Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: O9+qJs5TyHWGq2k4Kt0Xq9vVWer3NXkn30MulG5JBzs=
Subject key identifier: C0:0E:E1:C5:92:B2:E4:DD:01:1F:19:38:74:ED:9E:22:0D:F2:48:9E
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 0194BC731CBDE3B96952159B81971B21A8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 06BA
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: 5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa (hash: c0Zm1e9RjgR5PBfasK6Q1TzGKpfYhKyszQz9aW+gUGA=)
2: K2099PO4iAtvBzGlnwl1axWP2hE.roa (hash: 6aTZlr/sfRYyJqs+vE8kRpR5W2QDPbSiPNBoLmmWJlA=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: NugsPO+gPd4JEojqrQE5j7rRodRcqCPdv4n2JMYaFWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1c:bd:e3:b9:69:52:15:9b:81:97:1b:21:a8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=c00ee1c592b2e4dd011f193874ed9e220df2489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:5d:be:e9:1c:32:05:29:f2:0d:5b:7f:9a:
14:8b:a1:1e:2c:e8:7d:43:bf:12:8e:e3:98:44:e0:
51:eb:7d:51:78:98:ca:7a:35:13:e7:b4:58:71:a3:
e5:65:48:3a:39:e3:b1:d3:34:d7:42:a9:03:9a:01:
72:35:a9:9c:2e:39:11:a9:96:00:c6:13:99:c0:39:
57:02:46:2e:03:b3:a8:73:39:bc:44:dd:ba:98:93:
7e:7e:cd:b4:a3:ec:8d:92:fd:fc:f6:46:39:79:95:
e5:6b:20:49:62:ae:df:8f:03:85:64:44:eb:15:e9:
8e:90:4c:07:67:96:d7:3c:ea:4f:e8:e9:f0:b2:08:
4b:e7:e7:ef:a8:e5:a9:ad:23:a8:74:e0:62:32:03:
77:29:eb:b6:7f:ea:51:db:60:d9:dd:66:be:df:6f:
f8:9f:22:f4:32:7d:b1:ce:ed:62:1a:42:d7:f0:43:
66:db:e9:c2:af:d9:f0:f1:3a:8d:67:a5:eb:81:e4:
d4:7d:7b:78:fd:26:b1:a4:e6:fe:4c:ca:0c:9f:96:
14:ee:74:6b:4a:1f:06:e2:1e:df:63:cd:44:f4:ea:
d4:12:fa:55:2f:a9:b9:a5:b3:b3:3c:43:c7:c5:27:
98:3e:89:1c:fa:a8:fa:a4:58:86:5a:89:bf:3b:6e:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0E:E1:C5:92:B2:E4:DD:01:1F:19:38:74:ED:9E:22:0D:F2:48:9E
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d8:30:4a:9d:b4:ac:b0:f7:4f:9d:e0:e2:58:0a:50:1d:5d:
ed:50:a1:6b:72:b6:b0:ea:76:df:09:c0:b6:64:2b:43:22:a2:
36:fe:15:6d:56:a9:ea:ab:2b:09:d4:ef:8f:81:c5:36:6f:96:
cf:4b:b4:e1:d5:db:a1:8c:a5:e6:03:7f:79:cb:2a:27:92:8b:
00:b4:9d:56:77:32:a9:bb:53:0e:16:f8:3d:19:a3:f2:c9:31:
ef:8d:6a:4c:32:c0:9d:93:40:1b:05:82:a5:c6:a3:ce:2d:73:
2a:f1:c4:66:a5:e0:86:fb:d8:91:a2:3a:d6:de:05:82:12:26:
ea:1c:5d:f7:76:e3:cc:fe:68:80:63:09:8f:01:bd:24:b6:ed:
f3:16:d2:78:39:4c:10:1c:65:66:50:2c:1e:b7:4e:81:af:4f:
d5:60:e0:e1:ed:8e:74:80:d4:20:c8:22:86:42:ff:6b:72:19:
bb:54:68:a8:34:73:7a:41:9c:36:b8:a5:ef:b2:82:0b:63:2d:
73:78:bd:eb:92:77:90:c3:6c:5b:47:5c:09:07:10:e0:81:9b:
dd:8b:b1:78:05:ff:b4:23:84:05:dc:00:6d:61:e3:d9:c8:b1:
94:a9:57:be:7c:c3:a4:03:fe:6f:4d:84:54:d5:6c:30:d6:60:
15:22:88:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxy947lpUhWbgZcbIajNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni
NmIxMGEwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EyhjMDBlZTFjNTkyYjJlNGRkMDExZjE5Mzg3NGVkOWUyMjBkZjI0ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhddvukcMgUp8g1bf5oUi6EeLOh9
Q78SjuOYROBR631ReJjKejUT57RYcaPlZUg6OeOx0zTXQqkDmgFyNamcLjkRqZYA
xhOZwDlXAkYuA7Ooczm8RN26mJN+fs20o+yNkv389kY5eZXlayBJYq7fjwOFZETr
FemOkEwHZ5bXPOpP6OnwsghL5+fvqOWprSOodOBiMgN3Keu2f+pR22DZ3Wa+32/4
nyL0Mn2xzu1iGkLX8ENm2+nCr9nw8TqNZ6XrgeTUfXt4/SaxpOb+TMoMn5YU7nRr
Sh8G4h7fY81E9OrUEvpVL6m5pbOzPEPHxSeYPokc+qj6pFiGWom/O24rEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAO4cWSsuTdAR8ZOHTtniIN8kieMB8GA1UdIwQY
MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It
YzYxNjFjZTM5NWFmLzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm
LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydgwSp20
rLD3T53g4lgKUB1d7VCha3K2sOp23wnAtmQrQyKiNv4VbVap6qsrCdTvj4HFNm+W
z0u04dXboYyl5gN/ecsqJ5KLALSdVncyqbtTDhb4PRmj8skx741qTDLAnZNAGwWC
pcajzi1zKvHEZqXghvvYkaI61t4FghIm6hxd93bjzP5ogGMJjwG9JLbt8xbSeDlM
EBxlZlAsHrdOga9P1WDg4e2OdIDUIMgihkL/a3IZu1RoqDRzekGcNril77KCC2Mt
c3i965J3kMNsW0dcCQcQ4IGb3YuxeAX/tCOEBdwAbWHj2cixlKlXvnzDpAP+b02E
VNVsMNZgFSKIgw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:40 2025 by rpki-client