Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
File: hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft (raw, json)
Hash identifier: KX6FlZ6/ID3PLO4dvh2WDl9n0fw4yEY8j3PRktbcfG8=
Subject key identifier: 45:68:3C:7F:F8:08:60:D9:EC:D6:E5:30:0F:BA:3B:70:F5:69:62:AE
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Certificate issuer: /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial: 0194BCA9AE472C40D5DD4356597804681342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
Manifest number: 1383
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: MbStNmXQF3r8BjIEIY6alBv8fXM.roa (hash: qBMHoSNp30r52ggSq1NF5Ja+ou1kpfZ0GNdRTXuZlMk=)
2: hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl (hash: oFTD/0Qli+kRdVQwH6O+v/YOBm8/9YHwBoSLWlylCbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:47:2c:40:d5:dd:43:56:59:78:04:68:13:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=45683c7ff80860d9ecd6e5300fba3b70f56962ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:c6:f5:88:22:5b:1b:56:59:21:81:07:ff:
df:39:16:b9:02:b0:0e:87:db:f7:45:d4:a2:bd:43:
cc:0f:4f:db:cf:fd:97:c2:a8:2b:3d:0d:09:a0:9f:
6a:ff:8a:25:d3:35:6b:41:33:66:db:1f:04:e2:68:
e7:e3:58:8c:27:c7:c6:11:44:9a:af:67:6d:d2:98:
00:7e:d7:4a:5d:04:32:1f:fb:08:6b:5f:35:27:e2:
9f:24:55:73:4b:e2:11:29:d7:b3:48:40:b2:23:0a:
72:f5:7c:a6:29:66:ce:27:ee:45:dc:e5:a5:01:03:
85:41:20:c6:b6:21:51:7b:2d:f4:fe:d1:56:40:29:
00:f3:13:a2:5b:76:c2:ef:8a:7a:a9:ca:0e:10:66:
2b:c4:a4:88:78:96:49:00:72:24:50:de:34:2c:60:
e8:e1:e9:ae:44:c6:86:16:a1:d2:61:b3:3a:a2:4b:
85:ff:d1:55:ee:f3:8a:70:54:bc:5b:a5:39:82:71:
22:80:17:75:9c:22:3e:ee:6e:83:8c:27:e6:b8:29:
ec:1d:d2:45:fb:e1:72:8a:8a:ca:b0:8d:aa:1d:07:
5d:4d:a9:7e:66:79:e5:0b:77:c3:7f:32:02:9a:c1:
e9:08:9a:6f:ed:c2:4e:8d:39:d8:23:b9:18:e9:fd:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:3C:7F:F8:08:60:D9:EC:D6:E5:30:0F:BA:3B:70:F5:69:62:AE
X509v3 Authority Key Identifier:
keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:8b:61:63:e3:73:0b:0e:ac:bc:ce:29:d0:69:05:c6:0f:
fd:9f:24:20:57:b8:5c:b9:5b:e6:f2:bf:fa:b2:a2:fb:b0:f4:
c9:f6:65:3f:f7:4d:63:e0:a6:aa:fe:16:1f:6b:27:47:c6:a5:
d2:7d:76:3c:34:f3:61:e5:96:44:23:66:f1:23:d8:c7:8e:39:
4a:34:07:07:52:e9:6e:7f:19:56:90:33:67:bf:0b:ea:2b:01:
70:08:39:c6:c2:88:a4:fd:b8:3d:6b:85:d6:ef:b7:64:ff:2f:
14:78:a6:fc:3b:a1:2c:fd:b3:ab:34:ab:07:0a:6e:d9:28:52:
d8:83:b9:37:6b:b2:e2:f5:f9:70:d3:37:79:a4:ce:b1:62:15:
6b:72:1f:9a:fb:28:29:72:c8:26:cb:57:1b:31:58:0b:1e:af:
53:09:8f:6f:dc:81:b0:f7:24:fe:27:6b:56:1d:f4:76:fe:b1:
2c:33:c0:82:b0:64:e8:05:48:bd:f0:d3:b4:cb:40:d5:8e:23:
61:15:a3:d9:cb:d6:ed:4f:2d:02:89:d3:8b:d5:2e:b0:ee:f5:
ac:06:56:f5:86:e2:0d:b2:28:3f:0e:72:6a:53:b9:7d:5f:e5:
b7:9c:0d:51:0d:53:88:41:e8:cf:b3:75:b4:3d:24:42:b3:8a:
a3:14:6d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qa5HLEDV3UNWWXgEaBNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5
NTA2ZjcwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
Eyg0NTY4M2M3ZmY4MDg2MGQ5ZWNkNmU1MzAwZmJhM2I3MGY1Njk2MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PXG9YgiWxtWWSGBB//fORa5ArAO
h9v3RdSivUPMD0/bz/2XwqgrPQ0JoJ9q/4ol0zVrQTNm2x8E4mjn41iMJ8fGEUSa
r2dt0pgAftdKXQQyH/sIa181J+KfJFVzS+IRKdezSECyIwpy9XymKWbOJ+5F3OWl
AQOFQSDGtiFRey30/tFWQCkA8xOiW3bC74p6qcoOEGYrxKSIeJZJAHIkUN40LGDo
4emuRMaGFqHSYbM6okuF/9FV7vOKcFS8W6U5gnEigBd1nCI+7m6DjCfmuCnsHdJF
++FyiorKsI2qHQddTal+ZnnlC3fDfzICmsHpCJpv7cJOjTnYI7kY6f1OjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVoPH/4CGDZ7NblMA+6O3D1aWKuMB8GA1UdIwQY
MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt
MDU5ZGJjYzhkY2VmLzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm
LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAqLYWPj
cwsOrLzOKdBpBcYP/Z8kIFe4XLlb5vK/+rKi+7D0yfZlP/dNY+Cmqv4WH2snR8al
0n12PDTzYeWWRCNm8SPYx445SjQHB1Lpbn8ZVpAzZ78L6isBcAg5xsKIpP24PWuF
1u+3ZP8vFHim/DuhLP2zqzSrBwpu2ShS2IO5N2uy4vX5cNM3eaTOsWIVa3Ifmvso
KXLIJstXGzFYCx6vUwmPb9yBsPck/idrVh30dv6xLDPAgrBk6AVIvfDTtMtA1Y4j
YRWj2cvW7U8tAonTi9UusO71rAZW9YbiDbIoPw5yalO5fV/lt5wNUQ1TiEHoz7N1
tD0kQrOKoxRtHg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:02 2025 by rpki-client