Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: /1GoEqodGbBVKmdU25tVUe7JukufjEo4+oaeNXmghWI=
Subject key identifier: F5:59:23:9A:8B:08:67:96:AB:E9:92:26:7B:A2:03:39:B0:D0:02:CE
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 0194BCE07ADEA0FA5850F075793E47A6B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: hXuqWLg1C3KBsez24xXVc+derDrfqrn/1DgQGsep8F0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7a:de:a0:fa:58:50:f0:75:79:3e:47:a6:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=f559239a8b086796abe992267ba20339b0d002ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:b4:d0:32:35:67:da:e1:7f:63:12:bc:f2:
3e:af:7f:cc:fd:e8:60:5d:97:52:1b:c5:ad:87:58:
cf:23:0a:80:e8:93:f0:19:f5:9a:6a:e0:f7:69:99:
4d:13:ed:d5:b9:0b:36:63:39:ac:03:a0:7b:f4:c1:
40:35:75:5e:e6:8f:ff:00:80:40:da:b4:c3:2c:29:
21:42:62:d6:1c:4b:b2:78:e8:20:51:09:6d:53:dd:
37:e1:e8:73:74:48:e3:40:37:ba:82:da:a5:84:53:
2d:80:6e:49:27:cc:15:10:93:4c:01:11:e2:62:74:
2c:53:7a:e4:93:84:cd:d7:88:1a:61:2e:f7:f9:43:
57:ce:eb:ed:a9:df:19:81:be:9c:64:7f:33:bb:16:
71:0f:2e:15:24:99:57:94:4b:9a:d8:86:84:88:16:
3c:fc:8d:11:39:11:f5:85:17:f6:2d:ea:fd:42:22:
bd:e5:00:37:a8:5b:45:c1:ba:70:3a:0d:9e:5b:85:
39:41:51:d3:6c:ea:43:87:76:41:cb:95:48:1b:2e:
94:6b:65:ec:07:7c:97:10:7d:2d:6b:8e:ac:d7:1d:
07:a7:82:4d:22:63:c5:3f:77:94:cb:54:64:65:5c:
7b:63:a5:e1:de:77:c5:99:66:81:9c:2a:c9:de:f9:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:23:9A:8B:08:67:96:AB:E9:92:26:7B:A2:03:39:B0:D0:02:CE
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:ed:15:4d:70:d7:fd:7d:f5:c3:4c:82:83:b6:91:25:57:
96:38:3b:7d:dc:6b:ac:8a:4a:06:48:29:18:0b:0d:e6:3f:da:
24:b3:fa:42:b6:9a:d7:82:15:21:9d:81:94:1b:50:5b:9f:9d:
dd:43:b9:fe:a5:8b:66:f4:af:c8:df:73:3c:f9:9f:15:96:93:
c8:bf:a7:f1:19:09:78:50:29:a6:16:38:4f:9d:c8:21:ac:bd:
b6:b0:f2:ac:02:1a:18:0a:bb:97:1c:ba:17:da:b1:8d:19:28:
73:5c:5c:c6:5d:fb:bc:ad:35:65:82:c5:5c:79:32:c5:f7:b5:
90:3b:21:26:71:ad:93:b2:ff:c4:78:2c:d0:e9:07:28:b4:7f:
ec:68:c9:8e:41:e3:18:a4:d5:df:bd:68:fb:d1:53:5e:51:5b:
bb:32:3d:32:32:7a:ce:c6:cb:e3:f9:50:74:e4:b2:db:d0:f9:
2b:b4:ab:84:35:38:82:70:2f:e1:6f:4a:56:a8:c6:f0:7b:fd:
ac:c5:0b:4e:6d:96:7f:c1:00:8e:5d:44:d2:db:31:d4:02:62:
7a:1d:1a:21:36:5c:29:6d:23:39:d0:b1:12:d8:ce:9e:49:16:
dc:2c:cb:bb:39:cd:c2:30:65:b9:3d:3f:33:fd:e1:48:78:ac:
e4:92:df:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HreoPpYUPB1eT5HprlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTA2YmZhMDIzZjE3Y2Y2ZDY3ZWFjOWZkZDI4NjhhNzJm
NzY2ODAwHhcNMjUwMTMxMTUwMDE1WhcNMjUwMjAxMTUwMDE1WjAzMTEwLwYDVQQD
EyhmNTU5MjM5YThiMDg2Nzk2YWJlOTkyMjY3YmEyMDMzOWIwZDAwMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMu00DI1Z9rhf2MSvPI+r3/M/ehg
XZdSG8Wth1jPIwqA6JPwGfWaauD3aZlNE+3VuQs2YzmsA6B79MFANXVe5o//AIBA
2rTDLCkhQmLWHEuyeOggUQltU9034ehzdEjjQDe6gtqlhFMtgG5JJ8wVEJNMARHi
YnQsU3rkk4TN14gaYS73+UNXzuvtqd8Zgb6cZH8zuxZxDy4VJJlXlEua2IaEiBY8
/I0RORH1hRf2Ler9QiK95QA3qFtFwbpwOg2eW4U5QVHTbOpDh3ZBy5VIGy6Ua2Xs
B3yXEH0ta46s1x0Hp4JNImPFP3eUy1RkZVx7Y6Xh3nfFmWaBnCrJ3vm2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVZI5qLCGeWq+mSJnuiAzmw0ALOMB8GA1UdIwQY
MBaAFIQQa/oCPxfPbWfqyf3Shopy92aAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYt
YjYyNmQ1NzQ2ZDEzLzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83ZWIyOTMtOGU3Ni00NzBmLTg1NWYtYjYyNmQ1NzQ2ZDEz
LzEvaEJCci1nSV9GODl0Wi1ySl9kS0dpbkwzWm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPTtFU1w
1/199cNMgoO2kSVXljg7fdxrrIpKBkgpGAsN5j/aJLP6Qraa14IVIZ2BlBtQW5+d
3UO5/qWLZvSvyN9zPPmfFZaTyL+n8RkJeFApphY4T53IIay9trDyrAIaGAq7lxy6
F9qxjRkoc1xcxl37vK01ZYLFXHkyxfe1kDshJnGtk7L/xHgs0OkHKLR/7GjJjkHj
GKTV371o+9FTXlFbuzI9MjJ6zsbL4/lQdOSy29D5K7SrhDU4gnAv4W9KVqjG8Hv9
rMULTm2Wf8EAjl1E0tsx1AJieh0aITZcKW0jOdCxEtjOnkkW3CzLuznNwjBluT0/
M/3hSHis5JLfFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client