
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: 110jSXbvDUttj8ckKSCf0ivFsis62InEf5KzvLLeTVg=
Subject key identifier: E7:1D:B2:12:7C:AB:9D:EF:02:30:B4:08:C1:0D:69:BA:B7:E9:85:E7
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 0194BC3BEA5F2F1447668A4365E27FB30726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 1160
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: y0qQD+9e6LTtCCxthqA2ad1cASdnBTPhKKoPwrzDrCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:5f:2f:14:47:66:8a:43:65:e2:7f:b3:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=e71db2127cab9def0230b408c10d69bab7e985e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:b4:39:4d:cf:ea:34:f3:f5:cc:47:f7:0b:
f9:7c:0f:09:de:fa:53:8c:d5:4d:f2:db:09:14:3c:
69:7d:46:b2:4a:f3:1d:ce:8c:86:38:27:2d:7a:a3:
94:3d:2e:0f:2f:2b:a2:5b:04:77:67:6c:92:3d:10:
28:24:72:aa:92:fd:58:e6:b2:e0:ea:f6:6a:c1:0e:
b1:0a:d0:ef:70:47:e1:b1:43:fb:a8:d0:28:64:1e:
2a:fc:c1:cc:f4:2e:ad:3b:f4:4b:92:9c:b8:86:ca:
6b:5f:91:f1:b9:15:96:07:1c:42:24:0f:fc:99:87:
24:33:d0:57:02:e7:11:09:2d:30:e1:b2:1a:82:e9:
77:74:24:9f:29:b4:f4:ce:af:ba:f6:fb:e9:a5:94:
40:8e:94:17:9d:78:b9:65:30:48:79:1d:1c:70:cf:
0d:5d:26:37:02:0b:70:5f:34:a4:69:22:6f:d9:5c:
a6:2f:f1:fc:de:2c:01:66:ea:6e:1f:79:53:40:9c:
62:a4:47:aa:7d:f9:83:2f:e8:0f:ec:48:0e:1a:73:
3f:12:ef:1a:67:91:4d:6a:27:8f:dc:9d:fd:2c:d4:
f4:fe:57:e4:99:7f:da:43:2f:44:94:b9:f1:e5:0c:
9c:a9:c6:8b:a1:b7:75:91:72:76:90:56:8a:31:a6:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:B2:12:7C:AB:9D:EF:02:30:B4:08:C1:0D:69:BA:B7:E9:85:E7
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a3:0c:be:35:ab:cf:00:35:b7:bd:b9:44:59:7d:32:e2:88:
4c:12:a3:0f:87:2b:f3:89:99:ea:85:b7:2d:ec:1b:e0:95:96:
e7:fb:5b:83:ff:24:01:45:95:41:ff:e2:70:b2:77:19:ae:5c:
9d:a4:91:a8:96:8a:15:8f:e8:cb:96:6d:64:8c:33:da:94:a3:
df:fd:c3:07:ea:46:d0:76:50:5d:d8:4e:9c:0f:20:8f:c6:11:
23:95:9e:66:dc:4c:8d:bb:9f:f0:f2:d0:52:cf:82:b1:73:4a:
e1:e8:5a:18:9b:02:a1:ec:8d:36:d3:44:50:5d:ef:10:38:f1:
ac:1f:55:9f:13:9b:42:5a:d3:11:16:49:4b:a3:21:d8:22:df:
5c:fd:76:97:83:f2:9c:36:6e:15:fb:60:77:f6:c2:87:e2:90:
ed:a0:fd:98:37:32:f8:00:d1:b0:e4:9c:60:16:f7:d5:6d:46:
40:47:75:f0:d4:78:40:5f:b7:65:2f:ff:44:8a:e0:63:b4:43:
f1:0c:09:fe:ed:fc:c7:05:e7:83:73:7c:b2:c3:db:2e:cf:87:
a9:c6:6d:90:20:fa:89:c6:6e:d0:0a:10:8f:b8:ab:cc:b4:bd:
03:45:4d:31:38:54:18:4c:a9:41:17:38:da:4f:5e:50:59:19:
cd:6f:25:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+pfLxRHZopDZeJ/swcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YzQxMTJlZmM5YmVkODQ3NjFkMzY3OGI4N2M0ODM5NDhk
MmE3MmYwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
EyhlNzFkYjIxMjdjYWI5ZGVmMDIzMGI0MDhjMTBkNjliYWI3ZTk4NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7za0OU3P6jTz9cxH9wv5fA8J3vpT
jNVN8tsJFDxpfUaySvMdzoyGOCcteqOUPS4PLyuiWwR3Z2ySPRAoJHKqkv1Y5rLg
6vZqwQ6xCtDvcEfhsUP7qNAoZB4q/MHM9C6tO/RLkpy4hsprX5HxuRWWBxxCJA/8
mYckM9BXAucRCS0w4bIagul3dCSfKbT0zq+69vvppZRAjpQXnXi5ZTBIeR0ccM8N
XSY3AgtwXzSkaSJv2VymL/H83iwBZupuH3lTQJxipEeqffmDL+gP7EgOGnM/Eu8a
Z5FNaieP3J39LNT0/lfkmX/aQy9ElLnx5QycqcaLobd1kXJ2kFaKMaZ3lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcdshJ8q53vAjC0CMENabq36YXnMB8GA1UdIwQY
MBaAFIbEES78m+2Edh02eLh8SDlI0qcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQt
MDBiOTZkNzRkOGIwLzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NWViZGEtYzJjNy00YzI3LTk1ZDQtMDBiOTZkNzRkOGIw
LzEvaHNRUkx2eWI3WVIySFRaNHVIeElPVWpTcHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6MMvjWr
zwA1t725RFl9MuKITBKjD4cr84mZ6oW3Lewb4JWW5/tbg/8kAUWVQf/icLJ3Ga5c
naSRqJaKFY/oy5ZtZIwz2pSj3/3DB+pG0HZQXdhOnA8gj8YRI5WeZtxMjbuf8PLQ
Us+CsXNK4ehaGJsCoeyNNtNEUF3vEDjxrB9VnxObQlrTERZJS6Mh2CLfXP12l4Py
nDZuFftgd/bCh+KQ7aD9mDcy+ADRsOScYBb31W1GQEd18NR4QF+3ZS//RIrgY7RD
8QwJ/u38xwXng3N8ssPbLs+HqcZtkCD6icZu0AoQj7irzLS9A0VNMThUGEypQRc4
2k9eUFkZzW8l5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:58 2025 by rpki-client