Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: 2pn9+3SWaxXNohH3dz+LwLXVmhI9f79nStND2rUOuQo=
Subject key identifier: 8F:32:2D:D8:EB:27:5A:D1:A4:24:78:7C:5C:74:8D:F0:D6:C1:CB:35
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 0194BD8522962486194E788E60ED52FAB64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 0D9F
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: TwlfNDSczGUl34rteJgSuHXTO94.roa (hash: gBwK3ZQY+snmvfWIA0VgAvr4/MBSK9FpiTLSXZrUgpg=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: /IO5eYBVcUVCYymIvxsoS+KWm76L7Xit5BoH7QC7HeU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:22:96:24:86:19:4e:78:8e:60:ed:52:fa:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=8f322dd8eb275ad1a424787c5c748df0d6c1cb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:11:b3:60:78:97:4a:7b:2f:3e:37:82:59:
4d:dc:ea:f9:83:1c:df:59:ac:fc:e7:d8:68:b3:5b:
85:ad:c6:c8:d9:d0:e6:f1:e8:10:e0:9b:48:4b:c1:
21:16:a8:2c:66:d1:e1:10:77:e0:44:11:86:67:59:
f8:fa:e4:53:39:af:8a:e4:7e:9a:6a:6c:69:3c:45:
b7:3b:cb:99:93:d1:cb:fc:2d:67:b8:0f:32:3a:2f:
ad:19:8a:05:5d:58:e5:79:c4:3d:49:d8:b5:7c:c7:
3d:6f:db:8e:91:7b:00:f4:c6:0e:28:c7:80:6b:8e:
7c:56:8e:bb:c3:e3:16:c9:68:dd:ad:d7:8e:28:b7:
e7:05:27:c3:02:97:1d:1d:3e:24:da:22:fa:88:62:
bb:ce:77:09:a9:2f:47:9d:01:5c:be:b8:76:e2:67:
2a:f5:6e:63:62:2c:39:08:fb:74:21:a0:6c:fe:2c:
58:80:56:38:9c:53:22:b3:87:9b:f6:cc:5a:c2:19:
20:69:11:03:7e:56:8e:26:21:c9:d1:04:ac:55:f6:
7f:b7:18:be:4b:f4:6b:ef:2e:b1:0a:e5:51:e0:31:
06:e9:82:b5:13:36:04:3f:6c:fe:70:cd:cb:33:21:
4e:ff:47:2b:24:c4:93:f9:64:7d:9c:67:ef:c0:09:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:2D:D8:EB:27:5A:D1:A4:24:78:7C:5C:74:8D:F0:D6:C1:CB:35
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:67:0c:16:55:a0:a7:91:7a:1e:4b:e6:7e:fd:92:e1:37:f8:
6d:07:72:6c:51:86:17:02:e5:b8:39:98:e2:5c:ca:03:63:22:
cd:72:80:c6:ce:ba:d9:56:01:19:9e:51:09:01:18:87:13:f9:
e5:98:64:ec:a3:dd:ad:90:b0:5f:f1:6c:f5:83:25:2d:a4:a2:
b6:56:5b:27:08:8b:c2:a7:c4:3a:ad:a5:eb:d1:2c:5e:fd:a9:
34:b8:27:67:03:3d:cb:6a:d1:43:22:d6:7d:ca:4e:51:38:f4:
42:1f:99:03:c2:06:ee:6f:27:4a:31:48:3b:46:b0:3d:93:70:
25:40:d3:88:56:08:64:73:11:86:e5:41:bc:6e:6a:08:8c:26:
fc:4f:ab:bd:84:f2:c5:37:2a:05:a4:c4:b4:2e:8a:77:e5:cf:
f8:a6:46:00:b6:f7:fe:a0:ae:e9:da:74:9c:ae:13:d7:66:fa:
86:84:73:5b:3c:c9:15:84:95:67:d9:e1:60:f5:02:ac:2b:74:
c5:4e:43:05:f1:70:e6:c1:cb:e8:57:6c:5a:23:a3:f0:cd:52:
90:f5:27:96:5e:c7:af:30:69:bf:4a:53:ea:b1:f2:f7:23:f6:
2b:a8:d6:77:c2:cc:ce:28:9e:63:5b:6b:f9:d5:be:50:c7:4c:
02:ef:ce:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSKWJIYZTniOYO1S+rZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjUwMTMxMTgwMDA2WhcNMjUwMjAxMTgwMDA2WjAzMTEwLwYDVQQD
Eyg4ZjMyMmRkOGViMjc1YWQxYTQyNDc4N2M1Yzc0OGRmMGQ2YzFjYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0URs2B4l0p7Lz43gllN3Or5gxzf
Waz859hos1uFrcbI2dDm8egQ4JtIS8EhFqgsZtHhEHfgRBGGZ1n4+uRTOa+K5H6a
amxpPEW3O8uZk9HL/C1nuA8yOi+tGYoFXVjlecQ9Sdi1fMc9b9uOkXsA9MYOKMeA
a458Vo67w+MWyWjdrdeOKLfnBSfDApcdHT4k2iL6iGK7zncJqS9HnQFcvrh24mcq
9W5jYiw5CPt0IaBs/ixYgFY4nFMis4eb9sxawhkgaREDflaOJiHJ0QSsVfZ/txi+
S/Rr7y6xCuVR4DEG6YK1EzYEP2z+cM3LMyFO/0crJMST+WR9nGfvwAk/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8yLdjrJ1rRpCR4fFx0jfDWwcs1MB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWcMFlWg
p5F6Hkvmfv2S4Tf4bQdybFGGFwLluDmY4lzKA2MizXKAxs662VYBGZ5RCQEYhxP5
5Zhk7KPdrZCwX/Fs9YMlLaSitlZbJwiLwqfEOq2l69EsXv2pNLgnZwM9y2rRQyLW
fcpOUTj0Qh+ZA8IG7m8nSjFIO0awPZNwJUDTiFYIZHMRhuVBvG5qCIwm/E+rvYTy
xTcqBaTEtC6Kd+XP+KZGALb3/qCu6dp0nK4T12b6hoRzWzzJFYSVZ9nhYPUCrCt0
xU5DBfFw5sHL6FdsWiOj8M1SkPUnll7HrzBpv0pT6rHy9yP2K6jWd8LMziieY1tr
+dW+UMdMAu/OLA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:49 2025 by rpki-client