Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: yJMBfBuEbiUyYMIEksqNohKh9SE4aJv2EA84wg0aUgU=
Subject key identifier: 0D:54:8D:3C:E7:E3:64:88:D2:54:E2:AD:1D:4C:68:56:15:4D:C4:1A
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 0194BBCDB809EDF1756A2C41CC3CB64988F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1192
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: DC457V004ebo_81e4fxQUpZs59k.roa (hash: koGSw3MBz9AwS+zqOmOgemnpgRcxTDfkN77KAf52zbM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: auUZSCAVRcj6uL0nzrHI9KfW/OHnpgV9KtkJnmI5vNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b8:09:ed:f1:75:6a:2c:41:cc:3c:b6:49:88:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=0d548d3ce7e36488d254e2ad1d4c6856154dc41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:ce:ca:da:30:e1:be:d3:37:e4:d7:8b:4f:
5b:df:8d:e5:62:ba:cc:eb:ea:73:70:1e:bc:4f:0b:
8f:a6:7a:c3:d6:ad:92:33:16:74:6b:49:c9:58:73:
3b:ec:5d:ba:b3:25:e1:a2:92:b8:7d:10:8e:6b:62:
46:f6:86:af:bd:da:ce:fd:f0:f7:a8:ee:0a:3a:50:
3a:f3:69:5a:62:c3:52:04:f7:8d:38:2e:be:d1:c2:
df:04:68:a6:e9:e5:d5:6d:53:ac:c4:9f:f6:dd:0e:
c2:c5:ac:58:a6:2d:25:ee:15:aa:86:14:52:a3:8e:
05:3b:ba:07:c8:f7:5d:66:25:62:0e:71:17:aa:40:
92:d5:94:18:3e:42:b5:5c:14:c8:f1:7b:b9:97:2d:
32:0a:d9:bd:57:6f:33:bf:05:76:e4:61:ea:8b:0e:
4b:89:c8:88:4d:5f:55:17:84:33:70:b7:34:f9:fc:
a6:91:c6:b2:40:67:7d:63:7e:17:1b:40:be:a3:e1:
18:15:95:28:61:bf:ed:8f:6b:aa:6b:ff:b7:bd:00:
c6:a2:21:b8:80:2b:e5:4d:7c:7d:52:de:51:3c:6b:
65:38:50:5c:e0:34:a1:42:7c:ea:a5:71:51:5c:eb:
01:b0:d7:d7:bb:35:38:78:0d:df:e5:cc:21:ac:4b:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:8D:3C:E7:E3:64:88:D2:54:E2:AD:1D:4C:68:56:15:4D:C4:1A
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:56:29:aa:41:9f:dc:0d:81:f4:8c:1b:12:2c:b7:19:47:35:
e6:a3:26:27:2e:b9:a7:ef:11:62:e6:14:fd:e0:56:c2:c6:51:
85:c8:ee:e1:62:94:97:a8:85:38:86:e1:54:5f:06:b7:3b:0c:
7c:95:0b:34:30:98:d2:94:8b:07:81:f8:93:7d:ca:6d:34:16:
0a:8c:18:e0:a4:90:b3:15:bb:c7:18:fd:8f:a7:7a:38:86:39:
35:23:32:d7:19:dc:b2:76:e5:92:75:a8:e3:9c:23:5c:55:64:
21:16:bc:c9:26:1d:78:c3:29:18:a0:79:31:3e:8c:a1:38:b3:
fa:cf:23:92:20:6e:5e:10:26:6a:ce:71:4f:a4:af:e6:01:12:
72:23:3e:b2:82:fd:1e:25:bf:71:90:ba:d5:08:69:b7:3b:c2:
99:b3:13:f7:58:1e:ef:59:05:72:e7:fb:e9:81:b4:fb:02:0c:
a9:de:43:c6:93:38:35:5f:c5:0c:f5:73:5e:0f:63:5c:44:85:
00:0d:34:5c:f0:72:2e:0b:f4:0f:d9:6c:25:35:07:1b:5d:2e:
f3:40:56:12:51:ea:61:3e:02:90:3a:6a:8e:f2:6d:40:96:c0:
75:be:5b:ac:e6:9b:2c:c1:3e:fc:c2:cb:cd:14:c8:a8:6b:69:
a9:ec:53:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbgJ7fF1aixBzDy2SYjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
EygwZDU0OGQzY2U3ZTM2NDg4ZDI1NGUyYWQxZDRjNjg1NjE1NGRjNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIzOytow4b7TN+TXi09b343lYrrM
6+pzcB68TwuPpnrD1q2SMxZ0a0nJWHM77F26syXhopK4fRCOa2JG9oavvdrO/fD3
qO4KOlA682laYsNSBPeNOC6+0cLfBGim6eXVbVOsxJ/23Q7CxaxYpi0l7hWqhhRS
o44FO7oHyPddZiViDnEXqkCS1ZQYPkK1XBTI8Xu5ly0yCtm9V28zvwV25GHqiw5L
iciITV9VF4QzcLc0+fymkcayQGd9Y34XG0C+o+EYFZUoYb/tj2uqa/+3vQDGoiG4
gCvlTXx9Ut5RPGtlOFBc4DShQnzqpXFRXOsBsNfXuzU4eA3f5cwhrEsdGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1UjTzn42SI0lTirR1MaFYVTcQaMB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlYpqkGf
3A2B9IwbEiy3GUc15qMmJy65p+8RYuYU/eBWwsZRhcju4WKUl6iFOIbhVF8GtzsM
fJULNDCY0pSLB4H4k33KbTQWCowY4KSQsxW7xxj9j6d6OIY5NSMy1xncsnblknWo
45wjXFVkIRa8ySYdeMMpGKB5MT6MoTiz+s8jkiBuXhAmas5xT6Sv5gESciM+soL9
HiW/cZC61QhptzvCmbMT91ge71kFcuf76YG0+wIMqd5DxpM4NV/FDPVzXg9jXESF
AA00XPByLgv0D9lsJTUHG10u80BWElHqYT4CkDpqjvJtQJbAdb5brOabLME+/MLL
zRTIqGtpqexTYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:56 2025 by rpki-client