Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: fkB60EsTnfzZ0OWMSxqzwrGZZttbYkGfm0Ao8Qkos+o=
Subject key identifier: 54:B5:B1:0C:80:99:B3:FC:55:79:04:CC:E4:15:19:4B:6B:DD:F3:1F
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 0194BC3C1B3F6DE2CB5C749F3134D0E41A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 03BD
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: 1c7Glc0PgwYmLEJLTPnD1RIlmVjTvZqN1Xhr4Lz9NlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:3f:6d:e2:cb:5c:74:9f:31:34:d0:e4:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=54b5b10c8099b3fc557904cce415194b6bddf31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:68:44:a7:f7:ed:98:fe:12:70:b5:2f:80:
cb:82:53:95:c8:9e:8f:0d:35:16:7f:c8:ac:d2:02:
58:59:4b:4e:18:c8:43:af:df:00:7a:22:7e:09:32:
a2:91:14:4e:a9:ef:c0:8e:19:98:4a:b3:85:09:ee:
10:f7:31:ed:81:82:aa:db:59:94:b3:b0:81:fb:b7:
ae:ae:55:89:dc:8b:1a:57:c7:df:c6:e9:be:9d:e3:
ed:77:c5:db:83:4a:c9:72:2e:55:dd:98:1f:fe:8e:
ca:cd:32:32:92:4d:50:21:59:f4:93:12:43:ac:92:
85:a2:aa:b2:ac:2e:24:66:3f:e9:63:20:91:9f:55:
04:cc:f8:e7:65:5a:34:25:26:0e:e1:b4:0e:44:70:
c7:bb:ba:e4:e6:ec:be:89:b4:9e:52:5d:ea:1c:c2:
e3:13:02:27:f4:32:85:fe:19:22:af:ac:3c:00:0b:
85:ac:b1:d4:d1:98:75:7b:06:e8:de:04:83:f4:30:
31:a9:5b:51:c4:35:56:d4:98:2d:ba:77:50:d0:e3:
cc:cf:79:21:f8:b8:03:1f:34:bc:b1:ea:89:2e:a4:
cc:5c:63:37:5f:10:eb:cc:61:c9:30:ce:62:18:14:
97:c0:61:00:dd:52:e0:92:51:17:cf:4f:31:5e:e6:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:B1:0C:80:99:B3:FC:55:79:04:CC:E4:15:19:4B:6B:DD:F3:1F
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:91:73:8f:1d:10:e2:08:97:d6:11:eb:9d:a5:8f:06:56:
13:08:b3:98:fe:d8:9b:06:48:a4:d9:a8:8b:29:02:33:f0:ec:
8f:d9:f0:6f:e3:7e:d1:2a:a5:87:de:0f:12:a0:de:1c:e6:24:
d5:92:7a:63:1f:74:00:1a:40:32:57:6e:56:00:30:fd:1a:ff:
8c:02:5e:44:9b:26:09:b8:1c:49:10:af:42:1d:ea:95:d7:7f:
8d:c0:97:83:a0:ce:16:96:8e:e6:35:51:87:4a:94:90:32:f8:
b8:c8:58:be:da:28:b3:9b:35:5c:73:94:78:a9:d5:6c:b9:cf:
62:56:95:da:55:75:0c:f1:be:5e:fc:ab:55:8b:f4:a5:a6:45:
d7:df:9e:b9:f4:1c:ef:85:99:c0:0e:3a:fa:75:b4:b2:65:d6:
18:66:34:64:ee:d3:9e:2c:64:89:62:e1:40:f7:e2:89:31:b8:
0f:0f:e2:f8:7b:ee:f2:6a:90:f7:40:c4:19:a4:a7:11:ed:17:
f9:2d:51:16:30:08:43:a2:0e:21:28:14:36:63:32:c6:25:58:
44:99:e7:a8:26:ba:7a:5f:34:44:f6:2c:dc:94:3b:16:ba:9a:
4b:34:eb:7f:57:ce:e3:aa:d4:8f:e2:92:e6:a1:d6:45:4d:b9:
34:54:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBs/beLLXHSfMTTQ5BphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjUwMTMxMTIwMDQzWhcNMjUwMjAxMTIwMDQzWjAzMTEwLwYDVQQD
Eyg1NGI1YjEwYzgwOTliM2ZjNTU3OTA0Y2NlNDE1MTk0YjZiZGRmMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ5oRKf37Zj+EnC1L4DLglOVyJ6P
DTUWf8is0gJYWUtOGMhDr98AeiJ+CTKikRROqe/AjhmYSrOFCe4Q9zHtgYKq21mU
s7CB+7eurlWJ3IsaV8ffxum+nePtd8Xbg0rJci5V3Zgf/o7KzTIykk1QIVn0kxJD
rJKFoqqyrC4kZj/pYyCRn1UEzPjnZVo0JSYO4bQORHDHu7rk5uy+ibSeUl3qHMLj
EwIn9DKF/hkir6w8AAuFrLHU0Zh1ewbo3gSD9DAxqVtRxDVW1JgtundQ0OPMz3kh
+LgDHzS8seqJLqTMXGM3XxDrzGHJMM5iGBSXwGEA3VLgklEXz08xXuZNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS1sQyAmbP8VXkEzOQVGUtr3fMfMB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlaRc48d
EOIIl9YR652ljwZWEwizmP7YmwZIpNmoiykCM/Dsj9nwb+N+0Sqlh94PEqDeHOYk
1ZJ6Yx90ABpAMlduVgAw/Rr/jAJeRJsmCbgcSRCvQh3qldd/jcCXg6DOFpaO5jVR
h0qUkDL4uMhYvtoos5s1XHOUeKnVbLnPYlaV2lV1DPG+XvyrVYv0paZF19+eufQc
74WZwA46+nW0smXWGGY0ZO7TnixkiWLhQPfiiTG4Dw/i+Hvu8mqQ90DEGaSnEe0X
+S1RFjAIQ6IOISgUNmMyxiVYRJnnqCa6el80RPYs3JQ7FrqaSzTrf1fO46rUj+KS
5qHWRU25NFTioQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:22 2025 by rpki-client