Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: xot0L4mobp+bI0IQUsmn5kq3O+SlrYGWo0x13dMiTZo=
Subject key identifier: E5:20:CD:AE:FD:88:0C:BF:EC:4C:F5:38:9E:A5:D9:74:84:1C:50:E8
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 0194BCE08E677B2A32BCA87F5739BCE6D406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: DdebdMSt8cJEgIKKC5XOhGtKhKlr+OfMcdFu8ynRoI8=)
2: o6rhv_3B72g00uq2IPDaZ2Jd1ks.roa (hash: Fo46CBCFKZszIDa+exG/2GR8P/sXWsoYlOaHRAWOGNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8e:67:7b:2a:32:bc:a8:7f:57:39:bc:e6:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=e520cdaefd880cbfec4cf5389ea5d974841c50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:51:cb:09:7c:b4:16:a9:c6:e5:c1:e9:58:
21:c9:43:a0:24:b6:b3:54:5f:62:25:64:d1:72:14:
5d:69:13:b3:43:fc:5d:bb:fd:a2:0a:8b:bd:5e:b0:
fd:d8:51:6c:94:5a:5d:97:47:d2:cc:56:da:6f:51:
a8:a1:69:39:dd:2a:7c:d6:d5:3b:ad:9f:27:93:00:
07:14:19:98:35:b8:1d:35:7e:d7:f2:c4:71:b2:67:
3d:14:2c:be:0a:dc:07:45:2e:11:de:16:61:9d:45:
d2:d1:68:a6:ac:4f:50:3e:a5:26:5d:88:f4:97:65:
40:f5:05:73:f5:c0:78:af:8d:58:e5:c5:94:8f:13:
f7:fc:85:8d:29:62:50:e2:58:9b:1c:13:5e:82:58:
27:df:cc:59:58:3a:f8:79:e5:68:34:49:42:96:c2:
67:c7:e6:cc:3a:3b:a7:43:88:d5:5a:8a:c0:0d:e4:
d0:a6:16:c3:26:19:2c:35:99:54:a6:51:bc:47:fc:
e4:a3:e3:07:c6:81:ef:ed:e8:32:70:1a:84:30:ae:
c5:92:3c:c6:98:27:fb:39:e3:da:32:3f:ef:ac:a4:
22:1e:56:93:75:8e:a0:16:ad:16:61:a9:e9:7e:84:
37:bb:c4:66:91:98:b9:48:de:8f:f3:7e:fc:53:3f:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:CD:AE:FD:88:0C:BF:EC:4C:F5:38:9E:A5:D9:74:84:1C:50:E8
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:49:7f:3f:be:94:81:ec:0d:21:0e:81:b3:56:4b:85:c6:
3b:03:29:b6:7d:c2:d6:a8:ea:84:84:be:a2:18:b0:b4:38:b2:
b2:fc:88:2f:17:dd:49:cd:23:03:1b:f6:64:92:ae:d5:a5:da:
0c:47:5a:a5:f3:c5:c2:50:ae:3a:7d:49:e0:80:e0:3d:be:c3:
b5:69:f3:62:ea:c6:0b:60:fe:6a:b4:74:69:6e:af:77:77:0a:
5f:bc:e9:75:c7:91:37:a5:12:4b:ad:02:ca:76:b6:d8:d1:62:
9d:79:d9:e1:97:44:98:c3:fa:ae:25:3b:0b:69:81:4d:78:b5:
ae:d2:42:77:55:a2:c5:08:82:16:32:9a:7f:ce:97:54:54:33:
88:57:40:31:22:9a:5a:a5:72:da:2c:d5:bd:12:65:aa:ff:cf:
45:00:97:5e:39:85:41:b5:88:6b:85:95:af:a1:6f:65:cb:49:
d6:6b:31:14:0f:2d:db:ac:95:7c:ad:e6:ea:23:a9:a1:ee:58:
3b:fb:31:45:56:b5:55:e5:ea:a6:11:36:83:1d:95:b1:f5:76:
91:d1:8a:c4:ba:ce:5e:8f:b6:cd:a2:28:95:25:40:b1:96:c1:
f1:e0:81:07:31:9e:07:79:2e:00:46:9e:1e:b9:23:34:4e:69:
a5:ec:33:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84I5neyoyvKh/Vzm85tQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk
ZjM3MmQwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EyhlNTIwY2RhZWZkODgwY2JmZWM0Y2Y1Mzg5ZWE1ZDk3NDg0MWM1MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xRywl8tBapxuXB6VghyUOgJLaz
VF9iJWTRchRdaROzQ/xdu/2iCou9XrD92FFslFpdl0fSzFbab1GooWk53Sp81tU7
rZ8nkwAHFBmYNbgdNX7X8sRxsmc9FCy+CtwHRS4R3hZhnUXS0WimrE9QPqUmXYj0
l2VA9QVz9cB4r41Y5cWUjxP3/IWNKWJQ4libHBNeglgn38xZWDr4eeVoNElClsJn
x+bMOjunQ4jVWorADeTQphbDJhksNZlUplG8R/zko+MHxoHv7egycBqEMK7FkjzG
mCf7OePaMj/vrKQiHlaTdY6gFq0WYanpfoQ3u8RmkZi5SN6P8378Uz+BuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUgza79iAy/7Ez1OJ6l2XSEHFDoMB8GA1UdIwQY
MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt
ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw
LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHulJfz++
lIHsDSEOgbNWS4XGOwMptn3C1qjqhIS+ohiwtDiysvyILxfdSc0jAxv2ZJKu1aXa
DEdapfPFwlCuOn1J4IDgPb7DtWnzYurGC2D+arR0aW6vd3cKX7zpdceRN6USS60C
yna22NFinXnZ4ZdEmMP6riU7C2mBTXi1rtJCd1WixQiCFjKaf86XVFQziFdAMSKa
WqVy2izVvRJlqv/PRQCXXjmFQbWIa4WVr6FvZctJ1msxFA8t26yVfK3m6iOpoe5Y
O/sxRVa1VeXqphE2gx2VsfV2kdGKxLrOXo+2zaIolSVAsZbB8eCBBzGeB3kuAEae
HrkjNE5ppewzkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:54 2025 by rpki-client