Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: /aHtedgDXf+fo3a54g46X/bTljfhikpXkg83jqfCHYM=
Subject key identifier: 9E:3C:0C:5A:A1:F9:92:8D:24:8C:9F:70:8B:91:CC:30:FE:33:27:BA
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 0194BBCDFA92EB223287DF1C88C8CB23EE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 09FB
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: 4Jzr2RXfajH/rLVMYuSao3IKa1x4JhsWPfx3b4xnN18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fa:92:eb:22:32:87:df:1c:88:c8:cb:23:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=9e3c0c5aa1f9928d248c9f708b91cc30fe3327ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:57:f7:2b:a8:36:df:09:6b:97:4d:c5:8d:
e0:a7:df:29:31:74:02:26:0d:44:6e:31:de:06:3a:
8a:39:ee:4b:c4:e3:56:ed:0d:53:f3:f7:12:6c:32:
e4:d7:1e:48:52:1f:69:ed:d4:06:4d:90:25:30:0e:
e9:ea:e9:61:07:aa:d7:8d:60:22:dc:7f:ce:38:17:
81:c1:1e:3b:d9:da:5c:97:40:e3:ed:11:fe:7a:78:
2b:87:83:df:6d:2e:01:0e:80:bd:dc:46:51:69:ad:
0c:78:38:c9:04:fe:f3:2c:da:8a:c9:b0:2c:0e:73:
83:4e:51:2b:2c:54:2f:08:bb:4c:cc:eb:a5:b5:13:
90:59:e0:e9:c5:cf:5e:ed:59:12:2e:22:ca:ac:f8:
46:d5:4c:09:b1:82:40:43:b2:0c:4d:01:b8:46:26:
7c:84:8c:fd:ec:31:bf:61:2c:9b:bd:1c:c6:72:99:
e6:ec:60:32:75:40:5b:4a:8f:a5:c9:f8:74:09:05:
9a:00:7c:72:7b:de:b0:b6:45:fb:f8:60:b8:17:d2:
8f:bd:26:53:55:dd:56:16:8a:3a:90:09:fa:45:1f:
d4:50:fb:52:59:f6:48:df:2f:b3:06:8f:4f:22:56:
be:22:92:88:bb:78:49:2c:4f:64:6b:07:22:62:3e:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:0C:5A:A1:F9:92:8D:24:8C:9F:70:8B:91:CC:30:FE:33:27:BA
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:70:55:4f:e7:f6:5c:68:64:b6:24:78:93:2a:de:26:1e:9b:
a1:e6:61:a3:72:35:b7:94:ee:f0:40:8b:16:6a:19:7a:c4:63:
06:57:3f:a9:60:5c:6b:be:13:13:dc:3d:49:8c:31:00:57:8a:
c6:cc:ed:8d:19:85:4b:56:78:04:8f:1f:5d:39:ef:84:18:5a:
bb:02:37:ef:89:d3:89:f9:73:fe:cd:47:5f:f0:33:44:90:20:
ed:be:0a:29:82:00:6a:13:4d:83:18:f5:c5:c7:eb:d7:cd:5f:
fc:f3:fb:5f:f6:6b:5d:6a:e0:5a:c5:33:06:3c:10:a1:b0:a6:
f2:5d:85:ed:02:cd:a7:75:f7:8d:93:49:dc:7a:0f:e2:dc:64:
41:ac:41:8f:78:7e:86:d1:46:a4:59:05:34:b1:05:c9:fd:e0:
90:02:c6:62:ca:b6:cd:9c:33:2f:9c:e0:5f:22:5d:13:d6:c6:
8e:f8:b1:5e:69:8a:93:44:b9:00:d4:16:24:73:73:f6:c7:30:
8d:2a:52:01:24:bd:3a:2a:fa:16:52:2c:ab:d2:49:f1:b2:93:
dd:23:ae:12:0c:1b:0b:a7:75:9e:01:f3:d5:80:e5:6f:d8:f5:
7c:94:77:1c:7d:4a:80:43:97:45:ed:9a:2a:16:af:42:67:15:
95:fe:b6:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfqS6yIyh98ciMjLI+6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj
MGFlN2YwHhcNMjUwMTMxMTAwMDI1WhcNMjUwMjAxMTAwMDI1WjAzMTEwLwYDVQQD
Eyg5ZTNjMGM1YWExZjk5MjhkMjQ4YzlmNzA4YjkxY2MzMGZlMzMyN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtFX9yuoNt8Ja5dNxY3gp98pMXQC
Jg1EbjHeBjqKOe5LxONW7Q1T8/cSbDLk1x5IUh9p7dQGTZAlMA7p6ulhB6rXjWAi
3H/OOBeBwR472dpcl0Dj7RH+engrh4PfbS4BDoC93EZRaa0MeDjJBP7zLNqKybAs
DnODTlErLFQvCLtMzOultROQWeDpxc9e7VkSLiLKrPhG1UwJsYJAQ7IMTQG4RiZ8
hIz97DG/YSybvRzGcpnm7GAydUBbSo+lyfh0CQWaAHxye96wtkX7+GC4F9KPvSZT
Vd1WFoo6kAn6RR/UUPtSWfZI3y+zBo9PIla+IpKIu3hJLE9kawciYj6CGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ48DFqh+ZKNJIyfcIuRzDD+Mye6MB8GA1UdIwQY
MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt
OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx
LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHBVT+f2
XGhktiR4kyreJh6boeZho3I1t5Tu8ECLFmoZesRjBlc/qWBca74TE9w9SYwxAFeK
xsztjRmFS1Z4BI8fXTnvhBhauwI374nTiflz/s1HX/AzRJAg7b4KKYIAahNNgxj1
xcfr181f/PP7X/ZrXWrgWsUzBjwQobCm8l2F7QLNp3X3jZNJ3HoP4txkQaxBj3h+
htFGpFkFNLEFyf3gkALGYsq2zZwzL5zgXyJdE9bGjvixXmmKk0S5ANQWJHNz9scw
jSpSASS9Oir6FlIsq9JJ8bKT3SOuEgwbC6d1ngHz1YDlb9j1fJR3HH1KgEOXRe2a
KhavQmcVlf62mw==
-----END CERTIFICATE-----
Generated at Thu May 1 06:02:40 2025 by rpki-client