Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
File: HK37nPzahCYhLdfYhztf5ItBLyo.mft (raw, json)
Hash identifier: 1TOTLFd1ZgQ9irL9mnbzFF6U42hndxFVYDmIf4YasDo=
Subject key identifier: 30:5A:7C:36:2C:5B:AE:06:8A:F6:51:06:6A:6F:3C:B3:C1:3E:8A:EF
Authority key identifier: 1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
Certificate issuer: /CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Certificate serial: 0194BD856DAF372539D2AE8BF5FC47BC405C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: HK37nPzahCYhLdfYhztf5ItBLyo.crl (hash: cmPSsGmo+0cbAMIJN5SZ3CFIWenUiyDxFZdpVeqhM3k=)
2: qlhTst1KI05-IXjT0Jjp1aMzFfc.roa (hash: AXRjUWRMdXCLNCZlSVsLAGGspUQ5o0C4cdNp8OmuROM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6d:af:37:25:39:d2:ae:8b:f5:fc:47:bc:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cadfb9cfcda8426212dd7d8873b5fe48b412f2a
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=305a7c362c5bae068af651066a6f3cb3c13e8aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:66:0d:8e:ea:9e:b5:d0:54:f2:91:40:54:
ee:32:e8:0c:bd:db:dc:b6:f9:d5:6a:eb:a3:96:fc:
4a:3d:31:f6:69:49:57:7b:ac:57:e7:6d:00:27:85:
66:e9:3d:ed:1f:dc:84:2b:52:0a:9e:5d:7c:9c:0f:
0c:e8:5a:a1:65:28:72:4c:90:9e:49:96:de:38:e1:
71:ff:60:c5:b8:31:1e:44:2c:d7:b4:f0:8d:45:38:
51:39:06:ce:ac:82:e6:0e:2b:df:77:b9:67:57:17:
dc:d7:f5:6a:06:d0:59:b1:72:c8:a6:b2:cc:66:59:
b7:3b:65:b0:7b:6f:35:81:c6:02:4e:83:c4:2f:11:
54:95:6d:95:3c:17:9d:4c:66:03:0d:f3:9e:2d:88:
e8:df:a7:f2:bd:dc:1b:55:24:ec:75:78:d6:73:3f:
51:29:cf:3c:01:92:7f:4e:a9:0b:2a:d6:63:e4:1b:
75:ca:45:f3:60:d1:f5:4f:18:7f:d1:df:f1:76:25:
f9:17:47:10:41:86:6e:33:b6:a8:00:2c:0f:7c:53:
fc:c5:74:e4:72:25:b5:7f:a3:c8:43:e1:ba:23:1e:
b7:3e:bd:0f:bf:4e:02:06:a0:6d:11:f0:79:b2:bc:
1c:6d:51:96:ae:09:dd:09:50:74:91:43:e0:1d:27:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:7C:36:2C:5B:AE:06:8A:F6:51:06:6A:6F:3C:B3:C1:3E:8A:EF
X509v3 Authority Key Identifier:
keyid:1C:AD:FB:9C:FC:DA:84:26:21:2D:D7:D8:87:3B:5F:E4:8B:41:2F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK37nPzahCYhLdfYhztf5ItBLyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c8406d-a564-4795-98b0-868160668382/1/HK37nPzahCYhLdfYhztf5ItBLyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5e:f5:30:18:56:53:8e:e9:b3:bc:45:d9:49:71:ef:3a:e9:
57:99:09:63:ab:08:a8:41:3d:9f:92:31:26:37:1b:63:e8:a9:
96:d8:72:b8:9d:b9:85:27:3e:64:d9:ac:19:bf:65:c5:59:5d:
cb:53:80:be:36:a6:dd:7c:8f:9e:22:27:15:56:8f:1f:08:6c:
52:47:77:e9:7b:b0:d7:63:91:03:22:c5:e6:54:06:62:2c:40:
02:7d:ae:06:43:37:32:53:f2:fc:72:ba:ed:60:aa:91:5b:1e:
0b:5d:c6:1a:21:f9:3b:61:b9:75:b4:eb:a1:2a:3a:23:d2:c4:
3a:e5:20:40:9e:2e:5f:f6:2a:c5:9e:10:ee:c7:21:72:2f:93:
47:3f:e5:bf:6a:77:2c:e7:89:71:9a:37:b2:79:a9:33:35:89:
5d:c6:64:9b:3a:a9:f4:a8:87:7c:e0:53:5c:f1:98:c0:82:d3:
0d:8a:fb:7e:83:a2:32:92:5e:2c:49:dc:fd:eb:cc:af:f0:11:
54:e9:5d:9b:a3:af:88:56:67:f0:9d:8f:1f:1a:9b:0f:79:6f:
5b:27:90:8c:55:4e:a3:59:bd:fc:0e:4b:18:19:13:33:f4:fc:
3e:34:14:d7:73:6a:58:c2:f5:c4:02:e8:98:15:86:cc:13:eb:
d9:52:3f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hW2vNyU50q6L9fxHvEBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYWRmYjljZmNkYTg0MjYyMTJkZDdkODg3M2I1ZmU0OGI0
MTJmMmEwHhcNMjUwMTMxMTgwMDI1WhcNMjUwMjAxMTgwMDI1WjAzMTEwLwYDVQQD
EygzMDVhN2MzNjJjNWJhZTA2OGFmNjUxMDY2YTZmM2NiM2MxM2U4YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8VmDY7qnrXQVPKRQFTuMugMvdvc
tvnVauujlvxKPTH2aUlXe6xX520AJ4Vm6T3tH9yEK1IKnl18nA8M6FqhZShyTJCe
SZbeOOFx/2DFuDEeRCzXtPCNRThROQbOrILmDivfd7lnVxfc1/VqBtBZsXLIprLM
Zlm3O2Wwe281gcYCToPELxFUlW2VPBedTGYDDfOeLYjo36fyvdwbVSTsdXjWcz9R
Kc88AZJ/TqkLKtZj5Bt1ykXzYNH1Txh/0d/xdiX5F0cQQYZuM7aoACwPfFP8xXTk
ciW1f6PIQ+G6Ix63Pr0Pv04CBqBtEfB5srwcbVGWrgndCVB0kUPgHSdXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBafDYsW64GivZRBmpvPLPBPorvMB8GA1UdIwQY
MBaAFByt+5z82oQmIS3X2Ic7X+SLQS8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jODQwNmQtYTU2NC00Nzk1LTk4YjAt
ODY4MTYwNjY4MzgyLzEvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jODQwNmQtYTU2NC00Nzk1LTk4YjAtODY4MTYwNjY4Mzgy
LzEvSEszN25QemFoQ1loTGRmWWh6dGY1SXRCTHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF71MBhW
U47ps7xF2Ulx7zrpV5kJY6sIqEE9n5IxJjcbY+iplthyuJ25hSc+ZNmsGb9lxVld
y1OAvjam3XyPniInFVaPHwhsUkd36Xuw12ORAyLF5lQGYixAAn2uBkM3MlPy/HK6
7WCqkVseC13GGiH5O2G5dbTroSo6I9LEOuUgQJ4uX/YqxZ4Q7schci+TRz/lv2p3
LOeJcZo3snmpMzWJXcZkmzqp9KiHfOBTXPGYwILTDYr7foOiMpJeLEnc/evMr/AR
VOldm6OviFZn8J2PHxqbD3lvWyeQjFVOo1m9/A5LGBkTM/T8PjQU13NqWML1xALo
mBWGzBPr2VI/+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:14 2025 by rpki-client