Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: SqLdDfpZ5r7VRHy/haSry+f9VOAzUwHgiFdR2lfJU74=
Subject key identifier: 02:93:EC:2B:E1:F7:B8:E2:F5:43:45:E3:D0:6E:39:C0:3F:0D:0B:50
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 0194BD4E682CA9D1B579B5A5B38F91C24732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: 9zk79MnMy8X7UsWftjxOJtzyhyseVrR+Gu9KUTofnQA=)
2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:2c:a9:d1:b5:79:b5:a5:b3:8f:91:c2:47:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=0293ec2be1f7b8e2f54345e3d06e39c03f0d0b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:18:0b:86:08:29:45:a5:0d:21:26:5f:e1:
8e:46:31:ca:a4:a4:23:fa:86:6c:f5:fe:7a:91:b4:
cd:c0:f0:42:4b:d7:bc:7c:5b:08:6f:19:47:8e:f5:
9d:75:bd:e0:91:e4:40:b6:dd:50:b5:6f:3c:37:0c:
90:72:f3:4d:31:04:e3:62:08:16:75:bf:50:04:22:
70:ae:bd:00:45:3a:d2:92:5e:f8:43:53:42:9e:74:
2f:69:ed:1a:47:74:ae:52:48:a1:cf:b6:50:2c:0a:
a5:b5:54:f6:59:f5:03:a8:3f:ad:45:2e:25:2b:d9:
45:65:6d:59:ae:96:f0:ce:6e:93:dd:a5:35:88:cc:
44:65:65:ed:5e:fd:5b:d0:e7:0e:65:b7:4b:e1:28:
17:7a:6a:6e:b0:03:27:31:8a:45:2e:0f:94:8a:45:
82:97:9a:7e:2a:42:30:e4:e8:00:75:a4:29:d1:87:
d0:7a:5c:c1:78:ec:4d:7a:d8:c6:b8:58:35:fc:45:
54:f1:14:38:d2:b8:fb:0e:8f:78:f3:dd:84:db:11:
2d:fe:95:1c:f1:31:d3:8e:b4:0b:06:ba:10:3f:77:
17:12:29:52:78:74:67:ef:f4:58:95:84:45:42:62:
23:b2:48:e4:cc:34:af:aa:11:f3:2b:04:a1:34:a9:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:93:EC:2B:E1:F7:B8:E2:F5:43:45:E3:D0:6E:39:C0:3F:0D:0B:50
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c5:b0:3c:cb:c7:b0:1b:d4:95:8e:fb:26:e1:57:fe:3c:f9:
9c:ba:f2:6d:a8:fe:91:82:33:9d:ac:63:28:ae:d8:83:55:f2:
fe:6d:66:78:9d:73:d6:a9:95:5b:6f:51:24:f5:d6:f9:b0:c3:
d3:3d:18:fe:b7:b1:0a:50:f7:44:2d:0e:2b:b4:53:77:c1:fb:
de:16:ef:38:fe:23:37:5e:ff:56:7a:e9:65:f3:1c:7d:6c:df:
57:33:65:64:e0:5f:c9:7c:fc:d3:1e:bc:72:b7:fa:16:55:72:
a8:d7:32:ed:2f:63:54:94:87:81:5d:b0:52:db:b2:4d:94:46:
68:07:cc:a1:5f:f9:04:a0:c4:2c:ff:50:d2:8c:1a:a3:58:59:
c7:f9:04:5c:71:4a:b0:26:21:b2:0b:b2:4f:d6:c4:c0:63:d8:
04:a9:11:4a:f5:35:6b:1d:a0:cc:45:c9:da:28:bd:53:18:14:
f6:83:1f:7b:56:89:d1:d7:ae:37:ff:c6:e7:76:3a:f0:c9:53:
4a:07:cf:8b:eb:30:6d:c3:02:e7:2f:40:c2:e9:e6:70:23:f6:
ff:a9:b8:09:5b:35:03:c7:8e:2f:79:1d:d2:34:cd:62:28:bd:
60:09:78:c3:33:eb:7c:11:00:60:fc:ff:a8:fa:ef:98:ec:86:
54:59:d5:4c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9TmgsqdG1ebWls4+RwkcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4
YWI4ZTkwHhcNMjUwMTMxMTcwMDE5WhcNMjUwMjAxMTcwMDE5WjAzMTEwLwYDVQQD
EygwMjkzZWMyYmUxZjdiOGUyZjU0MzQ1ZTNkMDZlMzljMDNmMGQwYjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomAYC4YIKUWlDSEmX+GORjHKpKQj
+oZs9f56kbTNwPBCS9e8fFsIbxlHjvWddb3gkeRAtt1QtW88NwyQcvNNMQTjYggW
db9QBCJwrr0ARTrSkl74Q1NCnnQvae0aR3SuUkihz7ZQLAqltVT2WfUDqD+tRS4l
K9lFZW1Zrpbwzm6T3aU1iMxEZWXtXv1b0OcOZbdL4SgXempusAMnMYpFLg+UikWC
l5p+KkIw5OgAdaQp0YfQelzBeOxNetjGuFg1/EVU8RQ40rj7Do94892E2xEt/pUc
8THTjrQLBroQP3cXEilSeHRn7/RYlYRFQmIjskjkzDSvqhHzKwShNKloswIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAKT7Cvh97ji9UNF49BuOcA/DQtQMB8GA1UdIwQY
MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5
LWZjODNkYjEzZjNhMS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNiL2FiYWNmMS1mNGM2LTQ3MTAtOTNlOS1mYzgzZGIxM2Yz
YTEvMS8xLUhYZkU3LU1HNml4RGkya2dLNWhwVFNLdU9rLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcWw
PMvHsBvUlY77JuFX/jz5nLrybaj+kYIznaxjKK7Yg1Xy/m1meJ1z1qmVW29RJPXW
+bDD0z0Y/rexClD3RC0OK7RTd8H73hbvOP4jN17/VnrpZfMcfWzfVzNlZOBfyXz8
0x68crf6FlVyqNcy7S9jVJSHgV2wUtuyTZRGaAfMoV/5BKDELP9Q0owao1hZx/kE
XHFKsCYhsguyT9bEwGPYBKkRSvU1ax2gzEXJ2ii9UxgU9oMfe1aJ0deuN//G53Y6
8MlTSgfPi+swbcMC5y9AwunmcCP2/6m4CVs1A8eOL3kd0jTNYii9YAl4wzPrfBEA
YPz/qPrvmOyGVFnVTA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:55 2025 by rpki-client