Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: TqVwYQbpRFItqf+67zmapTtujUnP+9i4wRh6fJxSlRQ=
Subject key identifier: 1D:8E:A1:FC:E5:BE:43:1A:22:F8:D0:F9:0B:07:C1:B9:6B:90:9A:0F
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 0194BCAA1D87B6AB80A47BCF0830914FAAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 1050
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: CSj4rvQmRyDsyaDEw0jstidXLzo.roa (hash: 3pSnEcRnf/ULKrT/Poc1HoH7UgR2xUCZ7SNrN3hfNmI=)
2: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: eBuBRr/CXGE3R1PDOWN06EfkdFkUANmtk/qozNzNSZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:87:b6:ab:80:a4:7b:cf:08:30:91:4f:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=1d8ea1fce5be431a22f8d0f90b07c1b96b909a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:e0:48:9d:3a:37:76:86:ae:74:ea:40:f8:
6d:46:74:ee:ae:3d:f9:08:3e:94:f1:c7:06:a4:60:
6b:89:2f:b8:d1:4e:ef:42:57:09:ce:e8:5d:d4:7f:
f4:37:e6:f5:9e:88:9f:4a:39:d8:3a:35:24:eb:12:
63:37:8e:64:7a:3f:5f:14:42:85:6e:49:bc:6e:da:
23:bb:c5:a5:9e:53:e9:f6:2f:0b:fb:fc:c4:51:30:
38:fa:96:e7:19:5d:85:2d:3d:df:47:a6:b4:61:6a:
52:fa:e1:84:2a:b6:d0:8b:6a:5e:35:d4:2f:a1:c1:
91:bf:22:8f:df:c5:fd:71:0c:28:a2:16:db:6d:7d:
be:da:78:86:99:b5:a0:3e:18:26:20:71:5b:94:7f:
0d:0d:ed:f4:29:17:a2:64:4f:ef:d5:3c:f1:e1:55:
9e:49:c6:d2:92:a1:3f:9c:48:c1:e0:10:bb:75:57:
2f:6e:34:53:40:32:bb:2f:a5:ba:c6:a1:14:e6:6f:
4c:7e:00:c3:8e:30:73:88:9d:a4:fd:64:61:1a:3c:
8e:92:e9:f8:0b:c1:bb:1d:4a:31:f1:a5:86:dc:64:
d3:14:7a:fb:15:7c:d4:02:d4:eb:2a:0e:d5:8c:7c:
f3:eb:a5:88:c1:a7:ca:b3:a3:5e:ed:4f:5d:f1:9d:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8E:A1:FC:E5:BE:43:1A:22:F8:D0:F9:0B:07:C1:B9:6B:90:9A:0F
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:fe:be:e0:42:1c:a8:07:f6:35:7d:1d:90:90:a4:90:40:
93:13:55:c3:05:46:5b:a2:b9:5d:38:87:e0:bd:00:ef:e2:f9:
7c:93:3f:ff:08:0c:29:92:36:64:47:b3:e1:c1:e4:e4:0d:15:
fb:bf:ce:79:c7:f5:ee:87:d4:ab:58:f3:d5:08:4f:e0:e8:16:
22:62:ac:7c:97:d4:92:b0:df:db:f9:71:d1:58:9e:71:ca:7c:
b4:b9:4e:81:e7:94:f8:67:98:55:09:63:23:2c:a3:89:29:9e:
7d:df:9e:f4:ec:96:4d:08:1b:31:26:56:7f:2f:43:db:6e:c6:
e6:19:15:88:00:66:12:fc:f3:02:11:46:42:d6:c0:45:a7:6b:
38:4d:4d:e7:ec:75:5e:c1:03:a2:c2:78:89:dd:ca:a2:c3:9e:
e9:bc:d7:59:ba:d9:61:7b:d5:c2:20:5e:e9:b9:a7:e3:ca:67:
75:c2:2d:e0:98:1a:96:45:df:51:e8:32:72:9c:5c:80:24:c2:
b0:26:f9:c1:94:69:91:f0:02:51:4d:ad:b2:ea:45:7b:9d:13:
fd:12:7d:3a:24:de:1e:0a:fe:ec:5f:3d:22:88:72:90:0a:ba:
e4:a3:0b:73:3f:f9:0c:26:64:21:ad:c0:c0:ef:dd:99:03:fb:
43:e1:80:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh2HtquApHvPCDCRT6rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOWMwNzJmMmRiM2VmMWYyNjA1MDViYmZhMGVmZWExOGMy
OTcwYjEwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
EygxZDhlYTFmY2U1YmU0MzFhMjJmOGQwZjkwYjA3YzFiOTZiOTA5YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUjgSJ06N3aGrnTqQPhtRnTurj35
CD6U8ccGpGBriS+40U7vQlcJzuhd1H/0N+b1noifSjnYOjUk6xJjN45kej9fFEKF
bkm8btoju8WlnlPp9i8L+/zEUTA4+pbnGV2FLT3fR6a0YWpS+uGEKrbQi2peNdQv
ocGRvyKP38X9cQwoohbbbX2+2niGmbWgPhgmIHFblH8NDe30KReiZE/v1Tzx4VWe
ScbSkqE/nEjB4BC7dVcvbjRTQDK7L6W6xqEU5m9MfgDDjjBziJ2k/WRhGjyOkun4
C8G7HUox8aWG3GTTFHr7FXzUAtTrKg7VjHzz66WIwafKs6Ne7U9d8Z2jLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2OofzlvkMaIvjQ+QsHwblrkJoPMB8GA1UdIwQY
MBaAFB2cBy8ts+8fJgUFu/oO/qGMKXCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNTUwZTMtZjAyNC00NmI4LTg3ZWMt
NDUwZTI0ZTA4OTFkLzEvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jNTUwZTMtZjAyNC00NmI4LTg3ZWMtNDUwZTI0ZTA4OTFk
LzEvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1P+vuBC
HKgH9jV9HZCQpJBAkxNVwwVGW6K5XTiH4L0A7+L5fJM//wgMKZI2ZEez4cHk5A0V
+7/Oecf17ofUq1jz1QhP4OgWImKsfJfUkrDf2/lx0Vieccp8tLlOgeeU+GeYVQlj
IyyjiSmefd+e9OyWTQgbMSZWfy9D227G5hkViABmEvzzAhFGQtbARadrOE1N5+x1
XsEDosJ4id3KosOe6bzXWbrZYXvVwiBe6bmn48pndcIt4JgalkXfUegycpxcgCTC
sCb5wZRpkfACUU2tsupFe50T/RJ9OiTeHgr+7F89IohykAq65KMLcz/5DCZkIa3A
wO/dmQP7Q+GA3Q==
-----END CERTIFICATE-----
Generated at Thu May 1 10:40:36 2025 by rpki-client