Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: wGdzJ2Eu62ostJIxxGLEXWM3ouv91l6vBmOOYprj7Iw=
Subject key identifier: 21:DE:B8:F1:A7:26:53:D1:20:E6:5B:31:EA:28:92:5C:CA:C7:0C:06
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0194BC72DFAF7E8519CBC378A8D72A09488D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 0FD7
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: C49fmzvsI91UONTI11WCtA7Y9jDucc3HQ/0Ws0/1GRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:af:7e:85:19:cb:c3:78:a8:d7:2a:09:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=21deb8f1a72653d120e65b31ea28925ccac70c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:5c:79:47:10:1d:28:6f:b6:2a:10:64:26:
1d:d5:3a:93:e4:7e:b9:66:cd:91:74:56:82:96:68:
f9:92:32:33:ab:5b:3f:ab:90:07:6a:eb:2f:a9:2f:
17:ad:e5:c7:40:19:92:a9:50:ba:e2:13:19:c8:07:
ce:be:72:e7:c4:35:a6:c0:c2:75:9c:b5:38:30:68:
2c:70:56:a4:4f:49:17:7f:ac:2b:00:3b:8f:68:50:
d9:26:ef:10:5d:17:23:d8:26:f3:a7:d5:5d:a1:1d:
d4:9c:84:ac:10:1e:e1:60:c5:29:97:e0:f1:4c:a9:
56:cc:65:5e:33:68:a1:c3:ce:9d:59:ea:f6:cf:f1:
d5:f3:bc:f7:fa:07:47:4b:3c:e5:f4:cf:69:bf:fc:
ef:8b:63:48:88:f5:1c:39:79:45:a5:92:44:91:41:
45:b8:ba:55:cb:4f:8c:e2:2c:e4:c0:11:22:a8:52:
05:5d:db:6e:4a:da:fe:29:e2:2b:ae:60:e9:bb:51:
20:85:e4:d9:bd:95:06:9f:cd:21:f4:b9:65:a8:0e:
77:62:20:a8:7f:10:e6:85:2e:82:6f:ff:b2:bb:72:
b7:82:97:ca:f3:b4:f4:22:0e:13:31:63:6e:d6:53:
8e:93:00:d6:7b:71:1c:48:ae:54:c4:5c:dc:e9:52:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:B8:F1:A7:26:53:D1:20:E6:5B:31:EA:28:92:5C:CA:C7:0C:06
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:27:a3:eb:13:18:28:bc:85:02:71:8b:17:a0:92:0f:c7:c1:
e5:ef:02:48:ce:68:27:ef:34:d7:32:47:50:d1:fe:89:8b:db:
17:fe:e2:41:82:67:3d:04:fd:e6:8f:e4:29:b7:be:b9:7c:79:
c1:69:f5:df:25:c9:86:ce:49:1c:12:13:49:77:2c:3f:9a:06:
1a:a4:5f:7d:fe:9b:cd:e1:74:69:86:7f:6a:b6:3c:bf:95:db:
5a:72:42:b3:1a:6e:7c:86:8c:ad:75:57:64:38:be:44:a8:b9:
e9:ca:5b:ae:f8:41:ea:34:54:f6:9d:2e:32:d9:ca:75:46:11:
1b:db:a6:a2:9b:f6:31:0b:87:b0:67:c1:c1:dd:7c:ec:f8:9b:
f6:02:5d:75:a4:a5:87:65:60:dd:63:71:16:1f:61:6a:43:5d:
81:bc:0f:57:d0:9d:df:ca:65:8d:e4:0d:84:1c:a5:f6:5a:42:
f2:a7:72:ab:a7:a9:80:2f:d8:4f:f9:42:fe:93:13:95:cd:df:
3b:71:83:8e:5d:d2:f8:ec:fd:3e:aa:84:ba:3b:db:bc:a7:38:
33:13:07:cb:79:cc:53:a6:b2:f1:db:7b:35:ee:88:91:4f:2d:
2e:8e:1e:99:78:0a:85:b0:b8:08:92:d4:43:b6:98:5a:b1:06:
6d:5c:48:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ct+vfoUZy8N4qNcqCUiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EygyMWRlYjhmMWE3MjY1M2QxMjBlNjViMzFlYTI4OTI1Y2NhYzcwYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdNceUcQHShvtioQZCYd1TqT5H65
Zs2RdFaClmj5kjIzq1s/q5AHausvqS8XreXHQBmSqVC64hMZyAfOvnLnxDWmwMJ1
nLU4MGgscFakT0kXf6wrADuPaFDZJu8QXRcj2Cbzp9VdoR3UnISsEB7hYMUpl+Dx
TKlWzGVeM2ihw86dWer2z/HV87z3+gdHSzzl9M9pv/zvi2NIiPUcOXlFpZJEkUFF
uLpVy0+M4izkwBEiqFIFXdtuStr+KeIrrmDpu1EgheTZvZUGn80h9LllqA53YiCo
fxDmhS6Cb/+yu3K3gpfK87T0Ig4TMWNu1lOOkwDWe3EcSK5UxFzc6VKRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHeuPGnJlPRIOZbMeooklzKxwwGMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiej6xMY
KLyFAnGLF6CSD8fB5e8CSM5oJ+801zJHUNH+iYvbF/7iQYJnPQT95o/kKbe+uXx5
wWn13yXJhs5JHBITSXcsP5oGGqRfff6bzeF0aYZ/arY8v5XbWnJCsxpufIaMrXVX
ZDi+RKi56cpbrvhB6jRU9p0uMtnKdUYRG9umopv2MQuHsGfBwd187Pib9gJddaSl
h2Vg3WNxFh9hakNdgbwPV9Cd38pljeQNhByl9lpC8qdyq6epgC/YT/lC/pMTlc3f
O3GDjl3S+Oz9PqqEujvbvKc4MxMHy3nMU6ay8dt7Ne6IkU8tLo4emXgKhbC4CJLU
Q7aYWrEGbVxIVw==
-----END CERTIFICATE-----
Generated at Thu May 1 12:38:28 2025 by rpki-client