Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: SwAWbRvbfsm1VOECW+6rhJqrkLlVdFXgOhxw/ncnIo4=
Subject key identifier: A9:52:3E:65:16:6C:5B:20:7C:4F:2D:86:62:4D:42:A1:A9:79:4F:D8
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 0194BC0503298BC4C6E11ACED7B86E5EA3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 0D6D
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: vrJbEgMTG6XhJoaZTEv0tdpbOUpPznPVTtvRuZ5I2W4=)
2: SAqPRmB-G6msTnaXyr7m6jyG5Ko.roa (hash: 2YxDfMO4o3RvNMQXIEtYRv7ty5CdsK9saG6EToUsNdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:03:29:8b:c4:c6:e1:1a:ce:d7:b8:6e:5e:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=a9523e65166c5b207c4f2d86624d42a1a9794fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:e1:52:4c:04:39:9a:8f:49:ba:79:83:b7:
bc:9e:c4:49:26:48:8d:7f:3f:13:cc:f8:72:f4:c3:
41:d6:55:65:c7:88:b1:fa:67:77:1c:1d:9d:0f:86:
c8:11:99:e3:82:0f:23:fe:e7:c8:3e:ca:2f:9f:ef:
62:e2:e3:d4:b3:67:14:69:40:20:92:52:98:2f:e0:
c6:73:c6:de:8b:fc:e4:ef:a7:82:60:74:cb:22:9b:
b6:5d:0e:ea:ee:d4:39:29:e3:66:fa:2e:22:8a:36:
90:62:f4:b0:b6:95:fa:25:cd:d6:47:b0:1c:a0:a7:
11:34:13:b6:51:b7:35:71:b0:0c:ff:fe:f2:75:8a:
25:80:dc:1a:4e:15:b7:4d:af:03:41:8f:07:85:f5:
a1:71:1f:62:be:af:fa:d9:a3:19:cd:35:d2:5b:1f:
7f:13:31:05:1c:58:5d:4e:61:53:25:6d:29:e1:31:
a3:9b:23:ee:ae:81:53:83:54:0d:ea:97:d4:2d:18:
fa:07:75:1e:5a:7e:83:dd:d1:46:ad:d6:c7:cc:47:
a9:0a:80:e6:5c:c5:ab:e7:10:26:0c:7b:82:82:80:
b2:90:62:13:83:81:96:b3:fa:b9:89:5e:2a:67:83:
1c:77:5b:df:d2:b8:1c:f4:fb:0b:a8:48:51:4a:5b:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:3E:65:16:6C:5B:20:7C:4F:2D:86:62:4D:42:A1:A9:79:4F:D8
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:09:f4:d3:8a:03:03:29:a1:8f:62:69:c7:8a:87:56:5a:
87:3a:5d:0f:d5:fd:47:d7:48:43:e9:03:a8:b3:fd:a9:5a:fe:
8f:61:a7:d4:c6:4b:c8:50:61:6f:5a:be:f8:11:51:17:2a:8e:
ce:8b:d2:17:35:90:a4:e7:86:9c:58:aa:e6:2b:b2:ce:63:dd:
7e:50:16:8a:59:3a:b5:74:2a:8e:9b:6c:58:38:e1:ca:c5:04:
21:9c:bf:e4:43:f7:dc:f9:f6:ec:b2:56:62:a5:2f:1a:0f:78:
19:b6:f8:20:3b:bf:69:ea:38:83:0c:ab:77:1f:24:15:dc:ec:
5c:61:05:0f:2a:d5:fe:3d:c4:d7:12:de:5c:43:8c:1c:bf:02:
04:2e:25:d2:94:f2:96:c7:36:a1:0f:65:0e:76:81:83:79:56:
68:d1:08:a4:7a:bf:3f:c7:29:ca:b7:16:e6:fd:84:81:a9:7e:
dd:3e:c1:fe:66:12:fa:dc:c8:95:07:72:57:33:02:c7:8c:a8:
94:42:e0:94:7c:a6:e1:26:90:44:d6:42:c5:d2:3f:4e:78:ec:
39:66:fd:9a:f4:94:e0:ed:82:f0:01:89:da:37:67:c4:c1:3c:
a4:a5:5c:b2:36:27:e2:2b:c8:d1:a7:21:70:2c:30:9a:fe:4d:
3d:49:d3:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQMpi8TG4RrO17huXqO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjUwMTMxMTEwMDMyWhcNMjUwMjAxMTEwMDMyWjAzMTEwLwYDVQQD
EyhhOTUyM2U2NTE2NmM1YjIwN2M0ZjJkODY2MjRkNDJhMWE5Nzk0ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbhUkwEOZqPSbp5g7e8nsRJJkiN
fz8TzPhy9MNB1lVlx4ix+md3HB2dD4bIEZnjgg8j/ufIPsovn+9i4uPUs2cUaUAg
klKYL+DGc8bei/zk76eCYHTLIpu2XQ7q7tQ5KeNm+i4iijaQYvSwtpX6Jc3WR7Ac
oKcRNBO2Ubc1cbAM//7ydYolgNwaThW3Ta8DQY8HhfWhcR9ivq/62aMZzTXSWx9/
EzEFHFhdTmFTJW0p4TGjmyPuroFTg1QN6pfULRj6B3UeWn6D3dFGrdbHzEepCoDm
XMWr5xAmDHuCgoCykGITg4GWs/q5iV4qZ4Mcd1vf0rgc9PsLqEhRSlsmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlSPmUWbFsgfE8thmJNQqGpeU/YMB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+EJ9NOK
AwMpoY9iaceKh1ZahzpdD9X9R9dIQ+kDqLP9qVr+j2Gn1MZLyFBhb1q++BFRFyqO
zovSFzWQpOeGnFiq5iuyzmPdflAWilk6tXQqjptsWDjhysUEIZy/5EP33Pn27LJW
YqUvGg94Gbb4IDu/aeo4gwyrdx8kFdzsXGEFDyrV/j3E1xLeXEOMHL8CBC4l0pTy
lsc2oQ9lDnaBg3lWaNEIpHq/P8cpyrcW5v2Egal+3T7B/mYS+tzIlQdyVzMCx4yo
lELglHym4SaQRNZCxdI/TnjsOWb9mvSU4O2C8AGJ2jdnxME8pKVcsjYn4ivI0ach
cCwwmv5NPUnTjA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:47 2025 by rpki-client