Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: a0jEaMUMtW1997a3FGz+rbKNHl3oosWpCIY43O2I+Fs=
Subject key identifier: DC:89:33:99:A3:8A:99:91:C4:4D:C4:8D:2C:B8:39:88:80:65:D5:62
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 0194BC72CFE75DCA6FD4B4A4EB77E21A7FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 082B
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: vpqWNLAc1oGR0Z3PwHNpdBujm5AgeoJguwA1L88Zyb4=)
2: bS6FP0-RWfuMzsBRZquHdjUbynI.roa (hash: kkw9ceZnHPEpX3rLpD2wmL4u+vt4FdSYPPqT4A+84KY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:e7:5d:ca:6f:d4:b4:a4:eb:77:e2:1a:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=dc893399a38a9991c44dc48d2cb839888065d562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:95:f7:89:c9:bd:40:7d:6f:53:eb:e0:c0:
b8:85:60:20:9b:0e:1d:20:09:d2:13:dc:09:09:75:
54:45:27:1b:b5:3a:70:10:f7:71:44:df:c7:07:01:
48:ab:cf:63:fc:de:bd:84:3a:3d:94:a6:76:97:2c:
bd:05:0b:6b:e5:98:0f:79:0e:41:f6:c2:ef:e0:8e:
65:91:2b:77:d8:1e:e4:b2:ed:18:e0:84:3c:ed:77:
40:1b:f8:9a:5d:a4:b7:3b:2c:64:52:9b:67:78:51:
08:8f:b8:ef:43:3b:c0:71:5d:79:13:ad:70:60:92:
85:68:7f:56:64:a8:e1:54:e1:3d:ad:9d:b5:56:de:
5a:30:79:fb:4a:0c:83:82:e0:f0:d8:83:b7:53:a6:
b2:39:9b:9a:09:4b:21:af:a0:8e:01:0f:66:3c:64:
b0:83:aa:f8:9c:b1:1c:6b:0d:5f:4b:0c:18:16:e0:
72:6b:fd:ef:9e:9d:eb:a7:bf:6e:f4:4b:94:44:31:
3a:ca:61:3c:95:21:aa:75:44:df:41:7d:f1:83:2a:
04:d6:dc:d9:d8:74:9e:cd:ad:5f:15:83:88:2f:80:
cc:da:09:f1:2d:db:e4:5e:72:62:6d:86:10:f7:0d:
91:a5:a8:1d:86:ad:0e:cb:6e:b4:7f:5f:01:b2:00:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:89:33:99:A3:8A:99:91:C4:4D:C4:8D:2C:B8:39:88:80:65:D5:62
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9f:b9:15:90:d6:70:78:4a:a8:98:ab:9e:17:e8:65:5f:e0:
ef:73:49:0e:46:c6:3c:34:af:b0:0e:14:20:ef:db:75:69:48:
3a:c4:95:b9:07:85:c3:55:0b:20:51:94:1b:60:59:f8:84:3d:
6a:8e:84:10:68:9b:8f:71:21:b5:7c:eb:6a:a7:61:3e:38:64:
a3:1a:ad:3d:da:1b:f5:b2:2a:ae:90:84:44:77:59:61:96:8c:
e8:4b:fc:ea:bd:f1:19:22:9c:5c:ef:ea:eb:4a:70:f9:cf:76:
36:6e:bf:d0:f0:0a:9f:47:a9:fb:5b:6e:59:7e:98:3e:49:d9:
82:fb:f9:61:5a:47:7c:4c:5d:fe:18:17:09:ac:14:7b:1c:23:
12:1d:5b:41:89:77:e1:2b:e8:a8:94:f4:f6:ea:96:37:c5:24:
97:8f:0e:b1:17:2a:4d:bc:62:54:b7:db:d0:ae:c3:4f:b2:33:
e4:c1:a2:dc:67:ac:c8:ab:08:95:15:3a:4c:04:8d:bf:dd:c7:
65:43:c5:d7:1c:8f:ab:39:b5:c6:f5:c9:05:ca:60:14:ec:fb:
98:44:b9:04:3e:83:fe:f9:97:80:84:2d:63:b4:9c:f0:f4:60:
a3:82:3d:9f:a8:9e:c3:87:0d:9e:c5:03:ab:4d:e7:58:82:59:
08:a0:d0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs/nXcpv1LSk63fiGn+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNGM2MDc4YTU5NDFjNWNiMTU3ZDVmMjk1N2NiMzE0ZDdl
ZDFiZWQwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EyhkYzg5MzM5OWEzOGE5OTkxYzQ0ZGM0OGQyY2I4Mzk4ODgwNjVkNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkaV94nJvUB9b1Pr4MC4hWAgmw4d
IAnSE9wJCXVURScbtTpwEPdxRN/HBwFIq89j/N69hDo9lKZ2lyy9BQtr5ZgPeQ5B
9sLv4I5lkSt32B7ksu0Y4IQ87XdAG/iaXaS3OyxkUptneFEIj7jvQzvAcV15E61w
YJKFaH9WZKjhVOE9rZ21Vt5aMHn7SgyDguDw2IO3U6ayOZuaCUshr6COAQ9mPGSw
g6r4nLEcaw1fSwwYFuBya/3vnp3rp79u9EuURDE6ymE8lSGqdUTfQX3xgyoE1tzZ
2HSeza1fFYOIL4DM2gnxLdvkXnJibYYQ9w2Rpagdhq0Oy260f18BsgB4LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyJM5mjipmRxE3EjSy4OYiAZdViMB8GA1UdIwQY
MBaAFB1MYHillBxcsVfV8pV8sxTX7RvtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEt
OTk2YTYyM2I2MzNlLzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zZWYzODYtMDU3MS00NjBlLTg5OTEtOTk2YTYyM2I2MzNl
LzEvSFV4Z2VLV1VIRnl4VjlYeWxYeXpGTmZ0Ry0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5+5FZDW
cHhKqJirnhfoZV/g73NJDkbGPDSvsA4UIO/bdWlIOsSVuQeFw1ULIFGUG2BZ+IQ9
ao6EEGibj3EhtXzraqdhPjhkoxqtPdob9bIqrpCERHdZYZaM6Ev86r3xGSKcXO/q
60pw+c92Nm6/0PAKn0ep+1tuWX6YPknZgvv5YVpHfExd/hgXCawUexwjEh1bQYl3
4SvoqJT09uqWN8Ukl48OsRcqTbxiVLfb0K7DT7Iz5MGi3GesyKsIlRU6TASNv93H
ZUPF1xyPqzm1xvXJBcpgFOz7mES5BD6D/vmXgIQtY7Sc8PRgo4I9n6iew4cNnsUD
q03nWIJZCKDQ8w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:41 2025 by rpki-client