Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: BrGQmzRFfCwPmUFx6UwjuUggZOaWoGOl7BGbY2OpFW8=
Subject key identifier: 12:4B:71:86:7D:7B:30:0F:44:1E:C6:25:B3:45:F3:D0:63:D0:D8:12
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 0194BCE0D2BCC6E4683DCB72432ADFFA8AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: fIRWKQWQCYjR00DZC+cOeBIZgTXZhNGRh+kA4Egr490=)
2: Z-7u2MA1CjZD5hYP8TfU-VSZNR8.roa (hash: /80xhWNAq5Vxx5IxhDuQbH3UW7oLWMSaFXrTwbB6FYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:bc:c6:e4:68:3d:cb:72:43:2a:df:fa:8a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=124b71867d7b300f441ec625b345f3d063d0d812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:a0:38:6a:b0:ac:75:49:f2:64:52:f8:d8:
36:dd:80:7e:46:2a:72:75:21:6f:b5:bb:8d:bf:90:
88:7e:72:aa:be:68:6d:18:5c:65:64:91:20:b4:05:
e1:ad:bb:86:50:7c:e5:63:1b:c8:c3:97:42:e1:da:
b4:45:aa:52:bd:79:f8:00:02:1e:b7:9f:ff:2c:c6:
11:2b:ba:7b:b7:30:ec:57:ed:28:8f:6a:70:f5:0e:
e6:cd:96:23:ac:59:2d:a5:f3:5e:1f:ea:d3:74:6d:
7b:ce:07:9f:37:ba:c5:55:5d:95:de:25:fd:fb:0e:
39:00:66:00:3a:a4:2f:21:e5:6e:17:44:c1:2a:af:
bc:a1:c2:34:80:57:ce:bf:30:8c:1e:a9:fc:0f:a2:
94:b9:16:15:ca:0e:b9:5c:fc:5c:52:59:21:b7:e0:
9d:8d:9b:e8:ad:e3:65:35:dc:28:8d:ad:ba:80:ac:
b2:fd:34:b0:a4:e0:64:7e:06:4b:3f:1d:cc:ff:6b:
e5:4c:52:3e:bf:7e:f1:00:44:e4:c9:48:6c:6b:22:
ab:77:aa:35:bb:4f:71:ec:0e:0c:c3:23:0f:0f:e1:
21:f4:6f:df:de:e8:2f:c7:23:37:01:99:87:8c:89:
6d:ea:1e:54:3a:2a:e0:48:60:99:d1:df:22:4e:f1:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:71:86:7D:7B:30:0F:44:1E:C6:25:B3:45:F3:D0:63:D0:D8:12
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:11:df:3a:b1:58:f6:e6:68:da:2b:e3:5c:ed:44:11:cd:
b7:2e:cd:b8:5c:fd:76:4c:26:b7:33:32:c7:3e:9d:aa:96:db:
11:70:ec:27:a9:90:6e:fe:85:c7:3f:ec:fe:53:b5:07:f3:15:
99:ee:d5:4a:cc:b9:4d:95:07:2b:a3:fa:02:3b:1d:15:07:d5:
b9:3b:ec:c0:6c:f2:fe:0c:28:f3:66:f4:12:04:3a:4f:60:80:
f6:2b:46:e4:81:9f:b4:37:c2:e5:27:58:f8:7c:6c:94:fc:8f:
6f:95:c4:75:6e:60:a6:9d:35:8f:19:2e:b3:9b:14:60:6a:4b:
42:6e:a6:34:b6:18:96:7d:2e:87:93:17:7b:b3:9d:ae:d6:67:
bc:f0:0e:46:80:e5:86:30:ac:9d:67:0b:79:b8:ff:b9:3e:05:
56:4a:76:c7:75:3b:4a:89:9e:98:2c:f6:1d:6c:23:68:a2:87:
75:bc:a5:86:55:e7:0d:48:2a:46:0b:f6:8b:22:68:1e:a9:d1:
bd:46:5f:f8:a0:20:43:66:a4:51:a0:37:1b:6e:a1:e6:b0:0d:
e3:ad:7d:9b:e9:69:84:0b:64:ad:3b:54:76:3e:c8:28:f5:01:
89:b0:06:3e:44:ef:07:3b:a1:e1:ef:30:c6:86:b3:db:5c:e4:
a2:44:48:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NK8xuRoPctyQyrf+orFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4
MzZjMWUwHhcNMjUwMTMxMTUwMDM4WhcNMjUwMjAxMTUwMDM4WjAzMTEwLwYDVQQD
EygxMjRiNzE4NjdkN2IzMDBmNDQxZWM2MjViMzQ1ZjNkMDYzZDBkODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvmgOGqwrHVJ8mRS+Ng23YB+Ripy
dSFvtbuNv5CIfnKqvmhtGFxlZJEgtAXhrbuGUHzlYxvIw5dC4dq0RapSvXn4AAIe
t5//LMYRK7p7tzDsV+0oj2pw9Q7mzZYjrFktpfNeH+rTdG17zgefN7rFVV2V3iX9
+w45AGYAOqQvIeVuF0TBKq+8ocI0gFfOvzCMHqn8D6KUuRYVyg65XPxcUlkht+Cd
jZvoreNlNdwoja26gKyy/TSwpOBkfgZLPx3M/2vlTFI+v37xAETkyUhsayKrd6o1
u09x7A4MwyMPD+Eh9G/f3ugvxyM3AZmHjIlt6h5UOirgSGCZ0d8iTvEDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJLcYZ9ezAPRB7GJbNF89Bj0NgSMB8GA1UdIwQY
MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt
ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4
LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpkR3zqx
WPbmaNor41ztRBHNty7NuFz9dkwmtzMyxz6dqpbbEXDsJ6mQbv6Fxz/s/lO1B/MV
me7VSsy5TZUHK6P6AjsdFQfVuTvswGzy/gwo82b0EgQ6T2CA9itG5IGftDfC5SdY
+HxslPyPb5XEdW5gpp01jxkus5sUYGpLQm6mNLYYln0uh5MXe7OdrtZnvPAORoDl
hjCsnWcLebj/uT4FVkp2x3U7SomemCz2HWwjaKKHdbylhlXnDUgqRgv2iyJoHqnR
vUZf+KAgQ2akUaA3G26h5rAN4619m+lphAtkrTtUdj7IKPUBibAGPkTvBzuh4e8w
xoaz21zkokRIvQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:04 2025 by rpki-client