Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: vJZj1jbmMaduNEXgFCj2EXfYIq1Hi8B/nZGNQNVtkiA=
Subject key identifier: 8B:0E:9C:7B:41:00:67:08:BA:44:35:DE:B5:22:DF:21:AB:30:7F:44
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 0194BC04A2C2B99514F060294A1C723AD0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: I+bim80RHVlHDC4yXascaz6CeCgg80X1/2w/152CQbA=)
2: nfcB4W3-frcdsttLFxfqKvUAYPA.roa (hash: LSLZu1kedUT6p6v50vQ31LG0ikk6bjLybjbis0FT+ww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:c2:b9:95:14:f0:60:29:4a:1c:72:3a:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=8b0e9c7b41006708ba4435deb522df21ab307f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:4b:ce:77:65:a6:54:98:13:43:71:6f:17:
6d:af:d0:f4:6d:66:60:fc:79:df:95:5f:2b:4a:70:
6f:d3:f4:8a:1f:3d:8e:d7:e6:36:b7:ef:a3:9d:60:
1d:51:c0:7e:6b:ad:17:de:99:41:05:55:2b:f1:91:
e0:e5:81:c4:ed:c9:c8:ac:22:4f:38:9e:9c:12:0a:
cb:8a:30:55:ca:99:23:60:92:90:f1:50:8a:44:e5:
75:91:26:26:cb:2b:39:7d:49:7d:f1:af:83:2d:f2:
96:58:c7:26:3a:95:b9:2e:6e:29:16:d3:55:72:9a:
b5:80:e9:3a:6f:0a:1b:80:a6:22:3f:06:36:1c:39:
b7:c1:2f:fa:47:f2:50:11:bd:43:f1:5c:f7:f5:17:
84:75:f7:b1:34:cf:6e:5f:0b:ab:a5:dc:94:5b:86:
24:69:fa:24:11:5f:7e:77:79:82:f9:05:da:bd:4e:
ef:2c:c9:f1:90:7b:1d:ba:92:b2:93:ac:44:47:54:
05:5b:33:19:1d:e5:99:e0:4a:cb:cb:0b:04:a7:24:
7f:61:35:ae:e0:97:6f:fd:71:05:82:c7:f3:84:7c:
bc:d6:b7:7e:0f:56:ac:f8:2e:03:a6:67:64:f2:59:
60:f9:9c:20:41:70:8b:cd:98:ca:cb:a8:57:3d:b3:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:9C:7B:41:00:67:08:BA:44:35:DE:B5:22:DF:21:AB:30:7F:44
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:51:bc:44:76:df:9c:25:95:c8:20:9a:09:9b:3f:ac:d1:
3c:17:a8:2c:9c:f8:b5:ce:2a:6c:b2:78:e5:2c:f6:0d:63:54:
6e:b7:b0:e2:50:43:d3:69:2b:ad:c6:df:98:01:36:64:aa:f8:
50:6f:c0:a2:8c:db:80:48:e2:30:b7:27:29:20:a2:ec:d1:2e:
36:17:54:29:aa:ad:36:a3:cf:82:27:55:20:b2:e6:b8:ba:d2:
e6:ee:e6:f1:48:f6:54:ba:68:4c:bd:37:bd:55:e9:21:68:53:
9a:b4:1f:f5:89:9d:9a:e0:91:f3:72:dd:cb:0a:0c:74:39:59:
2b:f7:2b:02:08:1d:3b:72:8d:34:dc:45:39:7d:96:b5:63:8e:
cf:56:6e:ba:9c:07:4c:6e:ab:c4:9d:d6:99:35:ef:86:52:ed:
42:6c:87:61:9f:73:ce:08:18:94:32:bd:a4:6e:0b:02:42:38:
a0:8c:ae:1f:0b:99:fd:52:3e:13:38:0c:e2:f7:18:e2:43:9d:
c7:78:22:4f:e9:a3:b3:6c:b5:97:63:56:cf:0b:48:f3:82:91:
37:e3:ac:26:6f:e2:4a:72:a0:6d:ea:a2:82:a7:d7:01:0a:9e:
18:8d:99:ba:f8:2b:96:6f:af:44:bf:19:6b:ac:eb:c2:70:43:
ba:62:fe:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKLCuZUU8GApShxyOtChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTUyZTg4MzczNmY3OWNiZDljNTY0NzA0YmYzYzM2NjIx
YjhlY2EwHhcNMjUwMTMxMTEwMDA3WhcNMjUwMjAxMTEwMDA3WjAzMTEwLwYDVQQD
Eyg4YjBlOWM3YjQxMDA2NzA4YmE0NDM1ZGViNTIyZGYyMWFiMzA3ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA129LzndlplSYE0Nxbxdtr9D0bWZg
/HnflV8rSnBv0/SKHz2O1+Y2t++jnWAdUcB+a60X3plBBVUr8ZHg5YHE7cnIrCJP
OJ6cEgrLijBVypkjYJKQ8VCKROV1kSYmyys5fUl98a+DLfKWWMcmOpW5Lm4pFtNV
cpq1gOk6bwobgKYiPwY2HDm3wS/6R/JQEb1D8Vz39ReEdfexNM9uXwurpdyUW4Yk
afokEV9+d3mC+QXavU7vLMnxkHsdupKyk6xER1QFWzMZHeWZ4ErLywsEpyR/YTWu
4Jdv/XEFgsfzhHy81rd+D1as+C4Dpmdk8llg+ZwgQXCLzZjKy6hXPbPs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsOnHtBAGcIukQ13rUi3yGrMH9EMB8GA1UdIwQY
MBaAFB6VLog3NvecvZxWRwS/PDZiG47KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYt
MzU2MDM1NjU3MWE3LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iMTQwYWUtYzA0Ny00ZmY2LTg2NGYtMzU2MDM1NjU3MWE3
LzEvSHBVdWlEYzI5NXk5bkZaSEJMODhObUlianNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxRRvER2
35wllcggmgmbP6zRPBeoLJz4tc4qbLJ45Sz2DWNUbrew4lBD02krrcbfmAE2ZKr4
UG/AoozbgEjiMLcnKSCi7NEuNhdUKaqtNqPPgidVILLmuLrS5u7m8Uj2VLpoTL03
vVXpIWhTmrQf9YmdmuCR83LdywoMdDlZK/crAggdO3KNNNxFOX2WtWOOz1ZuupwH
TG6rxJ3WmTXvhlLtQmyHYZ9zzggYlDK9pG4LAkI4oIyuHwuZ/VI+EzgM4vcY4kOd
x3giT+mjs2y1l2NWzwtI84KRN+OsJm/iSnKgbeqigqfXAQqeGI2Zuvgrlm+vRL8Z
a6zrwnBDumL+GA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:24:50 2025 by rpki-client