Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: MXFFnHo73EpaKB9gZWmn8AzG5f749YsLe+jXnkHik/Q=
Subject key identifier: 8C:67:20:6E:87:4D:E6:E1:73:72:10:A2:F9:3E:4F:4D:DD:14:37:6D
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0194BCAA30B71D4255F5A13C9053083B431A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1342
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 7oQLFindjFNNwT1EI5HtopJVATk.roa (hash: QW4atGbHZ6zg8XYnhlFNaNdtw1KZFCjwMGSD43vyWYs=)
2: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: lYKM616r0/CRuS3MIDgeX4V45NWfyA1MEzZK+SMnizM=)
3: y5tzb01k1PpQPPhZNGuxqy5H_jE.roa (hash: 6SFQda12ho7/2/R+Mhk8bos1CKCU4ablq0g73XEsqaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:30:b7:1d:42:55:f5:a1:3c:90:53:08:3b:43:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=8c67206e874de6e1737210a2f93e4f4ddd14376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:7a:4d:ee:29:56:11:a5:fb:3c:b5:cc:15:
73:ea:ab:e0:03:fa:02:9b:c5:57:a5:76:a5:52:d3:
c1:5f:75:47:c4:45:16:b9:ad:9d:91:19:00:01:87:
99:b4:ed:0a:4c:ec:92:d6:c8:3c:00:58:c3:cc:db:
eb:41:e1:32:0a:fa:d6:3e:b3:b5:f4:c6:5d:36:d1:
cd:11:5a:4a:e6:ee:8d:0c:f6:3b:7d:b3:47:ae:0b:
ec:00:d1:3d:3d:b1:de:4b:13:f1:29:da:c5:8b:6d:
82:2a:a1:76:14:fa:81:9a:ae:d5:52:ea:44:d0:41:
c3:f3:15:90:51:ef:19:c4:2f:c5:0f:87:b4:0b:21:
db:8c:85:38:e4:69:77:12:22:b5:5a:7c:6f:de:ac:
0d:ef:8f:69:a1:5f:45:94:31:3b:9c:7a:05:67:be:
9a:3c:5c:a1:00:57:00:5a:a2:bd:21:db:e3:06:68:
59:ae:9f:b9:2e:8e:a7:cf:62:7d:21:f9:41:74:b5:
d5:84:4f:28:c0:e8:de:f6:28:b6:8a:5d:56:ae:6a:
a2:b9:30:50:2b:87:23:ce:8a:f7:ab:7b:34:f2:e9:
c1:1e:eb:cb:07:48:5a:55:36:ba:3e:24:da:1a:38:
b7:6a:8b:7e:0e:eb:9f:53:13:fc:c6:74:de:f2:af:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:20:6E:87:4D:E6:E1:73:72:10:A2:F9:3E:4F:4D:DD:14:37:6D
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fb:c4:fc:7a:d2:80:11:34:17:4a:68:57:34:47:8f:9b:d8:
f8:d0:ec:5f:cc:00:ff:18:7c:2b:31:f7:17:07:08:8f:d2:06:
d9:86:84:ff:18:9c:22:bc:ef:cd:b9:f4:1f:59:63:59:73:e4:
8b:15:e2:88:48:28:de:24:a7:2c:43:f0:ad:8c:c8:81:f7:fd:
bb:13:0d:d4:bd:9f:27:b7:52:51:08:6e:ac:38:f9:f8:15:57:
6f:2a:fe:41:d0:67:ee:c7:11:ca:79:2f:c7:7d:b8:96:4c:b3:
d2:6a:dc:c6:1c:f8:e7:72:d2:e8:04:c8:33:ca:bf:21:80:d2:
f0:c3:15:e5:e8:42:b7:01:94:49:fb:27:69:a8:e8:79:72:f4:
ac:72:43:90:70:f1:1a:d7:7c:79:49:a6:7b:56:03:f6:80:e0:
d7:72:0d:26:a6:68:62:76:ec:90:d5:9b:ec:5f:07:44:e1:be:
ea:28:d9:85:0a:3f:78:9a:af:51:68:e0:e5:5b:db:a9:df:66:
e8:c6:f9:99:90:7a:7c:04:19:4c:ed:59:5e:f1:0c:bf:1e:5b:
58:28:8f:cd:21:37:db:3b:eb:b8:ba:5a:31:e3:6c:40:9e:b9:
42:35:f7:40:3b:b4:fb:7e:31:f3:e7:da:f4:8e:67:c3:f9:64:
8c:88:e3:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjC3HUJV9aE8kFMIO0MaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjUwMTMxMTQwMDU3WhcNMjUwMjAxMTQwMDU3WjAzMTEwLwYDVQQD
Eyg4YzY3MjA2ZTg3NGRlNmUxNzM3MjEwYTJmOTNlNGY0ZGRkMTQzNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0V6Te4pVhGl+zy1zBVz6qvgA/oC
m8VXpXalUtPBX3VHxEUWua2dkRkAAYeZtO0KTOyS1sg8AFjDzNvrQeEyCvrWPrO1
9MZdNtHNEVpK5u6NDPY7fbNHrgvsANE9PbHeSxPxKdrFi22CKqF2FPqBmq7VUupE
0EHD8xWQUe8ZxC/FD4e0CyHbjIU45Gl3EiK1Wnxv3qwN749poV9FlDE7nHoFZ76a
PFyhAFcAWqK9IdvjBmhZrp+5Lo6nz2J9IflBdLXVhE8owOje9ii2il1WrmqiuTBQ
K4cjzor3q3s08unBHuvLB0haVTa6PiTaGji3aot+DuufUxP8xnTe8q+BOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxnIG6HTebhc3IQovk+T03dFDdtMB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfvE/HrS
gBE0F0poVzRHj5vY+NDsX8wA/xh8KzH3FwcIj9IG2YaE/xicIrzvzbn0H1ljWXPk
ixXiiEgo3iSnLEPwrYzIgff9uxMN1L2fJ7dSUQhurDj5+BVXbyr+QdBn7scRynkv
x324lkyz0mrcxhz453LS6ATIM8q/IYDS8MMV5ehCtwGUSfsnaajoeXL0rHJDkHDx
Gtd8eUmme1YD9oDg13INJqZoYnbskNWb7F8HROG+6ijZhQo/eJqvUWjg5Vvbqd9m
6Mb5mZB6fAQZTO1ZXvEMvx5bWCiPzSE32zvruLpaMeNsQJ65QjX3QDu0+34x8+fa
9I5nw/lkjIjjZA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:35 2025 by rpki-client