Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: 71Te0lG3cBmcVF5e4zpKMYQ4kPj75EosJ7WuyzeQ66M=
Subject key identifier: B7:79:A1:F3:98:BC:DF:62:5D:DA:A0:1D:CB:F5:70:DC:D5:EF:14:A9
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 0194BC72AFE4FCF107869B9F985FC2A51D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 0BAD
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: QsTD0hmXVTstBqyf0PDDVskC3qXRspvsH5cO4ENr/mg=)
2: qBbXPlomssD9zrP_xFljqdR0LbI.roa (hash: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:af:e4:fc:f1:07:86:9b:9f:98:5f:c2:a5:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=b779a1f398bcdf625ddaa01dcbf570dcd5ef14a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:9b:49:76:85:fa:38:95:8d:0d:c5:3e:30:
5c:0c:a1:31:a4:b7:f5:40:8f:77:59:bc:d8:12:9e:
ee:35:2b:a8:b4:0d:f3:32:1d:ac:e5:39:7b:5f:10:
19:28:09:dd:85:54:9c:3e:8f:89:aa:74:d1:fc:f1:
a1:43:c8:57:6d:4b:58:a9:35:88:ad:e2:c8:4f:59:
59:4c:41:01:ce:b1:d6:d2:e4:ba:0a:1b:71:2c:22:
51:fe:87:19:3f:f0:a8:b8:47:ad:92:b0:61:42:09:
2b:a0:19:0d:08:94:ab:ea:fe:f7:dc:4f:39:ea:fa:
9d:1b:12:52:11:1c:6a:2f:f9:b6:63:5f:05:d0:f5:
7c:ce:44:96:96:15:5b:e8:e1:85:2c:5a:6e:66:d3:
ee:c2:91:05:9f:89:5f:9b:a2:f9:9e:fa:26:eb:3d:
43:e1:e4:96:6c:47:04:59:44:93:0d:f7:4a:8f:a9:
32:9b:d3:17:4c:5c:bd:8d:65:32:59:b1:1d:cb:9c:
93:db:61:9c:5f:20:93:32:2d:80:03:71:1f:2d:92:
82:7c:dc:70:4c:97:75:30:c2:a4:0d:07:c8:4b:2b:
9c:da:20:a8:ba:b2:11:2f:35:c0:b9:8b:62:61:5c:
68:00:13:90:2a:70:f1:98:48:cc:27:fd:47:6e:13:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:79:A1:F3:98:BC:DF:62:5D:DA:A0:1D:CB:F5:70:DC:D5:EF:14:A9
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:90:a7:f3:77:16:e6:43:e2:05:7a:67:08:17:bf:20:af:d9:
40:98:ee:c7:2c:42:86:32:36:9c:51:5d:2e:da:94:8d:41:0d:
6e:b9:dd:65:62:ef:e5:e3:6e:b5:09:05:28:f9:30:a7:8d:77:
2d:6b:ba:dc:da:52:10:57:9b:36:6c:03:e0:56:e6:cd:ec:85:
b1:cf:07:66:4e:1f:37:72:b4:0b:00:a2:55:3c:a5:ab:86:0d:
78:4e:be:27:78:9d:17:70:0b:a5:3c:4d:c0:53:c4:b8:84:b8:
39:94:dc:47:5a:36:a6:24:67:53:94:58:0a:62:95:ad:bf:ad:
0c:6a:e9:c5:d3:1d:cf:a5:79:d4:1d:46:41:75:2d:3e:08:fb:
c6:a5:97:ee:00:75:ff:ca:fb:3f:e9:35:2c:c7:69:50:e8:35:
4a:fa:23:c2:45:53:c1:d8:59:64:6a:71:80:1c:4f:70:c5:b7:
65:25:27:89:1a:2c:4e:13:4b:78:7d:c4:c9:74:da:67:4b:a7:
28:6f:ee:e0:53:67:cd:46:85:bb:dc:ab:f8:5d:68:6d:e3:06:
30:f7:45:b3:9c:22:16:0b:bf:97:6a:b1:fc:98:8f:e8:45:5c:
a1:6c:ff:fe:a6:8e:a9:7a:8a:37:24:b2:ad:95:71:c2:0c:d5:
b9:ae:b1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cq/k/PEHhpufmF/CpR09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
EyhiNzc5YTFmMzk4YmNkZjYyNWRkYWEwMWRjYmY1NzBkY2Q1ZWYxNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ybSXaF+jiVjQ3FPjBcDKExpLf1
QI93WbzYEp7uNSuotA3zMh2s5Tl7XxAZKAndhVScPo+JqnTR/PGhQ8hXbUtYqTWI
reLIT1lZTEEBzrHW0uS6ChtxLCJR/ocZP/CouEetkrBhQgkroBkNCJSr6v733E85
6vqdGxJSERxqL/m2Y18F0PV8zkSWlhVb6OGFLFpuZtPuwpEFn4lfm6L5nvom6z1D
4eSWbEcEWUSTDfdKj6kym9MXTFy9jWUyWbEdy5yT22GcXyCTMi2AA3EfLZKCfNxw
TJd1MMKkDQfISyuc2iCourIRLzXAuYtiYVxoABOQKnDxmEjMJ/1HbhMHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd5ofOYvN9iXdqgHcv1cNzV7xSpMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJCn83cW
5kPiBXpnCBe/IK/ZQJjuxyxChjI2nFFdLtqUjUENbrndZWLv5eNutQkFKPkwp413
LWu63NpSEFebNmwD4FbmzeyFsc8HZk4fN3K0CwCiVTylq4YNeE6+J3idF3ALpTxN
wFPEuIS4OZTcR1o2piRnU5RYCmKVrb+tDGrpxdMdz6V51B1GQXUtPgj7xqWX7gB1
/8r7P+k1LMdpUOg1SvojwkVTwdhZZGpxgBxPcMW3ZSUniRosThNLeH3EyXTaZ0un
KG/u4FNnzUaFu9yr+F1obeMGMPdFs5wiFgu/l2qx/JiP6EVcoWz//qaOqXqKNySy
rZVxwgzVua6xHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:49 2025 by rpki-client