Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: eigOkMmrBmltct5h63YrrFEFElhXJuzEBvXqj2Paa4c=
Subject key identifier: AF:6A:2F:11:DD:60:18:09:30:10:E8:53:B2:27:0E:1D:0E:F7:53:45
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 0194BBCDBE8E6DE012B98FA7F51CF3FC7280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 0508
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: 8zuV5v2EVmgbLwlqOMnBvjKyhWNSxlsg3Bbu26COj7g=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:8e:6d:e0:12:b9:8f:a7:f5:1c:f3:fc:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=af6a2f11dd6018093010e853b2270e1d0ef75345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:a2:5e:87:6b:67:8d:33:44:22:2a:76:8a:
e6:cc:04:38:a1:eb:c2:b1:61:7f:81:cb:3b:1b:c2:
0d:d6:75:aa:8a:23:75:b6:82:da:2c:3d:31:f7:1a:
92:6e:76:35:0d:61:a2:01:2d:54:de:a1:b0:b9:0d:
e6:de:d6:7f:27:2e:ee:0b:a1:90:de:d0:66:97:da:
b5:6c:90:fd:f3:98:5f:90:fd:51:bb:eb:a8:b8:b3:
0b:02:b5:c9:36:ef:f8:55:1b:7c:f4:41:d0:4b:90:
f3:29:10:30:d8:28:d6:44:fe:b3:9d:8f:0d:fa:76:
8c:b0:ba:e9:6b:e3:ec:63:6b:65:66:8e:68:64:54:
8d:90:62:57:40:17:76:46:67:66:67:3e:1c:70:2b:
4b:e8:5d:50:58:ed:85:bb:b9:d9:76:7c:9d:76:41:
80:7b:2a:bb:79:65:3d:9e:dd:a9:43:9b:b3:b8:d7:
68:a6:5a:2e:45:36:a0:63:f1:33:8f:b3:47:4b:fe:
79:65:34:1b:bb:b4:b0:28:aa:1f:af:bd:f6:03:d3:
e9:5d:a3:f2:5c:08:b3:fb:57:de:46:09:30:50:bd:
03:ba:29:6c:e6:04:2c:b7:7c:d0:8e:a0:b7:7e:ea:
66:ff:3d:14:e6:ea:7d:b6:56:ab:63:ca:b7:39:a6:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:2F:11:DD:60:18:09:30:10:E8:53:B2:27:0E:1D:0E:F7:53:45
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:64:a4:e7:78:53:29:68:28:8f:16:77:a6:58:65:e6:75:
53:84:fc:ea:8f:5d:2d:24:85:0b:28:8b:f8:56:77:a8:4d:ac:
16:17:23:47:42:94:20:1f:78:34:6f:71:70:18:b5:e1:fe:93:
2c:88:c3:93:6b:ea:97:98:b2:cc:b2:8a:02:05:d5:c7:82:5d:
32:dd:8d:91:04:66:5d:ff:6c:c5:c7:10:8c:65:23:5c:67:cb:
67:26:bd:de:d0:a2:96:14:65:d4:fc:af:85:c8:73:4c:20:44:
69:8d:9b:f4:26:b4:5f:ff:26:a1:e5:fe:4e:35:ba:e6:d0:66:
41:22:2a:2f:a4:fc:75:36:e2:80:ce:c5:1b:6a:45:a0:82:38:
eb:01:a0:65:98:09:f0:d3:8c:e2:e7:b7:80:af:06:b9:d4:99:
11:6b:a7:e2:a3:17:b1:da:c5:62:e2:85:e9:15:69:c6:56:85:
f3:dc:8c:a5:61:6e:8f:6b:b0:3d:99:5b:be:fa:b2:e3:af:15:
ef:85:26:fd:5c:3c:83:10:16:63:fd:5c:52:6e:0f:9e:40:37:
1c:cb:f4:1c:f0:e1:51:41:56:cd:9e:bc:cc:9b:50:1e:cc:2d:
e0:7c:62:f6:11:b1:2b:fb:bd:c7:3f:2c:7f:2f:70:32:d6:a1:
e4:f1:c0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb6ObeASuY+n9Rzz/HKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmQzNzU1YTM1MDFiOWNiMGQ1ZWJhYTQ5OWU1ZWExNDli
Y2YwOGIwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
EyhhZjZhMmYxMWRkNjAxODA5MzAxMGU4NTNiMjI3MGUxZDBlZjc1MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzuiXodrZ40zRCIqdormzAQ4oevC
sWF/gcs7G8IN1nWqiiN1toLaLD0x9xqSbnY1DWGiAS1U3qGwuQ3m3tZ/Jy7uC6GQ
3tBml9q1bJD985hfkP1Ru+uouLMLArXJNu/4VRt89EHQS5DzKRAw2CjWRP6znY8N
+naMsLrpa+PsY2tlZo5oZFSNkGJXQBd2RmdmZz4ccCtL6F1QWO2Fu7nZdnyddkGA
eyq7eWU9nt2pQ5uzuNdoplouRTagY/Ezj7NHS/55ZTQbu7SwKKofr732A9PpXaPy
XAiz+1feRgkwUL0Duils5gQst3zQjqC3fupm/z0U5up9tlarY8q3OabCoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9qLxHdYBgJMBDoU7InDh0O91NFMB8GA1UdIwQY
MBaAFBwtN1WjUBucsNXrqkmeXqFJvPCLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTkt
OWVjZTBiMjU2NThlLzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82N2M2MDUtMDEwZi00NTkyLWE5MTktOWVjZTBiMjU2NThl
LzEvSEMwM1ZhTlFHNXl3MWV1cVNaNWVvVW04OElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq5kpOd4
UyloKI8Wd6ZYZeZ1U4T86o9dLSSFCyiL+FZ3qE2sFhcjR0KUIB94NG9xcBi14f6T
LIjDk2vql5iyzLKKAgXVx4JdMt2NkQRmXf9sxccQjGUjXGfLZya93tCilhRl1Pyv
hchzTCBEaY2b9Ca0X/8moeX+TjW65tBmQSIqL6T8dTbigM7FG2pFoII46wGgZZgJ
8NOM4ue3gK8GudSZEWun4qMXsdrFYuKF6RVpxlaF89yMpWFuj2uwPZlbvvqy468V
74Um/Vw8gxAWY/1cUm4PnkA3HMv0HPDhUUFWzZ68zJtQHswt4Hxi9hGxK/u9xz8s
fy9wMtah5PHALA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:06 2025 by rpki-client