Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: Id2JVfEcprucEJ/giQtHTguMr8c3RjxV8TVA6pAdnBo=
Subject key identifier: EA:8D:E7:36:26:9C:E8:BD:D7:E2:B4:01:21:91:59:38:81:F5:F3:9A
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 0194BD8540E82251392F03DF28458964FEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 0CB6
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 6tiLzZv+4BskBi4htrm8Kzw5raICzps/ckCnIkhrsSs=)
2: s1k4VuonWOZZPAV_JNyFAmc3QSo.roa (hash: cR7PeQtOyIJC20HWqCOMhvmrx9KSgQEbtA0y8RtkXyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:40:e8:22:51:39:2f:03:df:28:45:89:64:fe:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=ea8de736269ce8bdd7e2b4012191593881f5f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:6b:34:8a:b2:18:77:80:47:b7:2d:43:e3:
85:39:cc:b8:d1:17:d9:56:b5:04:c7:30:fe:b9:85:
29:1a:df:6f:a5:e9:bb:e2:ef:84:e8:e1:52:d5:32:
26:93:ba:63:e0:09:74:d3:9b:e7:7c:bd:2d:bc:63:
62:2c:e1:68:dd:be:58:ae:23:b7:08:88:17:80:f0:
79:90:26:16:fc:98:7a:82:53:fd:b8:78:a0:44:15:
29:4d:6e:7e:2f:da:ad:a1:b8:8d:5c:18:f7:9d:2e:
1a:71:58:ce:38:68:0d:de:3d:f0:85:e1:56:bb:df:
4b:25:a7:b3:f2:5c:0d:ed:65:bc:bb:0d:63:fa:4b:
c2:76:9d:4e:cf:1a:e0:07:1f:f5:57:bb:45:13:45:
bb:d4:65:eb:9e:51:5d:7f:01:0e:f6:3e:5c:9b:06:
48:99:59:4d:ca:92:ce:25:36:0c:75:d0:32:cc:66:
64:31:8b:c8:3c:f4:f8:77:6c:d3:f7:a6:d4:bc:68:
9e:fd:e8:4b:89:1f:c6:a2:a3:78:da:f8:48:27:e3:
c3:56:e5:04:34:3f:97:53:23:06:27:a2:c5:4d:11:
e1:77:97:1a:1f:9d:de:6e:0b:7f:54:99:5e:50:73:
05:a2:08:2c:b6:c8:23:24:96:80:3c:33:36:db:10:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:E7:36:26:9C:E8:BD:D7:E2:B4:01:21:91:59:38:81:F5:F3:9A
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:57:60:7b:eb:59:6f:22:3e:48:60:9f:d5:59:f2:12:89:
fe:51:9d:72:8c:16:1e:3b:a8:6b:a7:d0:27:bf:30:cb:36:53:
52:62:e8:9b:be:d6:3a:3c:9f:c4:86:ed:60:e5:12:8d:8d:b6:
76:5c:5b:93:f9:e2:51:09:30:00:6a:03:c4:e8:bb:c7:65:09:
52:2a:7e:a7:51:3f:48:a9:01:e6:ae:64:b5:75:ce:1d:b6:14:
f5:56:da:05:d3:f4:ac:05:7c:ad:0b:da:01:2f:76:12:02:5a:
1b:e0:5e:c2:ca:95:36:9a:00:57:d0:30:b7:05:eb:09:cf:bf:
eb:5e:b1:bc:3d:bc:fe:94:9c:c3:13:de:dd:ea:f6:1d:9b:29:
7d:a9:e1:ea:b2:b3:fb:1a:06:c6:1b:82:cf:26:08:b1:21:c5:
5c:87:d8:9e:0f:01:ee:02:d0:62:88:08:7b:8c:09:5d:8f:06:
2d:ee:d7:2d:f4:eb:c2:c2:31:68:df:85:9f:cf:74:cf:2a:61:
ee:2b:17:92:a6:58:78:71:30:20:11:65:d6:fa:f8:eb:57:76:
a5:d5:b2:4d:c3:eb:6d:a6:ed:8f:be:e3:97:5f:94:f4:80:17:
7e:22:6e:c0:52:7a:ff:c7:6b:a3:0a:df:21:1a:78:8b:d6:ea:
dd:50:d7:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUDoIlE5LwPfKEWJZP7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx
NjYxOGQwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EyhlYThkZTczNjI2OWNlOGJkZDdlMmI0MDEyMTkxNTkzODgxZjVmMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqJrNIqyGHeAR7ctQ+OFOcy40RfZ
VrUExzD+uYUpGt9vpem74u+E6OFS1TImk7pj4Al005vnfL0tvGNiLOFo3b5YriO3
CIgXgPB5kCYW/Jh6glP9uHigRBUpTW5+L9qtobiNXBj3nS4acVjOOGgN3j3wheFW
u99LJaez8lwN7WW8uw1j+kvCdp1OzxrgBx/1V7tFE0W71GXrnlFdfwEO9j5cmwZI
mVlNypLOJTYMddAyzGZkMYvIPPT4d2zT96bUvGie/ehLiR/GoqN42vhIJ+PDVuUE
ND+XUyMGJ6LFTRHhd5caH53ebgt/VJleUHMFoggstsgjJJaAPDM22xAaNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqN5zYmnOi91+K0ASGRWTiB9fOaMB8GA1UdIwQY
MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt
OGNmOWQ1MGFkZjI5LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5
LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1pXYHvr
WW8iPkhgn9VZ8hKJ/lGdcowWHjuoa6fQJ78wyzZTUmLom77WOjyfxIbtYOUSjY22
dlxbk/niUQkwAGoDxOi7x2UJUip+p1E/SKkB5q5ktXXOHbYU9VbaBdP0rAV8rQva
AS92EgJaG+BewsqVNpoAV9AwtwXrCc+/616xvD28/pScwxPe3er2HZspfanh6rKz
+xoGxhuCzyYIsSHFXIfYng8B7gLQYogIe4wJXY8GLe7XLfTrwsIxaN+Fn890zyph
7isXkqZYeHEwIBFl1vr461d2pdWyTcPrbabtj77jl1+U9IAXfiJuwFJ6/8drowrf
IRp4i9bq3VDX6g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client