Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: DlbvDApg76MGYJaqUyUAso1oAO/xAqjJygkrcBL7gb4=
Subject key identifier: CC:51:3D:E6:23:55:89:64:BD:FD:47:30:CD:35:17:B1:A7:D7:1A:58
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0194BCE0AF4179FFDACA607EEF373D0E4F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: +fqOXkvPWemgV6QcLGA8o6RvrMG6bMSmfkwPaD0wvXk=)
2: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (hash: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:af:41:79:ff:da:ca:60:7e:ef:37:3d:0e:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=cc513de623558964bdfd4730cd3517b1a7d71a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:17:1a:31:57:91:bd:22:2c:43:38:7f:b5:
64:a1:b0:22:4a:e0:0d:10:0a:5a:ac:2d:4d:49:32:
0c:7e:bc:36:c9:7a:fb:c0:63:7d:e7:d7:dc:df:7c:
49:a0:07:7f:ca:fe:67:90:30:88:35:74:99:c7:b8:
99:7b:78:7b:33:80:a7:9f:e2:28:d8:b8:94:cc:08:
95:5c:75:f8:22:4d:fe:fb:83:13:cf:9f:86:60:de:
7b:f1:03:01:57:47:4e:75:21:62:70:2e:20:f9:f7:
90:48:f1:45:4b:57:db:c7:da:fd:5d:da:b8:55:05:
db:79:d3:67:20:7b:b1:07:9c:d3:e8:4e:e2:4d:22:
9c:08:cd:ef:d8:ea:8f:4a:da:be:64:e4:e4:ed:b1:
7a:75:40:91:7e:9c:7a:09:bc:8b:60:b3:51:22:4e:
28:56:79:cd:26:98:9a:73:41:e9:74:54:00:59:c2:
10:66:8c:f1:76:31:d0:89:51:34:16:2e:45:64:71:
44:70:02:4b:63:d0:b9:0b:11:cb:89:7c:29:04:74:
fc:1f:9d:12:38:65:26:19:ab:b5:30:ba:65:3a:dd:
ef:3d:96:e8:fe:10:98:af:ab:81:89:f8:fc:d9:6f:
3f:82:b8:a8:08:a4:42:db:bb:92:cb:00:29:9c:20:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:3D:E6:23:55:89:64:BD:FD:47:30:CD:35:17:B1:A7:D7:1A:58
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:3e:e7:a3:1b:ec:f2:57:da:4c:0a:8d:82:61:b0:c5:4a:
74:35:7f:73:90:4d:ec:49:e2:43:d3:f6:dd:74:b4:3d:64:6d:
33:f9:56:81:fd:06:02:33:b9:00:c6:2c:b6:b0:19:9b:6d:b1:
cd:ce:9f:2a:72:63:ea:bc:91:d8:55:9f:d4:e6:ed:83:50:1e:
b3:4f:b7:3d:a0:f9:a2:eb:39:40:00:c7:90:43:cb:3a:ca:1f:
df:40:71:2e:00:e3:bf:cc:5e:70:d7:9a:d7:95:71:d5:42:47:
17:f5:3e:27:75:63:dd:76:f8:17:f5:96:97:b1:63:e8:94:6c:
32:ec:27:8e:a9:f5:62:33:fb:8a:3f:a3:03:de:a0:ec:a8:13:
eb:2f:0d:0d:1a:3f:94:0d:9e:12:d2:70:df:9a:18:53:1b:18:
47:50:e6:36:69:fd:00:b8:3f:a3:70:9a:d0:12:90:6e:32:63:
d1:88:37:1d:95:9a:85:cf:d7:1e:dc:af:aa:0c:4f:f2:92:a2:
07:72:95:65:8c:0b:10:17:51:0e:65:c3:5a:08:50:1d:42:e5:
53:e7:36:fe:be:07:89:c0:44:ac:b3:66:68:42:0a:ea:14:6a:
3b:d1:42:78:b6:7c:80:c8:02:a7:b0:ab:60:60:fd:28:77:8f:
ed:07:93:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84K9Bef/aymB+7zc9Dk9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy
ZThjNDcwHhcNMjUwMTMxMTUwMDI4WhcNMjUwMjAxMTUwMDI4WjAzMTEwLwYDVQQD
EyhjYzUxM2RlNjIzNTU4OTY0YmRmZDQ3MzBjZDM1MTdiMWE3ZDcxYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRIXGjFXkb0iLEM4f7VkobAiSuAN
EAparC1NSTIMfrw2yXr7wGN959fc33xJoAd/yv5nkDCINXSZx7iZe3h7M4Cnn+Io
2LiUzAiVXHX4Ik3++4MTz5+GYN578QMBV0dOdSFicC4g+feQSPFFS1fbx9r9Xdq4
VQXbedNnIHuxB5zT6E7iTSKcCM3v2OqPStq+ZOTk7bF6dUCRfpx6CbyLYLNRIk4o
VnnNJpiac0HpdFQAWcIQZozxdjHQiVE0Fi5FZHFEcAJLY9C5CxHLiXwpBHT8H50S
OGUmGau1MLplOt3vPZbo/hCYr6uBifj82W8/grioCKRC27uSywApnCAwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxRPeYjVYlkvf1HMM01F7Gn1xpYMB8GA1UdIwQY
MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct
MWJlNjljYTM5M2JhLzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh
LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKY+56Mb
7PJX2kwKjYJhsMVKdDV/c5BN7EniQ9P23XS0PWRtM/lWgf0GAjO5AMYstrAZm22x
zc6fKnJj6ryR2FWf1Obtg1Aes0+3PaD5ous5QADHkEPLOsof30BxLgDjv8xecNea
15Vx1UJHF/U+J3Vj3Xb4F/WWl7Fj6JRsMuwnjqn1YjP7ij+jA96g7KgT6y8NDRo/
lA2eEtJw35oYUxsYR1DmNmn9ALg/o3Ca0BKQbjJj0Yg3HZWahc/XHtyvqgxP8pKi
B3KVZYwLEBdRDmXDWghQHULlU+c2/r4HicBErLNmaEIK6hRqO9FCeLZ8gMgCp7Cr
YGD9KHeP7QeTDw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client