Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File: HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier: 0u3mpo7AbD+MTYzaHKz3UNJac6E3IwXXcHPo0jSpvY0=
Subject key identifier: 04:79:B4:4E:2E:8D:DE:1A:2D:85:04:94:FC:E5:F6:3F:B8:A1:91:A8
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer: /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial: 0194BBCE5936479D1C114BC46FFA5369320A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: gUyOf0hrXy+n2+c4INfZpWVHFl+XPwc/CxYqo1lK9jE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:36:47:9d:1c:11:4b:c4:6f:fa:53:69:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=0479b44e2e8dde1a2d850494fce5f63fb8a191a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:49:62:8a:b2:df:d9:63:ec:94:61:f2:d9:
44:31:de:b3:2a:01:27:3f:18:67:b2:9a:72:32:0f:
29:b9:4e:96:2d:7f:71:1c:53:62:87:76:70:7a:2f:
c9:5f:bf:1f:be:9e:36:18:15:30:cf:a1:75:b7:d6:
ce:5a:f4:d9:f4:0f:71:4c:23:02:63:e8:4d:1d:0a:
ce:d0:be:dd:92:39:5f:02:57:c7:a1:50:89:9e:84:
f9:d3:ba:54:a9:13:1d:ab:9f:be:e8:09:77:85:aa:
9e:69:94:98:52:29:56:3b:79:25:56:ed:5e:0b:f2:
50:d6:d4:b3:ca:3f:31:f5:19:27:22:45:14:47:24:
b1:fa:93:a9:41:ea:4f:78:a4:75:bf:7e:33:57:92:
a6:ee:c5:bb:7c:e9:14:24:ba:f5:d2:45:77:de:0b:
1b:6b:df:d2:ec:af:55:68:36:7a:f1:3b:23:8e:47:
91:eb:0a:66:49:56:eb:fd:f0:f2:df:bf:44:95:b5:
7a:67:82:1e:39:b8:eb:e7:b2:b4:48:ac:89:d6:ee:
6a:1b:65:3d:05:12:fc:23:48:c5:7e:55:15:89:d4:
91:b1:cd:15:b0:e5:81:93:0d:4b:12:38:8f:36:9a:
b8:5f:1f:44:55:34:b2:bb:df:1f:f3:90:7d:58:c9:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:B4:4E:2E:8D:DE:1A:2D:85:04:94:FC:E5:F6:3F:B8:A1:91:A8
X509v3 Authority Key Identifier:
keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:a3:7b:87:e5:cd:1c:1d:c0:b0:fd:f2:f4:46:ab:fb:f9:
5a:3d:6a:75:7f:ab:d9:8e:56:78:58:e3:79:93:59:62:c0:e1:
63:eb:77:fb:45:23:06:b9:c4:19:dc:34:5f:99:a2:ef:32:ea:
2f:49:a1:0a:b8:6b:0f:89:1f:46:48:7e:06:e0:bf:e4:b1:05:
1d:77:6a:a8:6a:bd:b2:7a:31:0b:ff:bc:1e:2b:7a:f9:93:b7:
5c:74:a9:83:38:b9:4d:53:8a:e2:7a:05:51:da:59:9c:a6:0b:
cf:63:26:65:f5:27:30:1f:81:9b:9e:36:14:cc:44:56:9c:0c:
42:97:de:32:89:49:50:6d:96:1d:2f:92:42:aa:41:53:f3:0b:
8f:39:07:02:aa:ea:1b:73:ac:fb:5f:83:3b:50:f8:37:f6:64:
75:41:45:cc:00:94:5e:5a:5c:3d:cb:c2:5d:25:1d:e2:a7:e2:
bc:b8:67:c6:45:1e:d3:4f:b8:bd:72:8b:4d:34:5a:ff:ba:8f:
cf:e0:5a:11:ec:b7:8a:7b:d3:f6:f3:e8:49:5d:b9:2e:26:ec:
e3:34:46:d2:ea:e4:57:53:ce:46:fa:fd:c8:fa:09:fe:2e:63:
a3:d7:4a:fe:01:e4:d2:e1:47:8b:c8:d4:34:2a:a4:98:f8:9a:
bd:cc:80:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlk2R50cEUvEb/pTaTIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTUyMzkyOGQ4ZThlNTRiZTQ2Nzk3NjMzMWEwMTIxZDQy
YTAwNjcwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EygwNDc5YjQ0ZTJlOGRkZTFhMmQ4NTA0OTRmY2U1ZjYzZmI4YTE5MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAtJYoqy39lj7JRh8tlEMd6zKgEn
PxhnsppyMg8puU6WLX9xHFNih3Zwei/JX78fvp42GBUwz6F1t9bOWvTZ9A9xTCMC
Y+hNHQrO0L7dkjlfAlfHoVCJnoT507pUqRMdq5++6Al3haqeaZSYUilWO3klVu1e
C/JQ1tSzyj8x9RknIkUURySx+pOpQepPeKR1v34zV5Km7sW7fOkUJLr10kV33gsb
a9/S7K9VaDZ68TsjjkeR6wpmSVbr/fDy379ElbV6Z4IeObjr57K0SKyJ1u5qG2U9
BRL8I0jFflUVidSRsc0VsOWBkw1LEjiPNpq4Xx9EVTSyu98f85B9WMmmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR5tE4ujd4aLYUElPzl9j+4oZGoMB8GA1UdIwQY
MBaAFB8VI5KNjo5UvkZ5djMaASHUKgBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmIt
ODk5ZjlmYmViYjE5LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmItODk5ZjlmYmViYjE5
LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeSje4fl
zRwdwLD98vRGq/v5Wj1qdX+r2Y5WeFjjeZNZYsDhY+t3+0UjBrnEGdw0X5mi7zLq
L0mhCrhrD4kfRkh+BuC/5LEFHXdqqGq9snoxC/+8Hit6+ZO3XHSpgzi5TVOK4noF
UdpZnKYLz2MmZfUnMB+Bm542FMxEVpwMQpfeMolJUG2WHS+SQqpBU/MLjzkHAqrq
G3Os+1+DO1D4N/ZkdUFFzACUXlpcPcvCXSUd4qfivLhnxkUe00+4vXKLTTRa/7qP
z+BaEey3invT9vPoSV25Libs4zRG0urkV1PORvr9yPoJ/i5jo9dK/gHk0uFHi8jU
NCqkmPiavcyAGw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:42 2025 by rpki-client