Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft (raw, json)
Hash identifier: iHely9yNDPOf9guHi63vX59YzHFcD1t1FNynqZt+0ls=
Subject key identifier: 5F:72:83:F2:94:19:7F:11:48:7B:DE:8B:60:0A:2B:0A:99:47:D1:A3
Authority key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Certificate issuer: /CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Certificate serial: 0194BD178D335B043376C069093EEE6CE700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
Manifest number: 0D38
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: a7s4IVc6pbucBFcHXkR0racHnFI.roa (hash: 8KV2P9IHJpLQQ3jZXVSSowUOoz10VVeNpPastctIMEs=)
2: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl (hash: DK96hb0aJhn4N76VYl7GNdVsC9ni3joO2X/1rKkBKog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:33:5b:04:33:76:c0:69:09:3e:ee:6c:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=5f7283f294197f11487bde8b600a2b0a9947d1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:82:0f:36:5f:a4:d2:c9:3c:d7:21:09:9c:
76:7b:50:c4:ff:8a:91:0c:48:13:bb:9e:15:88:df:
f6:ef:47:d7:fe:13:51:c2:cd:d4:fe:73:0e:16:51:
e0:e9:13:d4:50:ef:e0:e5:70:69:1b:1a:b4:e1:00:
73:1e:18:0e:c0:e4:7f:ac:ad:c6:71:82:14:6f:10:
f6:51:33:7a:e3:32:e0:8d:95:9f:48:e8:29:4c:08:
f3:27:0c:f7:18:89:07:ce:d2:2f:40:79:ec:21:ea:
b8:6d:ed:90:e1:42:c4:00:5b:d3:54:51:5f:e8:67:
2b:4f:a2:cc:09:2d:57:e7:68:15:fb:b7:ed:0d:14:
8b:d3:05:32:64:0d:70:8c:0d:53:9a:3f:09:b9:a9:
95:7d:4f:24:7c:18:be:d7:93:6a:5a:98:6a:c8:6b:
03:8a:10:95:9f:24:11:22:f8:8e:2b:90:be:a6:45:
35:66:8d:06:e4:fd:a0:21:ec:10:a1:db:86:da:f3:
2b:c8:a6:e2:29:72:00:d8:81:90:ed:a6:2f:36:44:
e5:8f:40:82:bf:91:ff:ae:13:28:1e:7d:0b:9a:c5:
d1:cf:7d:6b:53:82:fb:9e:e8:0d:13:f1:cc:7c:8a:
29:c4:ab:27:42:db:36:2b:5a:31:a9:bf:8b:a9:82:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:72:83:F2:94:19:7F:11:48:7B:DE:8B:60:0A:2B:0A:99:47:D1:A3
X509v3 Authority Key Identifier:
keyid:AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:6f:a2:ac:17:94:d9:55:77:1e:2a:5e:00:c9:8e:79:dc:
3f:0e:1c:d7:fc:20:84:76:6a:f4:c6:1f:1a:26:0e:b9:0c:6f:
48:fa:0c:e3:0b:a6:01:cd:33:f9:39:a6:6f:f3:35:e1:0f:7a:
21:af:88:01:97:3d:b7:32:b1:34:e0:9b:5f:ea:e4:3e:5e:6d:
5b:bb:18:cd:19:4b:3f:72:27:8f:2a:a6:75:93:d0:78:2a:64:
0b:77:db:f9:ef:2d:36:c7:cc:e0:f8:8f:42:ee:d1:96:1d:20:
60:e7:d7:a2:0e:67:bc:1c:29:43:9b:26:cc:48:c9:8e:13:f9:
03:ff:c5:31:fb:fc:66:71:31:66:11:06:4b:d5:08:86:6d:21:
7a:c9:16:ac:97:6d:1d:75:25:25:b2:02:de:d3:3a:42:71:20:
c9:74:b4:6c:d2:6f:80:c0:5a:ed:69:9c:74:f5:06:9d:2d:67:
e6:b4:06:d8:f1:5e:36:8c:09:08:f4:e3:7d:b6:3a:9c:bf:86:
63:00:c4:fd:53:9c:47:14:4d:d0:e3:9e:5a:10:d4:3a:88:c5:
64:28:90:d5:8c:28:b0:24:92:7d:ff:e4:7d:68:2e:dd:26:ef:
21:56:93:63:ff:eb:d1:8e:c3:6f:60:d9:74:5b:30:a3:a8:78:
c9:db:97:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F40zWwQzdsBpCT7ubOcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjN2JlOTJkYmZlMzg1NjE1NjQwNmZhNzI1ZTE1ZGY1OTg4
ZTVjMTAwHhcNMjUwMTMxMTYwMDI0WhcNMjUwMjAxMTYwMDI0WjAzMTEwLwYDVQQD
Eyg1ZjcyODNmMjk0MTk3ZjExNDg3YmRlOGI2MDBhMmIwYTk5NDdkMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqCDzZfpNLJPNchCZx2e1DE/4qR
DEgTu54ViN/270fX/hNRws3U/nMOFlHg6RPUUO/g5XBpGxq04QBzHhgOwOR/rK3G
cYIUbxD2UTN64zLgjZWfSOgpTAjzJwz3GIkHztIvQHnsIeq4be2Q4ULEAFvTVFFf
6GcrT6LMCS1X52gV+7ftDRSL0wUyZA1wjA1Tmj8JuamVfU8kfBi+15NqWphqyGsD
ihCVnyQRIviOK5C+pkU1Zo0G5P2gIewQoduG2vMryKbiKXIA2IGQ7aYvNkTlj0CC
v5H/rhMoHn0LmsXRz31rU4L7nugNE/HMfIopxKsnQts2K1oxqb+LqYI1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9yg/KUGX8RSHvei2AKKwqZR9GjMB8GA1UdIwQY
MBaAFKx76S2/44VhVkBvpyXhXfWYjlwQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgt
OTlkNzI1MmY1YmUwLzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmFlMmYtMjY5MS00YzdlLWEwMTgtOTlkNzI1MmY1YmUw
LzEvckh2cExiX2poV0ZXUUctbkplRmQ5WmlPWEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhphvoqwX
lNlVdx4qXgDJjnncPw4c1/wghHZq9MYfGiYOuQxvSPoM4wumAc0z+Tmmb/M14Q96
Ia+IAZc9tzKxNOCbX+rkPl5tW7sYzRlLP3InjyqmdZPQeCpkC3fb+e8tNsfM4PiP
Qu7Rlh0gYOfXog5nvBwpQ5smzEjJjhP5A//FMfv8ZnExZhEGS9UIhm0heskWrJdt
HXUlJbIC3tM6QnEgyXS0bNJvgMBa7WmcdPUGnS1n5rQG2PFeNowJCPTjfbY6nL+G
YwDE/VOcRxRN0OOeWhDUOojFZCiQ1YwosCSSff/kfWgu3SbvIVaTY//r0Y7Db2DZ
dFswo6h4yduXKw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:44 2025 by rpki-client