Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
File: HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft (raw, json)
Hash identifier: CIXgvt3d/gaoTzB4+UHOWNjVkow0DiYyogxau9fp54U=
Subject key identifier: 51:E8:37:DE:DA:0C:E7:88:A6:0F:26:35:C8:25:F0:55:CD:CC:0F:CF
Authority key identifier: 1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
Certificate issuer: /CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Certificate serial: 0194BBCE5169F6F82A42450740F7C9DF71BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
Manifest number: 1384
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl (hash: 8uhsqesaNVTZA6SJUPISYpJnf46yecCUUkUH3QK/Q3I=)
2: bDOy4M4R57nj8_Sff5gfBKz-LP0.roa (hash: vm1SQ0etoIa7LbOonRtmj5Ah0LoPLSlL7NdxQSQ76i0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:69:f6:f8:2a:42:45:07:40:f7:c9:df:71:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2ac1246a2e0ea97a0c2295b73ddbe006d0ed2c
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=51e837deda0ce788a60f2635c825f055cdcc0fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:75:42:37:9a:a9:d4:5f:c8:88:81:e8:f0:
27:97:ee:6c:61:a5:70:ff:ad:21:58:d8:66:cf:f4:
d9:af:95:86:59:c6:54:06:df:22:52:cd:d2:82:7e:
76:23:11:4f:88:94:98:c5:2e:47:60:00:b3:a9:b5:
ad:97:e6:1f:27:c0:f8:bb:80:e8:eb:15:4e:42:70:
f4:a1:d9:86:ea:9c:59:d3:17:0d:2e:1a:81:6c:4c:
42:fd:bc:12:c4:52:6b:16:d4:54:5f:0c:28:34:c2:
e7:2f:31:fe:af:6f:3a:7a:5c:8c:d0:c1:6a:33:05:
de:5d:a5:ff:12:d5:3e:3f:57:b4:f1:fe:43:db:c2:
67:8d:84:13:d2:a6:87:df:23:87:2c:22:17:bd:83:
47:34:bc:b2:a0:09:fd:f2:fe:3f:7f:86:fb:4d:84:
81:5a:6a:dd:b3:26:b8:7f:24:b9:7d:f9:2c:1a:3c:
2c:42:ca:f1:08:33:59:94:77:9b:64:b2:b0:00:9c:
c1:03:67:70:28:d7:d9:bd:f7:75:b6:0d:bf:5c:a8:
0c:20:58:e9:c4:a6:88:58:1e:25:7d:52:01:34:c3:
6c:8a:d7:b7:d7:47:27:c3:8b:c4:93:a1:cf:33:d2:
36:f4:58:fe:75:3e:1a:2d:7d:be:06:9d:d5:13:06:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:37:DE:DA:0C:E7:88:A6:0F:26:35:C8:25:F0:55:CD:CC:0F:CF
X509v3 Authority Key Identifier:
keyid:1C:2A:C1:24:6A:2E:0E:A9:7A:0C:22:95:B7:3D:DB:E0:06:D0:ED:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCrBJGouDql6DCKVtz3b4AbQ7Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0de7e1-bf7f-434f-9591-8d46e09df9f3/1/HCrBJGouDql6DCKVtz3b4AbQ7Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:11:f7:c1:cb:95:b5:5b:85:a1:a0:73:2f:f0:79:c0:30:ef:
37:e8:0f:be:8a:86:48:64:cb:e4:df:d6:46:d7:69:b9:a8:e5:
39:76:a5:0c:9e:11:ef:6c:19:e0:38:57:c7:3d:7d:9a:ad:b1:
41:f7:e7:23:9c:49:d5:54:40:a0:4c:e9:65:67:a6:55:d9:2f:
9f:c9:21:07:10:df:ab:1c:cc:62:c9:8c:fc:66:7e:0e:0f:90:
17:e7:b6:cb:3d:2a:81:9b:d3:f1:2c:3f:17:13:e8:d8:78:4e:
a0:b8:1d:f6:33:1b:7b:bf:e0:a4:8c:e1:34:78:6c:d7:43:63:
52:6b:ba:3a:b4:0f:f2:71:17:b8:23:07:c9:21:af:26:13:e7:
a4:2c:b1:a3:33:39:a7:a0:bb:35:53:ef:b8:1f:5f:7c:11:c0:
98:a5:9a:33:fc:07:e7:48:99:88:36:04:49:55:a1:55:10:ad:
63:6a:b9:9c:ca:3e:07:9c:d5:cf:f1:62:8f:db:b3:d7:54:2d:
41:35:57:d9:d1:09:79:25:d9:f7:92:ee:ee:b8:c0:93:aa:00:
db:49:db:f1:7d:ff:85:c4:18:ec:97:7c:5e:31:d7:db:28:f9:
9a:28:45:07:bd:2c:d2:95:ec:03:ae:3e:a7:ba:16:49:8e:3d:
c5:54:6e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlFp9vgqQkUHQPfJ33G/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmFjMTI0NmEyZTBlYTk3YTBjMjI5NWI3M2RkYmUwMDZk
MGVkMmMwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
Eyg1MWU4MzdkZWRhMGNlNzg4YTYwZjI2MzVjODI1ZjA1NWNkY2MwZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogB1QjeaqdRfyIiB6PAnl+5sYaVw
/60hWNhmz/TZr5WGWcZUBt8iUs3Sgn52IxFPiJSYxS5HYACzqbWtl+YfJ8D4u4Do
6xVOQnD0odmG6pxZ0xcNLhqBbExC/bwSxFJrFtRUXwwoNMLnLzH+r286elyM0MFq
MwXeXaX/EtU+P1e08f5D28JnjYQT0qaH3yOHLCIXvYNHNLyyoAn98v4/f4b7TYSB
Wmrdsya4fyS5ffksGjwsQsrxCDNZlHebZLKwAJzBA2dwKNfZvfd1tg2/XKgMIFjp
xKaIWB4lfVIBNMNsite310cnw4vEk6HPM9I29Fj+dT4aLX2+Bp3VEwbs5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHoN97aDOeIpg8mNcgl8FXNzA/PMB8GA1UdIwQY
MBaAFBwqwSRqLg6pegwilbc92+AG0O0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEt
OGQ0NmUwOWRmOWYzLzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZGU3ZTEtYmY3Zi00MzRmLTk1OTEtOGQ0NmUwOWRmOWYz
LzEvSENyQkpHb3VEcWw2RENLVnR6M2I0QWJRN1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWxH3wcuV
tVuFoaBzL/B5wDDvN+gPvoqGSGTL5N/WRtdpuajlOXalDJ4R72wZ4DhXxz19mq2x
QffnI5xJ1VRAoEzpZWemVdkvn8khBxDfqxzMYsmM/GZ+Dg+QF+e2yz0qgZvT8Sw/
FxPo2HhOoLgd9jMbe7/gpIzhNHhs10NjUmu6OrQP8nEXuCMHySGvJhPnpCyxozM5
p6C7NVPvuB9ffBHAmKWaM/wH50iZiDYESVWhVRCtY2q5nMo+B5zVz/Fij9uz11Qt
QTVX2dEJeSXZ95Lu7rjAk6oA20nb8X3/hcQY7Jd8XjHX2yj5mihFB70s0pXsA64+
p7oWSY49xVRupA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:35 2025 by rpki-client