Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
File: HjaTxfrT8hak_3rIbO6yOwBDg10.mft (raw, json)
Hash identifier: HoNvf00x3s5Xf3xEajo1XZAIT4XQReqBEy6DZswgxJY=
Subject key identifier: 1F:4F:A8:42:7C:AB:E6:DC:46:FF:D8:E6:26:5E:55:CC:81:C0:7B:E9
Authority key identifier: 1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
Certificate issuer: /CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Certificate serial: 0194BD17D232454FF69BA54CA2011A6FC52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
Manifest number: 08F6
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: HjaTxfrT8hak_3rIbO6yOwBDg10.crl (hash: g7T04zbXg8UE4EGrkmeaVTNr+RC1GnB17RkzTDDxUSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:32:45:4f:f6:9b:a5:4c:a2:01:1a:6f:c5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e3693c5fad3f216a4ff7ac86ceeb23b0043835d
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=1f4fa8427cabe6dc46ffd8e6265e55cc81c07be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:84:11:a8:8e:4b:95:26:2a:93:bd:0c:58:
6c:da:9d:57:4b:93:df:6c:33:0e:fa:cc:d0:8f:98:
30:04:20:2a:a9:1d:9d:f6:a6:3d:23:c2:1a:53:3b:
45:59:0f:16:21:c9:6c:53:01:45:77:ce:db:cd:49:
a3:94:4f:3f:44:63:41:62:59:c0:e2:4a:85:75:ed:
77:54:1b:e4:2e:a5:e6:6b:bf:8b:a3:fb:30:7b:3b:
1c:27:63:45:f4:b4:68:e8:52:08:93:89:ed:90:01:
f0:36:fa:6c:70:ce:7c:e7:09:1c:fa:8b:df:35:63:
99:fa:45:e3:95:ed:93:42:9e:ab:26:e5:2f:4f:dc:
ef:0a:38:a0:33:86:90:df:95:eb:42:3c:19:c2:dc:
14:4c:9a:5b:44:71:8d:5a:d8:db:a4:c5:62:e7:51:
82:a7:ba:56:b7:a8:3a:a1:7c:54:95:27:43:11:93:
b3:66:5d:17:52:d8:7e:22:b9:90:81:af:03:09:45:
25:12:2d:d6:97:24:4d:83:f5:14:24:67:66:0d:a3:
bf:2f:6f:91:b9:a5:1f:31:15:32:12:3b:b0:d2:28:
84:a0:47:5b:d6:29:65:b3:af:61:85:c0:e3:55:e9:
3b:64:78:0f:55:f3:93:ed:77:9a:3c:62:cf:0a:51:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:A8:42:7C:AB:E6:DC:46:FF:D8:E6:26:5E:55:CC:81:C0:7B:E9
X509v3 Authority Key Identifier:
keyid:1E:36:93:C5:FA:D3:F2:16:A4:FF:7A:C8:6C:EE:B2:3B:00:43:83:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjaTxfrT8hak_3rIbO6yOwBDg10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9a1d2d-c626-4f80-a9d4-4211518d98a4/1/HjaTxfrT8hak_3rIbO6yOwBDg10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:47:95:52:d7:f7:3a:48:c3:a9:af:0c:cb:e0:76:b5:99:22:
75:a5:ab:6b:63:01:c3:da:b6:70:45:4e:de:6d:a3:fa:7b:82:
b8:1b:9b:6d:5c:f1:81:c9:6a:cf:52:fb:bd:f3:27:1f:37:00:
10:db:e0:78:51:ea:1c:44:c6:f1:a6:92:a0:c5:09:5f:f7:3b:
8d:8f:a6:0d:4a:12:a6:60:50:2d:1a:a9:5e:bb:86:60:e1:d6:
74:e4:d5:4a:0c:17:02:cb:ee:3b:f4:65:2a:cf:c7:59:be:87:
36:b0:24:16:06:16:a4:eb:1e:33:3a:d1:ec:f1:47:3d:6d:64:
80:a7:5f:9a:b1:8c:0b:14:d2:41:df:ca:8d:07:32:f8:04:82:
1a:e6:82:23:35:89:0d:d2:c1:7a:e8:38:61:85:e2:f2:7e:68:
ab:40:f3:d2:9c:a3:a6:3f:ed:8b:4a:96:09:14:20:fa:33:7e:
68:12:4d:3f:21:b6:f3:d8:dc:17:47:58:68:f9:52:06:bd:6e:
a3:42:aa:7e:e1:13:ea:af:13:90:d9:26:b3:7a:57:12:e1:d1:
fe:10:5c:7c:bc:cd:82:23:99:f2:fd:7f:57:9b:40:12:44:16:
c6:7c:c3:ab:fc:c6:6f:64:7b:9c:7e:b7:36:9d:15:32:f9:cf:
c6:f9:7c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9IyRU/2m6VMogEab8UtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzY5M2M1ZmFkM2YyMTZhNGZmN2FjODZjZWViMjNiMDA0
MzgzNWQwHhcNMjUwMTMxMTYwMDQyWhcNMjUwMjAxMTYwMDQyWjAzMTEwLwYDVQQD
EygxZjRmYTg0MjdjYWJlNmRjNDZmZmQ4ZTYyNjVlNTVjYzgxYzA3YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cCEEaiOS5UmKpO9DFhs2p1XS5Pf
bDMO+szQj5gwBCAqqR2d9qY9I8IaUztFWQ8WIclsUwFFd87bzUmjlE8/RGNBYlnA
4kqFde13VBvkLqXma7+Lo/swezscJ2NF9LRo6FIIk4ntkAHwNvpscM585wkc+ovf
NWOZ+kXjle2TQp6rJuUvT9zvCjigM4aQ35XrQjwZwtwUTJpbRHGNWtjbpMVi51GC
p7pWt6g6oXxUlSdDEZOzZl0XUth+IrmQga8DCUUlEi3WlyRNg/UUJGdmDaO/L2+R
uaUfMRUyEjuw0iiEoEdb1ills69hhcDjVek7ZHgPVfOT7XeaPGLPClEpcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9PqEJ8q+bcRv/Y5iZeVcyBwHvpMB8GA1UdIwQY
MBaAFB42k8X60/IWpP96yGzusjsAQ4NdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQt
NDIxMTUxOGQ5OGE0LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85YTFkMmQtYzYyNi00ZjgwLWE5ZDQtNDIxMTUxOGQ5OGE0
LzEvSGphVHhmclQ4aGFrXzNySWJPNnlPd0JEZzEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUeVUtf3
OkjDqa8My+B2tZkidaWra2MBw9q2cEVO3m2j+nuCuBubbVzxgclqz1L7vfMnHzcA
ENvgeFHqHETG8aaSoMUJX/c7jY+mDUoSpmBQLRqpXruGYOHWdOTVSgwXAsvuO/Rl
Ks/HWb6HNrAkFgYWpOseMzrR7PFHPW1kgKdfmrGMCxTSQd/KjQcy+ASCGuaCIzWJ
DdLBeug4YYXi8n5oq0Dz0pyjpj/ti0qWCRQg+jN+aBJNPyG289jcF0dYaPlSBr1u
o0KqfuET6q8TkNkms3pXEuHR/hBcfLzNgiOZ8v1/V5tAEkQWxnzDq/zGb2R7nH63
Np0VMvnPxvl8IQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:29 2025 by rpki-client