Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: GCXbNrKVrlvLi6BLmfJie/15c2ugfm21g2j8IPvWuTg=
Subject key identifier: 57:F9:90:B2:1B:D6:97:3A:4A:DB:E9:E2:BD:DB:80:30:AA:09:9C:DE
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 0194BCE0623978EFF108B36E1DC5AF6C3124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: WTmk97gV43KNqrrb8zCq2EGGNua0cGzU70kOAspoeIk=)
2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:62:39:78:ef:f1:08:b3:6e:1d:c5:af:6c:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=57f990b21bd6973a4adbe9e2bddb8030aa099cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:03:ae:77:23:37:9c:76:3a:89:3a:97:54:
f6:04:3d:7e:a0:d2:4d:9e:9b:97:91:bf:66:d6:a8:
5b:9a:63:b8:9b:f9:bb:76:bc:27:16:5c:df:36:b8:
45:e2:96:b7:2d:86:ea:c9:8a:0c:f5:82:e7:08:a2:
f6:c0:d0:09:8f:0f:5f:dc:c2:7d:e2:9a:91:43:b3:
0e:54:02:15:3d:1c:4e:26:56:e3:0b:c7:14:0a:f0:
22:7e:bf:11:1c:91:e3:00:cb:1a:96:98:5c:08:87:
cd:e6:45:4e:ca:91:4d:11:93:51:b9:f3:bf:32:d7:
44:c2:4d:bd:b5:32:04:79:45:57:f8:91:de:ce:73:
0e:07:65:df:c9:2e:6a:09:03:5d:1e:af:9e:46:4f:
43:be:34:a1:18:f0:77:18:f2:38:f4:2a:29:9e:2d:
d5:60:df:74:bd:1f:38:fa:c8:87:6f:eb:94:17:dc:
5b:a0:28:a0:de:e1:91:36:e6:5f:a0:14:a7:20:c3:
b6:6e:a1:ae:97:4d:68:f5:83:95:6b:63:28:e4:fe:
97:a6:d5:06:4c:0e:f6:0e:02:55:d0:d7:c4:5b:5d:
6f:2c:97:7d:61:21:eb:a3:2f:67:bd:10:df:5c:57:
f2:8f:58:e2:c2:15:52:05:31:90:02:ee:3d:57:ae:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:90:B2:1B:D6:97:3A:4A:DB:E9:E2:BD:DB:80:30:AA:09:9C:DE
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:13:e3:cd:3d:b3:b3:f0:43:13:8d:bb:62:0a:d0:e3:34:99:
b4:3a:47:19:46:30:6b:ea:13:92:42:95:56:e1:98:3f:8c:c6:
37:69:e0:3c:d2:5d:17:18:e6:73:40:6c:c4:71:13:eb:dc:eb:
4e:57:d5:07:1c:c4:7c:02:c3:67:d2:6a:65:9d:6c:1e:51:2b:
62:47:a2:0d:d3:96:f3:dd:1c:76:cd:ea:c4:cf:a6:8c:58:f3:
5c:8f:e6:71:d6:44:02:03:df:60:f8:57:d0:dc:6b:ce:8b:cc:
0b:9b:28:e9:e4:74:96:3f:5f:51:79:d2:8f:19:13:9d:fa:8b:
ad:bb:cc:83:91:2a:84:e8:ef:ed:a5:5d:bc:10:7f:2a:8e:28:
39:17:70:0d:98:c0:49:13:69:fc:c1:1a:6f:f8:20:80:44:1c:
42:b9:dc:f1:6e:33:0c:f0:34:ef:b4:11:08:31:52:5a:d1:99:
45:1d:1d:e5:2d:b4:c8:cd:9d:9f:36:42:3a:12:da:ad:81:0a:
16:cc:5a:dc:c8:22:cc:19:d7:d2:ce:9e:20:a9:9d:c0:6d:ac:
e8:10:23:db:ed:78:40:2f:b2:f7:7f:da:a0:c9:b1:e1:50:af:
0f:56:e2:0d:60:18:a2:70:7b:8b:14:db:80:0c:ec:1c:13:58:
8c:bd:80:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GI5eO/xCLNuHcWvbDEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx
ODNmNjEwHhcNMjUwMTMxMTUwMDA5WhcNMjUwMjAxMTUwMDA5WjAzMTEwLwYDVQQD
Eyg1N2Y5OTBiMjFiZDY5NzNhNGFkYmU5ZTJiZGRiODAzMGFhMDk5Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugkDrncjN5x2Ook6l1T2BD1+oNJN
npuXkb9m1qhbmmO4m/m7drwnFlzfNrhF4pa3LYbqyYoM9YLnCKL2wNAJjw9f3MJ9
4pqRQ7MOVAIVPRxOJlbjC8cUCvAifr8RHJHjAMsalphcCIfN5kVOypFNEZNRufO/
MtdEwk29tTIEeUVX+JHeznMOB2XfyS5qCQNdHq+eRk9DvjShGPB3GPI49Copni3V
YN90vR84+siHb+uUF9xboCig3uGRNuZfoBSnIMO2bqGul01o9YOVa2Mo5P6XptUG
TA72DgJV0NfEW11vLJd9YSHroy9nvRDfXFfyj1jiwhVSBTGQAu49V67m+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf5kLIb1pc6Stvp4r3bgDCqCZzeMB8GA1UdIwQY
MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt
MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx
LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhPjzT2z
s/BDE427YgrQ4zSZtDpHGUYwa+oTkkKVVuGYP4zGN2ngPNJdFxjmc0BsxHET69zr
TlfVBxzEfALDZ9JqZZ1sHlErYkeiDdOW890cds3qxM+mjFjzXI/mcdZEAgPfYPhX
0NxrzovMC5so6eR0lj9fUXnSjxkTnfqLrbvMg5EqhOjv7aVdvBB/Ko4oORdwDZjA
SRNp/MEab/gggEQcQrnc8W4zDPA077QRCDFSWtGZRR0d5S20yM2dnzZCOhLarYEK
Fsxa3MgizBnX0s6eIKmdwG2s6BAj2+14QC+y93/aoMmx4VCvD1biDWAYonB7ixTb
gAzsHBNYjL2Asw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:30 2025 by rpki-client