Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: VGveHbsE17yFmjmsoc/2cYYdTE7Lqnk1f1Kjn+FNSnI=
Subject key identifier: 82:75:F6:36:5F:2B:75:F9:59:A2:36:24:9A:5E:E4:CD:82:3E:AD:E8
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 0194BC04F6492223C7701E978846CB69DD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 09F8
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=)
2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: FVS+GR/NNfhJ9AwGx80KhEvQANgVbSUF4g3qyj8Bp6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f6:49:22:23:c7:70:1e:97:88:46:cb:69:dd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=8275f6365f2b75f959a236249a5ee4cd823eade8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:4e:01:91:8d:8b:64:d9:0b:3f:ea:49:a2:
0a:07:cd:8d:89:46:7b:5e:9a:23:34:97:85:cb:33:
0c:0a:c5:d3:ec:17:23:93:23:d3:68:a7:f7:f8:0d:
af:34:22:17:f7:31:1b:77:ea:a9:ad:42:ec:cb:46:
c2:e3:63:bc:90:54:85:d9:25:12:b5:f1:e2:57:38:
53:fd:80:03:ef:61:83:1b:81:e8:b8:4e:ff:93:f5:
74:1d:42:55:70:d5:d9:5b:40:44:24:58:7b:45:16:
36:25:ee:b9:e1:5c:00:ea:ed:be:45:2b:97:eb:70:
c7:86:88:0d:e6:df:52:02:79:3b:f2:38:5d:e9:32:
ae:14:38:e3:19:89:64:03:a7:90:ce:3d:bb:b9:aa:
01:55:41:30:18:a6:53:0c:59:a7:2f:7d:d2:24:bb:
0d:53:68:a4:a1:57:20:a8:7a:8f:4e:f1:11:82:40:
d2:46:a1:0f:f9:b9:45:3d:e5:43:8f:5c:25:e8:3d:
84:10:1d:67:01:4e:60:2e:18:d0:0e:c6:54:c4:ee:
c2:8c:3d:29:23:e1:b0:4a:07:1b:ff:e4:33:9a:0a:
14:66:08:33:c6:c8:96:9b:d4:f0:46:5f:69:ff:0d:
64:70:49:27:5f:db:58:48:60:82:83:fa:a3:57:9d:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:F6:36:5F:2B:75:F9:59:A2:36:24:9A:5E:E4:CD:82:3E:AD:E8
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:bb:41:27:0f:34:57:ea:ae:6d:d2:d3:5e:36:ed:eb:09:
a6:1b:83:07:22:ee:76:e6:9c:b5:e4:57:69:1b:7a:89:c9:33:
97:13:bb:5a:b4:a2:23:b8:8c:86:a4:b1:a6:93:2a:1c:04:22:
f4:a4:01:31:3e:c3:d8:d6:be:b8:72:1b:e8:74:c8:aa:36:30:
2a:d3:56:b1:82:68:db:dc:2a:46:03:81:cd:52:33:e6:8d:09:
98:6d:51:a5:cd:fa:34:1c:51:86:15:2d:3e:63:e5:06:f8:d8:
ff:84:01:fe:46:0f:82:ec:e6:52:20:4e:52:3a:5a:81:ac:9e:
d5:40:58:b2:f6:6a:90:a2:a4:86:90:a6:12:5e:13:c5:04:4c:
3e:38:85:e2:82:8d:f6:4a:ee:b3:ce:c6:c6:a7:d7:cb:04:78:
cd:10:b9:ea:26:a8:99:b3:1c:f1:df:89:dd:25:c6:dd:6a:0d:
a1:82:35:20:05:c1:62:a0:e0:0a:ec:df:ad:2a:d8:6e:a8:fd:
e4:23:b3:c7:35:6a:2d:c2:be:60:92:2d:3d:ee:03:e5:7d:eb:
53:02:f1:d3:2f:4f:f5:c3:f8:4e:e2:0e:5d:a6:ed:51:40:c2:
6c:92:d5:7e:b7:21:bd:5d:6c:19:3b:bc:da:0a:b9:ba:74:6c:
e8:5c:6c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPZJIiPHcB6XiEbLad1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm
OGY0ZTcwHhcNMjUwMTMxMTEwMDI5WhcNMjUwMjAxMTEwMDI5WjAzMTEwLwYDVQQD
Eyg4Mjc1ZjYzNjVmMmI3NWY5NTlhMjM2MjQ5YTVlZTRjZDgyM2VhZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsddOAZGNi2TZCz/qSaIKB82NiUZ7
XpojNJeFyzMMCsXT7BcjkyPTaKf3+A2vNCIX9zEbd+qprULsy0bC42O8kFSF2SUS
tfHiVzhT/YAD72GDG4HouE7/k/V0HUJVcNXZW0BEJFh7RRY2Je654VwA6u2+RSuX
63DHhogN5t9SAnk78jhd6TKuFDjjGYlkA6eQzj27uaoBVUEwGKZTDFmnL33SJLsN
U2ikoVcgqHqPTvERgkDSRqEP+blFPeVDj1wl6D2EEB1nAU5gLhjQDsZUxO7CjD0p
I+GwSgcb/+QzmgoUZggzxsiWm9TwRl9p/w1kcEknX9tYSGCCg/qjV5326QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ19jZfK3X5WaI2JJpe5M2CPq3oMB8GA1UdIwQY
MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt
YjA1ODMyYmM2OTYyLzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy
LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgL27QScP
NFfqrm3S01427esJphuDByLuduacteRXaRt6ickzlxO7WrSiI7iMhqSxppMqHAQi
9KQBMT7D2Na+uHIb6HTIqjYwKtNWsYJo29wqRgOBzVIz5o0JmG1Rpc36NBxRhhUt
PmPlBvjY/4QB/kYPguzmUiBOUjpagaye1UBYsvZqkKKkhpCmEl4TxQRMPjiF4oKN
9krus87GxqfXywR4zRC56iaombMc8d+J3SXG3WoNoYI1IAXBYqDgCuzfrSrYbqj9
5COzxzVqLcK+YJItPe4D5X3rUwLx0y9P9cP4TuIOXabtUUDCbJLVfrchvV1sGTu8
2gq5unRs6Fxs6A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:59 2025 by rpki-client