Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: csRlZsKIAOn5pE5RuiG7tRD3/pR2tPDa5+cy6EZZf2I=
Subject key identifier: 27:20:99:E9:1C:C8:E5:46:2D:4D:6E:0B:C1:D4:21:2D:0B:7C:56:5D
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 0194BD4E4A75953918A4606A9FCF3B1FDAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0BBB
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: yHZfo7Xpu7RXZXVnAjB3hAbJMrqI8lPFGVxx1h7dtxA=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:75:95:39:18:a4:60:6a:9f:cf:3b:1f:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=272099e91cc8e5462d4d6e0bc1d4212d0b7c565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:c3:2d:b5:50:70:fd:d3:f4:f3:06:72:38:
82:e2:35:79:e3:1b:6c:14:e2:8e:09:c9:9e:3e:03:
d3:5c:cb:72:fd:12:08:e5:15:34:82:b8:8e:5a:fe:
de:df:1a:fd:46:fa:9f:88:e9:a1:fe:f8:8c:45:4e:
0b:8e:31:65:c6:82:3a:05:e0:0c:ce:df:15:2e:6a:
eb:87:ea:6b:f4:e2:26:ee:e5:21:a7:9f:8d:a4:ef:
7a:9c:34:b8:8f:50:50:d3:0a:e4:0d:b3:e6:86:71:
4e:a5:79:a5:4a:ce:47:ae:e5:3a:df:ea:b6:fc:1e:
e7:e9:22:98:33:90:86:9e:df:eb:9b:80:b3:d8:92:
60:81:aa:f1:07:72:0f:06:bb:ac:61:9a:f4:e0:97:
b3:1e:d3:be:24:92:fc:1d:46:56:36:7a:60:31:f5:
80:a2:dc:4c:0b:9c:3a:ea:07:f0:17:f7:73:82:23:
b7:a3:10:cd:b4:25:33:bb:15:e1:8c:27:12:ea:5e:
1c:ec:e0:87:8d:1b:31:31:8b:72:88:ea:ce:b8:95:
d9:24:6c:9d:fb:1b:1f:fe:3a:d3:af:6c:2b:04:45:
61:74:96:89:27:83:de:ca:d1:bb:69:f6:65:8e:6e:
63:0f:96:b9:45:14:85:60:25:b4:df:04:11:70:3b:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:99:E9:1C:C8:E5:46:2D:4D:6E:0B:C1:D4:21:2D:0B:7C:56:5D
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:95:66:7b:f5:07:3c:2e:b5:21:6e:71:0e:69:c5:e2:0e:46:
1c:a4:1d:4d:8c:b2:08:8c:ba:69:99:39:ff:e3:63:58:b7:1b:
e5:5f:ec:04:57:1b:92:80:e7:2c:98:a1:62:ee:de:4c:ff:e7:
99:8e:e6:b6:80:79:5c:96:93:9e:fb:2d:21:11:b2:d3:94:fe:
b6:25:dc:67:70:82:33:3b:1d:bb:56:e7:15:d6:50:61:b2:4e:
a7:e6:75:32:ed:8d:f6:93:3e:59:d6:36:b6:b5:cf:a4:c9:be:
a2:97:b7:29:b9:15:9a:ee:a4:bc:c6:e4:4b:ba:d9:22:e0:4d:
9b:f0:cf:53:07:6f:f1:6a:c7:c0:2d:08:9d:02:b1:60:1f:be:
98:5e:a2:b6:4f:85:e3:f1:20:63:28:6b:a5:a9:cb:4c:f8:ef:
bc:5f:7b:68:0d:72:c3:7a:89:bb:1d:b6:bd:b0:3d:42:ae:6c:
4e:4f:93:32:b7:5a:fe:31:bb:16:41:f7:f4:66:f5:ed:38:9e:
b0:69:81:a8:d1:a4:e9:cc:ea:71:8e:ec:f4:4a:0e:13:e9:94:
3d:4a:8c:67:7f:5e:94:f6:95:24:b4:5f:b3:27:f4:1f:61:3f:
9a:0b:cb:6c:03:f4:d0:bb:0f:d4:99:30:cb:4c:21:8d:25:9b:
6c:49:f0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tkp1lTkYpGBqn887H9r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi
ZmMyNzIwHhcNMjUwMTMxMTcwMDEyWhcNMjUwMjAxMTcwMDEyWjAzMTEwLwYDVQQD
EygyNzIwOTllOTFjYzhlNTQ2MmQ0ZDZlMGJjMWQ0MjEyZDBiN2M1NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX/DLbVQcP3T9PMGcjiC4jV54xts
FOKOCcmePgPTXMty/RII5RU0griOWv7e3xr9RvqfiOmh/viMRU4LjjFlxoI6BeAM
zt8VLmrrh+pr9OIm7uUhp5+NpO96nDS4j1BQ0wrkDbPmhnFOpXmlSs5HruU63+q2
/B7n6SKYM5CGnt/rm4Cz2JJggarxB3IPBrusYZr04JezHtO+JJL8HUZWNnpgMfWA
otxMC5w66gfwF/dzgiO3oxDNtCUzuxXhjCcS6l4c7OCHjRsxMYtyiOrOuJXZJGyd
+xsf/jrTr2wrBEVhdJaJJ4PeytG7afZljm5jD5a5RRSFYCW03wQRcDtRswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcgmekcyOVGLU1uC8HUIS0LfFZdMB8GA1UdIwQY
MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt
ZTE4N2JlOWI2YzIzLzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz
LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5Vme/UH
PC61IW5xDmnF4g5GHKQdTYyyCIy6aZk5/+NjWLcb5V/sBFcbkoDnLJihYu7eTP/n
mY7mtoB5XJaTnvstIRGy05T+tiXcZ3CCMzsdu1bnFdZQYbJOp+Z1Mu2N9pM+WdY2
trXPpMm+ope3KbkVmu6kvMbkS7rZIuBNm/DPUwdv8WrHwC0InQKxYB++mF6itk+F
4/EgYyhrpanLTPjvvF97aA1yw3qJux22vbA9Qq5sTk+TMrda/jG7FkH39Gb17Tie
sGmBqNGk6czqcY7s9EoOE+mUPUqMZ39elPaVJLRfsyf0H2E/mgvLbAP00LsP1Jkw
y0whjSWbbEnwUQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:18 2025 by rpki-client