc74veMB8GA1UdIwQY
MBaAFIYYhyq5+iugLLAaRM6OuHZBKBwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMt
YmQ2OWY1MjYxODFiLzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84MjlhODctMjJmYS00NjMyLTg2MmMtYmQ2OWY1MjYxODFi
LzEvaGhpSEtybjZLNkFzc0JwRXpvNjRka0VvSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADgcaU9T
/wakDAnuC4vJdRZ5GKVwtQ/cwmfqV3RvxgMRGCsZ9zT2ryP49q4WWyAEU28xVmkO
F3avEOBFGqLfTJMLDp5Ubn7tB/z0LST0Ve2o0SWTqiQdYMGMCCjhDzJU7MGm+PYp
O0yVzPdGfuAGAz7uQ5mtUFFBYxBDksaeu4IL1H+aahDpHdj+1AncPEvKncoYRDKM
pdbRWzw5HJq4MrWbPnGJTJZghxzrfKYGgLNmItlEXDoym3sXknp+RlO7+IFwAzzK
loKet/zZ0K1NSmv0JGrI3jRmO8pK710RtGx/hkvmRi6DrEew1vPtJEPWvDipDoi1
Hheg25n7xiXO/Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:10 2025 by rpki-client