Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: 0vGNkbEX1r+xzkGxs4eFzWhGZRJTKRioKI3Shw3mOQ0=
Subject key identifier: 0D:BE:3A:DF:55:32:3A:1A:F4:A8:76:BA:47:EE:68:98:55:20:42:43
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 0194BC3C5080974BA138A5173BF37D9252C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: tnLsJRysiGGuXH1prx/+4tLxmK6v7AjlwotMjv6nnXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:80:97:4b:a1:38:a5:17:3b:f3:7d:92:52:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=0dbe3adf55323a1af4a876ba47ee689855204243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:d5:24:e5:01:8c:38:3d:b5:3c:bd:f4:dd:
7d:fa:e4:15:b6:ed:6a:c4:ef:be:5b:a2:e5:90:4c:
ff:ce:3b:09:d5:af:a0:8f:95:d4:22:15:fe:70:2a:
77:12:6b:08:eb:d6:98:58:74:b1:55:c1:50:03:0b:
c6:68:45:4b:c6:c0:ed:45:af:48:52:f8:e4:2c:f2:
ac:0d:54:14:22:fc:86:fd:f3:04:4c:51:8a:2d:cc:
4c:ff:e9:24:09:8c:2f:25:f2:df:5a:3f:b7:7f:f8:
76:63:d1:78:49:b3:5c:a5:18:93:49:6c:c8:af:77:
76:73:91:59:6d:6a:86:71:07:ee:eb:b0:f6:f4:db:
c1:85:cb:9d:36:73:65:15:52:23:13:3c:de:6c:ad:
4e:9c:41:ee:79:bb:7a:b1:91:78:ff:cb:13:4e:29:
24:d5:0b:25:04:62:70:71:5c:a0:f5:73:4e:ac:c5:
c8:e2:e2:3c:a4:8c:6f:a7:56:cc:72:d3:f1:4c:99:
6a:00:c9:06:97:16:15:1a:05:d9:da:1d:3c:2c:30:
f2:df:5e:bf:14:f1:ab:a5:7f:18:c7:02:19:8f:a9:
1f:d1:aa:a7:5e:f0:bd:45:42:f8:bc:ab:2f:fc:c2:
db:7d:5e:ce:4b:47:83:4e:9a:6d:ac:86:15:96:5b:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:3A:DF:55:32:3A:1A:F4:A8:76:BA:47:EE:68:98:55:20:42:43
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:18:df:b7:f7:7b:3c:31:4e:fa:60:b4:b0:30:70:a6:80:
b2:e0:be:e3:c2:0c:95:33:e1:d5:7b:33:74:14:b8:e4:b0:f9:
8c:7e:b3:e7:3b:04:dd:af:0c:5c:88:8c:bb:f0:f0:2d:b7:5f:
4a:cb:ba:9f:6e:d7:1e:42:77:d6:92:24:33:80:71:92:89:44:
f3:e4:79:94:88:75:b2:f2:3d:81:6f:d1:22:77:1f:17:f4:43:
2a:f4:a5:94:79:07:5d:ea:bd:16:58:09:29:ed:64:42:20:53:
73:b2:54:66:45:db:ee:c2:7d:0e:91:ff:47:8c:57:28:6a:a6:
3f:1f:68:57:da:59:34:b3:ce:da:70:03:5e:40:6d:ec:a5:e2:
44:74:b6:5a:ca:ed:4c:92:7f:b5:08:fb:90:0a:f8:02:a6:34:
82:7a:31:24:eb:37:a7:ed:e1:d6:c6:c6:9d:f7:13:fb:8b:04:
e6:62:50:2a:9c:8a:e9:5b:e1:70:ae:26:a1:c1:8e:27:3b:2e:
9f:75:b7:3b:32:97:de:11:ae:39:14:8c:ac:e7:a7:db:39:67:
fa:a2:8b:a1:fe:fe:28:01:42:8e:03:a3:c3:7a:4e:82:89:4e:
48:fa:b5:c3:b1:d9:23:ad:f2:4f:a5:78:4d:d3:bd:20:0e:11:
b4:77:f4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFCAl0uhOKUXO/N9klLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGIwZTEzY2YyN2FmZjY2YmU3MzBiZWNlOThlMDRiMDBm
ZGZiOWUwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
EygwZGJlM2FkZjU1MzIzYTFhZjRhODc2YmE0N2VlNjg5ODU1MjA0MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SjVJOUBjDg9tTy99N19+uQVtu1q
xO++W6LlkEz/zjsJ1a+gj5XUIhX+cCp3EmsI69aYWHSxVcFQAwvGaEVLxsDtRa9I
UvjkLPKsDVQUIvyG/fMETFGKLcxM/+kkCYwvJfLfWj+3f/h2Y9F4SbNcpRiTSWzI
r3d2c5FZbWqGcQfu67D29NvBhcudNnNlFVIjEzzebK1OnEHuebt6sZF4/8sTTikk
1QslBGJwcVyg9XNOrMXI4uI8pIxvp1bMctPxTJlqAMkGlxYVGgXZ2h08LDDy316/
FPGrpX8YxwIZj6kf0aqnXvC9RUL4vKsv/MLbfV7OS0eDTpptrIYVlls4NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2+Ot9VMjoa9Kh2ukfuaJhVIEJDMB8GA1UdIwQY
MBaAFIZLDhPPJ6/2a+cwvs6Y4EsA/fueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYt
ZmM0NGE4YWNlMzcwLzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zMDI4NjMtNTY4OS00M2ZjLTg3MmYtZmM0NGE4YWNlMzcw
LzEvaGtzT0U4OG5yX1pyNXpDLXpwamdTd0Q5LTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGMY37f3
ezwxTvpgtLAwcKaAsuC+48IMlTPh1XszdBS45LD5jH6z5zsE3a8MXIiMu/DwLbdf
Ssu6n27XHkJ31pIkM4BxkolE8+R5lIh1svI9gW/RIncfF/RDKvSllHkHXeq9FlgJ
Ke1kQiBTc7JUZkXb7sJ9DpH/R4xXKGqmPx9oV9pZNLPO2nADXkBt7KXiRHS2Wsrt
TJJ/tQj7kAr4AqY0gnoxJOs3p+3h1sbGnfcT+4sE5mJQKpyK6VvhcK4mocGOJzsu
n3W3OzKX3hGuORSMrOen2zln+qKLof7+KAFCjgOjw3pOgolOSPq1w7HZI63yT6V4
TdO9IA4RtHf0ug==
-----END CERTIFICATE-----
Generated at Thu May 1 10:40:36 2025 by rpki-client