Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: +NrlwNvxyBMBOlvynfgc6A6TjSzG9e1tOLgmrmvC1I0=
Subject key identifier: A5:7D:FF:54:3D:91:55:F7:1C:B1:AD:5A:98:8F:B2:13:58:38:21:85
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 0194BCE0A2104F26A53B0A96EEFABAEA53B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 12E2
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: YHF/XxddCFfBxWaSB3nrEta2OgYkzQPeJ4XySAsrv60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:10:4f:26:a5:3b:0a:96:ee:fa:ba:ea:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=a57dff543d9155f71cb1ad5a988fb21358382185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:26:da:78:75:65:46:b1:30:c7:76:51:6e:
a4:68:5e:8e:68:a9:50:cc:e9:63:95:5b:d6:11:52:
1f:e3:4b:b0:78:30:a5:bd:02:d1:62:97:bc:8e:9e:
00:3c:32:5a:3e:b9:fa:1c:58:07:45:cf:ec:10:ac:
9e:1c:83:44:28:bb:ff:4e:16:08:57:cc:d4:ff:91:
7c:4b:46:86:e3:b7:f0:a1:e2:b0:37:a5:b2:a6:ce:
4b:f4:3f:80:f5:83:89:ea:db:b1:3e:11:29:9b:fa:
6a:65:cc:7f:17:c3:69:d2:00:d6:ca:07:e0:28:c3:
eb:43:7f:33:aa:7d:be:7f:cc:51:0e:6a:8b:46:ae:
8c:df:e8:fe:a2:e0:f7:e5:36:0d:63:53:1d:db:6f:
22:8f:64:5d:5d:e2:a4:66:49:e2:8f:f7:2d:54:ad:
3c:6d:46:5e:d3:4a:bb:46:c6:6a:31:a4:3a:82:1b:
43:c0:a1:34:9f:4b:50:44:03:6d:b2:91:47:a7:27:
2b:fa:9f:a9:b2:38:d6:22:d2:e4:e0:09:a3:d1:16:
06:4e:a3:9b:05:db:7f:cb:c2:00:fa:49:b9:e6:e6:
3a:47:65:b6:2d:ab:29:1c:06:f9:4e:57:8b:f2:2b:
db:f8:f1:63:f7:23:68:7f:e9:47:c2:c9:7a:b1:e7:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:FF:54:3D:91:55:F7:1C:B1:AD:5A:98:8F:B2:13:58:38:21:85
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:f0:6d:0f:b2:f6:25:9b:cd:aa:91:59:e6:d9:dc:cc:1a:
f6:bc:a7:28:62:44:e3:db:09:8d:66:42:d9:c4:2e:4c:47:bb:
59:17:ff:4a:9e:72:dc:52:8f:9d:5d:ac:f3:fb:a5:ce:d9:d6:
fa:ab:61:b0:fb:a8:6b:98:c4:ff:dd:c8:03:3d:37:b1:73:71:
d0:d8:20:f8:14:a7:f6:e6:15:7f:55:c6:3d:ba:cf:dc:78:5e:
e0:65:7f:db:4a:21:3b:92:b6:63:f1:83:4f:80:86:c7:94:f4:
3c:14:cf:f9:bf:87:38:42:28:d4:43:37:15:bf:b7:8e:17:d7:
d0:48:1b:3f:de:9e:57:1e:45:55:6b:70:25:4e:9e:20:dc:fd:
73:c7:8d:bc:b2:ab:bb:7d:14:e0:f3:1c:b4:91:f2:a3:f2:41:
83:65:ac:62:05:9a:88:0c:ed:f6:2e:41:b0:fd:6d:b7:19:63:
c6:4e:9d:6a:cc:b8:41:b6:a3:b9:ab:9e:ff:f1:58:cb:5b:79:
51:2b:ef:d5:f1:af:59:8a:ac:63:de:c5:16:27:28:71:31:9f:
78:20:2d:6d:23:52:f2:b0:72:6d:26:ac:5d:4d:37:d4:ed:19:
1c:b5:4b:d9:84:d1:05:e4:fa:03:4c:aa:47:e7:06:5b:f2:8c:
57:ba:0c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KIQTyalOwqW7vq66lO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGQxMjk0MDFiMjY5M2EzOGQ1YjQzNzNkYzc2MDdiZjg1
YjhhNmUwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EyhhNTdkZmY1NDNkOTE1NWY3MWNiMWFkNWE5ODhmYjIxMzU4MzgyMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6gm2nh1ZUaxMMd2UW6kaF6OaKlQ
zOljlVvWEVIf40uweDClvQLRYpe8jp4APDJaPrn6HFgHRc/sEKyeHINEKLv/ThYI
V8zU/5F8S0aG47fwoeKwN6Wyps5L9D+A9YOJ6tuxPhEpm/pqZcx/F8Np0gDWygfg
KMPrQ38zqn2+f8xRDmqLRq6M3+j+ouD35TYNY1Md228ij2RdXeKkZknij/ctVK08
bUZe00q7RsZqMaQ6ghtDwKE0n0tQRANtspFHpycr+p+psjjWItLk4Amj0RYGTqOb
Bdt/y8IA+km55uY6R2W2LaspHAb5TleL8ivb+PFj9yNof+lHwsl6sedMXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV9/1Q9kVX3HLGtWpiPshNYOCGFMB8GA1UdIwQY
MBaAFKYNEpQBsmk6ONW0Nz3HYHv4W4puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYt
OWMyYmJkOGM5NDk2LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYtOWMyYmJkOGM5NDk2
LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCPwbQ+y
9iWbzaqRWebZ3Mwa9rynKGJE49sJjWZC2cQuTEe7WRf/Sp5y3FKPnV2s8/ulztnW
+qthsPuoa5jE/93IAz03sXNx0Ngg+BSn9uYVf1XGPbrP3Hhe4GV/20ohO5K2Y/GD
T4CGx5T0PBTP+b+HOEIo1EM3Fb+3jhfX0EgbP96eVx5FVWtwJU6eINz9c8eNvLKr
u30U4PMctJHyo/JBg2WsYgWaiAzt9i5BsP1ttxljxk6dasy4Qbajuaue//FYy1t5
USvv1fGvWYqsY97FFicocTGfeCAtbSNS8rBybSasXU031O0ZHLVL2YTRBeT6A0yq
R+cGW/KMV7oMBg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:04 2025 by rpki-client