Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: HrykTpTya2QCgcgqQrKMSpmqHors7PoG9mbmEjhtIz0=
Subject key identifier: 2C:E8:BA:4A:7F:42:F3:E5:63:71:AE:F8:FD:7A:D1:5D:2A:D1:35:A9
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 0194BC3C43E3436A944AE7AAD1DAD532869D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 085F
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: UVCanlIj9ABomA7dYkoowGRxeVq5GYi0UMIhNjGu1eQ=)
2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:e3:43:6a:94:4a:e7:aa:d1:da:d5:32:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=2ce8ba4a7f42f3e56371aef8fd7ad15d2ad135a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:54:6d:0f:b1:8b:fe:6d:9e:d7:09:1d:2d:
7e:9a:8b:b5:17:50:45:5c:18:e3:a2:c7:b7:dd:c7:
73:fb:ef:65:5f:0c:87:84:1b:36:fc:bf:7a:8a:3c:
76:74:67:0d:7b:f2:d2:cd:66:43:ce:96:17:d1:03:
c9:01:c3:a1:df:61:fc:3e:cf:ec:e3:8e:ed:b4:a0:
da:2b:26:ed:c0:8e:8e:20:20:77:6e:2b:ad:63:98:
78:40:9b:b1:b4:13:2e:b2:3b:6f:97:69:6c:cc:f3:
04:03:eb:7e:2b:82:02:76:21:74:d8:50:31:00:66:
a2:e0:b9:7c:8f:ed:93:32:25:c2:65:4f:86:04:e7:
95:a5:bb:df:17:bd:76:e6:83:24:37:68:96:25:4a:
ed:f7:d4:96:8a:95:0d:60:03:ce:43:96:49:e6:3f:
fa:56:3e:14:74:78:74:09:9c:2f:b7:6e:1d:64:7f:
be:3f:e1:23:cd:6c:88:cd:9d:5e:40:23:2a:3a:6a:
fb:42:52:1e:e0:0a:d1:4d:10:98:9d:64:c1:65:7b:
8d:23:40:15:72:81:4f:0b:46:c1:62:73:5c:50:f9:
83:5b:e8:ec:c6:91:7d:e7:50:d8:7e:50:8b:be:c3:
46:44:79:b4:29:6d:dc:a8:39:03:9a:a7:2a:f3:82:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:BA:4A:7F:42:F3:E5:63:71:AE:F8:FD:7A:D1:5D:2A:D1:35:A9
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:74:17:ae:36:66:d9:75:c4:80:ce:89:ee:6e:c4:46:51:34:
13:25:74:80:9d:91:b0:d5:eb:76:f9:80:07:1a:04:e4:b7:57:
b1:a1:1e:06:63:c1:c8:95:56:46:9f:99:99:9c:04:04:a9:2e:
52:69:8b:2d:31:9b:db:bc:47:34:d5:f6:29:c9:f6:65:16:ee:
29:d4:0e:94:db:a7:d1:bb:35:08:b2:3b:64:05:d3:9a:4d:7b:
1c:b2:b6:65:d9:4e:0c:71:2c:d5:3b:f7:8a:d5:21:1e:44:7c:
9d:87:d4:c4:03:3b:7b:c0:89:d8:38:40:80:8d:03:f0:bc:9e:
71:5f:15:03:79:52:8b:fb:f2:4f:1a:f5:3d:7c:12:25:d3:78:
a5:32:26:9d:eb:1a:94:34:6f:0c:29:d4:90:8a:d9:82:50:9b:
95:e2:a9:d0:18:ba:95:84:ae:b0:cc:99:99:76:45:89:2f:47:
2f:7c:54:a6:05:c7:c5:48:38:19:ca:8a:6e:dd:2c:ad:31:57:
c1:d7:d4:34:62:2e:d1:92:6c:50:0f:69:1b:e9:f7:03:37:4b:
82:67:b4:a9:6b:11:68:4b:ea:8e:df:4b:70:d8:8e:29:9d:cb:
dc:07:3b:9b:ee:25:f2:15:90:09:c1:f8:73:79:97:b0:2c:83:
60:3a:c4:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEPjQ2qUSueq0drVMoadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU3NDYzZWQ4NDk4MDIwZGQzOTIzMjI0NTlkMmNmNDBm
MjI2YjIwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EygyY2U4YmE0YTdmNDJmM2U1NjM3MWFlZjhmZDdhZDE1ZDJhZDEzNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9UbQ+xi/5tntcJHS1+mou1F1BF
XBjjose33cdz++9lXwyHhBs2/L96ijx2dGcNe/LSzWZDzpYX0QPJAcOh32H8Ps/s
447ttKDaKybtwI6OICB3biutY5h4QJuxtBMusjtvl2lszPMEA+t+K4ICdiF02FAx
AGai4Ll8j+2TMiXCZU+GBOeVpbvfF7125oMkN2iWJUrt99SWipUNYAPOQ5ZJ5j/6
Vj4UdHh0CZwvt24dZH++P+EjzWyIzZ1eQCMqOmr7QlIe4ArRTRCYnWTBZXuNI0AV
coFPC0bBYnNcUPmDW+jsxpF951DYflCLvsNGRHm0KW3cqDkDmqcq84KH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzoukp/QvPlY3Gu+P160V0q0TWpMB8GA1UdIwQY
MBaAFB3edGPthJgCDdOSMiRZ0s9A8iayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5Njgt
NDNjN2YwMjdjNmU0LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5NjgtNDNjN2YwMjdjNmU0
LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHQXrjZm
2XXEgM6J7m7ERlE0EyV0gJ2RsNXrdvmABxoE5LdXsaEeBmPByJVWRp+ZmZwEBKku
UmmLLTGb27xHNNX2Kcn2ZRbuKdQOlNun0bs1CLI7ZAXTmk17HLK2ZdlODHEs1Tv3
itUhHkR8nYfUxAM7e8CJ2DhAgI0D8LyecV8VA3lSi/vyTxr1PXwSJdN4pTImnesa
lDRvDCnUkIrZglCbleKp0Bi6lYSusMyZmXZFiS9HL3xUpgXHxUg4GcqKbt0srTFX
wdfUNGIu0ZJsUA9pG+n3AzdLgme0qWsRaEvqjt9LcNiOKZ3L3Ac7m+4l8hWQCcH4
c3mXsCyDYDrEag==
-----END CERTIFICATE-----
Generated at Thu May 1 12:58:21 2025 by rpki-client