Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
File: H1PAbKeXbXN7I7xydooijDl_ry8.mft (raw, json)
Hash identifier: /YPtK/XjG1e/c1tTA5FPIk//SjgLJEeOL+lnUmBGKjU=
Subject key identifier: 6E:81:3F:56:22:46:9C:3F:E3:1B:39:88:5D:B4:07:E9:6B:D9:90:43
Authority key identifier: 1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
Certificate issuer: /CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Certificate serial: 0194BD17E69CF8CB565C7CC6D641F80EFDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 3-xEC-0MibMVigbXcbI1gWAUly4.roa (hash: WXUjcMHE+UNYhxHX09cspDFGn5SKJT/8c8IxWa8FaIY=)
2: H1PAbKeXbXN7I7xydooijDl_ry8.crl (hash: wiRGfM3BgF59jVE1pgpllU+9J6LZ9pM3Q3zUansPuNM=)
3: Vm7h2Zrg5WwxF-HPazBv9CqYs8c.roa (hash: cb9QK4NFVsGWjyY8wXEFMswKwrkLQ1f+wv2TQBdse24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:9c:f8:cb:56:5c:7c:c6:d6:41:f8:0e:fd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f53c06ca7976d737b23bc72768a228c397faf2f
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=6e813f5622469c3fe31b39885db407e96bd99043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:02:c6:af:6a:f9:44:db:97:ac:d3:8a:1d:
d5:a1:55:89:75:e8:0b:85:5a:81:a2:73:90:bd:2e:
16:8b:83:bc:e6:8b:a5:12:b4:bf:dd:1c:76:01:79:
0c:63:70:76:93:49:d9:cc:3c:fd:6b:4b:fa:ff:17:
cf:48:e3:2f:2e:3c:a1:68:4c:ac:32:19:c0:32:46:
a6:90:67:38:ab:bd:74:35:f3:33:45:1d:1f:af:20:
ee:ce:6d:dd:d0:d5:31:b4:92:3e:9a:7c:15:9c:ce:
d5:0e:a3:59:92:bc:5c:26:27:3a:d8:77:71:e8:01:
25:d1:30:5f:d9:b9:5e:c8:4d:77:e9:29:4c:59:fc:
f8:71:3d:97:23:f2:70:c0:87:27:ce:b1:95:b1:84:
84:40:0a:a8:16:3f:bc:27:90:06:1f:82:66:5d:3f:
6d:f0:14:1b:35:9b:95:fa:da:87:3b:4d:b7:dd:85:
3f:03:c6:45:a9:28:3d:c4:31:96:96:76:e7:73:f6:
c5:37:31:ed:5e:ea:1b:b7:3e:8f:70:2a:d8:20:6b:
ca:4a:c3:be:19:bc:a0:4e:24:a6:a2:2d:e2:56:78:
94:19:f8:47:18:3c:e3:9f:aa:17:53:40:5a:fd:23:
ab:a9:b5:5e:ea:76:8b:c2:62:95:b0:b9:b5:f1:cc:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:3F:56:22:46:9C:3F:E3:1B:39:88:5D:B4:07:E9:6B:D9:90:43
X509v3 Authority Key Identifier:
keyid:1F:53:C0:6C:A7:97:6D:73:7B:23:BC:72:76:8A:22:8C:39:7F:AF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1PAbKeXbXN7I7xydooijDl_ry8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8ca3bc-a875-4507-91cc-bcefa45658cc/1/H1PAbKeXbXN7I7xydooijDl_ry8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:59:94:88:90:ad:6c:e8:45:b2:a1:b3:d7:f3:d7:86:b3:9d:
24:d6:c4:9f:e6:36:d0:89:d2:95:3d:74:df:2f:5f:85:b1:88:
0b:3f:9f:fd:a1:78:98:84:cb:2e:56:c6:bd:2f:fa:ae:78:8b:
22:96:f6:18:57:f2:b3:cf:eb:e6:42:38:d4:14:78:1c:82:b0:
16:fa:06:52:b8:77:20:9b:5f:bb:49:bc:40:b6:95:16:34:a0:
0f:3f:0c:87:98:4a:cf:8a:e9:89:ff:dc:a6:c4:87:5c:45:de:
72:e2:ab:48:9d:9c:9f:ea:ac:fc:fb:3a:ab:27:71:cf:7d:49:
af:8a:76:c5:ce:21:49:6a:2a:38:4b:ac:ae:50:39:ea:dc:b4:
fd:a5:ef:7c:d9:2d:cb:ec:bb:3d:82:5c:53:48:85:20:8c:ce:
27:53:79:a7:15:6d:54:bf:ef:a0:d0:16:23:c8:81:01:51:cd:
ab:3d:28:88:29:b5:a1:c3:b1:72:e8:ac:7a:99:47:2f:4d:f4:
22:5d:a0:2d:bb:41:34:34:08:c8:ba:dd:6c:3a:ac:b5:85:b2:
7e:18:ef:1b:9a:c7:e6:3e:f4:3f:9a:2f:e1:df:1b:36:12:aa:
e2:d2:6d:a3:d2:14:9d:3e:c7:46:6c:fa:38:b8:0c:ce:55:51:
33:ed:e1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+ac+MtWXHzG1kH4Dv25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTNjMDZjYTc5NzZkNzM3YjIzYmM3Mjc2OGEyMjhjMzk3
ZmFmMmYwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
Eyg2ZTgxM2Y1NjIyNDY5YzNmZTMxYjM5ODg1ZGI0MDdlOTZiZDk5MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyYCxq9q+UTbl6zTih3VoVWJdegL
hVqBonOQvS4Wi4O85oulErS/3Rx2AXkMY3B2k0nZzDz9a0v6/xfPSOMvLjyhaEys
MhnAMkamkGc4q710NfMzRR0fryDuzm3d0NUxtJI+mnwVnM7VDqNZkrxcJic62Hdx
6AEl0TBf2bleyE136SlMWfz4cT2XI/JwwIcnzrGVsYSEQAqoFj+8J5AGH4JmXT9t
8BQbNZuV+tqHO0233YU/A8ZFqSg9xDGWlnbnc/bFNzHtXuobtz6PcCrYIGvKSsO+
GbygTiSmoi3iVniUGfhHGDzjn6oXU0Ba/SOrqbVe6naLwmKVsLm18cw15QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6BP1YiRpw/4xs5iF20B+lr2ZBDMB8GA1UdIwQY
MBaAFB9TwGynl21zeyO8cnaKIow5f68vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2Mt
YmNlZmE0NTY1OGNjLzEvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Y2EzYmMtYTg3NS00NTA3LTkxY2MtYmNlZmE0NTY1OGNj
LzEvSDFQQWJLZVhiWE43STd4eWRvb2lqRGxfcnk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFmUiJCt
bOhFsqGz1/PXhrOdJNbEn+Y20InSlT103y9fhbGICz+f/aF4mITLLlbGvS/6rniL
Ipb2GFfys8/r5kI41BR4HIKwFvoGUrh3IJtfu0m8QLaVFjSgDz8Mh5hKz4rpif/c
psSHXEXecuKrSJ2cn+qs/Ps6qydxz31Jr4p2xc4hSWoqOEusrlA56ty0/aXvfNkt
y+y7PYJcU0iFIIzOJ1N5pxVtVL/voNAWI8iBAVHNqz0oiCm1ocOxcuiseplHL030
Il2gLbtBNDQIyLrdbDqstYWyfhjvG5rH5j70P5ov4d8bNhKq4tJto9IUnT7HRmz6
OLgMzlVRM+3hfg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:14 2025 by rpki-client