Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: q1BqxPfdfGySrS7m4YfjcH6YnJ153qK5GkCYrRuHB6M=
Subject key identifier: 3D:CC:F6:CA:E8:C4:B1:67:CC:A0:1B:0A:5C:BE:14:7E:09:D1:03:3E
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0194BCE0814A3592D75B1F07AEFD2086A29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 09C3
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: yrYAgLLgoKY5vZlCrlqFx9mFnrAxhl9WzGwlvRZPICU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:81:4a:35:92:d7:5b:1f:07:ae:fd:20:86:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=3dccf6cae8c4b167cca01b0a5cbe147e09d1033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:d3:47:18:48:87:39:99:76:82:7b:e7:cf:
85:4a:1c:71:80:65:aa:5d:27:17:cc:0b:68:e1:1f:
9a:2b:f4:93:14:c1:fb:7c:79:52:16:56:c1:42:c0:
0f:3c:72:9e:ab:fb:71:b7:51:b6:8d:68:38:4e:31:
7e:a9:bb:be:3b:8e:8d:a9:83:77:d1:28:32:e0:a8:
3c:ab:f3:71:92:32:78:b3:67:3f:65:f7:85:e2:d5:
91:bf:bf:d1:a3:d2:86:56:da:f9:98:2d:64:2f:75:
10:2a:cd:50:0a:8c:c4:15:83:b2:d3:a6:af:7e:48:
0f:7d:41:ff:bc:9c:dc:28:cd:f9:33:27:b0:f5:de:
c0:eb:1d:05:55:58:9a:68:e0:e3:98:89:7c:f5:03:
3d:1e:5d:a2:45:28:df:d9:23:f9:c5:23:3a:d3:46:
7b:b1:a9:82:05:40:b9:93:2f:81:a2:c5:68:f7:b4:
79:e5:18:ff:67:c9:e9:f8:9d:73:18:a8:cd:3a:6b:
68:f5:96:0e:04:79:3f:b0:80:8d:25:2c:d8:92:9e:
69:1b:b4:41:aa:b8:8b:9d:29:f9:60:0b:65:a6:93:
03:92:b3:d5:33:27:83:ee:14:af:48:9b:bf:af:fd:
7e:c6:b5:cf:ca:f9:c7:44:f4:fe:df:94:c2:39:e6:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:F6:CA:E8:C4:B1:67:CC:A0:1B:0A:5C:BE:14:7E:09:D1:03:3E
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:74:6a:23:19:b3:37:37:88:84:1e:58:13:26:48:04:5a:87:
fc:90:95:9a:d8:2d:7a:1a:c1:77:e8:6f:22:3f:74:0a:e3:67:
69:01:eb:97:d9:cd:12:26:f8:d2:c5:5c:ec:cc:e4:e4:bf:fe:
76:15:5b:d5:db:2f:8f:4b:65:a7:61:23:14:5c:f1:80:59:62:
10:90:ab:ec:0d:c8:0a:85:3f:73:11:43:15:08:d8:70:a5:8a:
18:5b:57:cb:bd:7b:cf:76:32:b8:1f:92:41:f1:07:cf:28:2e:
f7:d4:63:2a:c3:e0:8f:02:85:52:b5:31:b9:c1:02:aa:a3:3a:
cd:bf:b9:c8:96:0a:05:05:5c:73:91:56:7b:ca:77:02:75:b7:
07:bd:9d:f2:99:67:7b:93:92:22:bd:b3:29:42:76:ad:1a:93:
43:b5:11:a3:fe:02:c9:61:ec:b7:c2:53:73:c2:94:b0:45:1e:
86:2a:87:83:61:79:42:30:97:b4:c5:80:19:d8:b7:aa:0b:02:
96:26:24:5b:c6:23:cf:60:7a:a3:3f:4d:3d:58:a3:35:d1:69:
61:79:80:86:16:c0:28:43:9f:18:39:25:3d:e7:90:02:8d:0b:
7b:20:a6:7f:0a:85:d4:b3:4b:a2:5b:2e:54:c6:ac:88:2f:91:
c5:8b:a7:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IFKNZLXWx8Hrv0ghqKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjM4NjI2MjBkNDY3YzhhNzlmOGY0NGVmMzViYjYwYWY4
MjNmOWQwHhcNMjUwMTMxMTUwMDE3WhcNMjUwMjAxMTUwMDE3WjAzMTEwLwYDVQQD
EygzZGNjZjZjYWU4YzRiMTY3Y2NhMDFiMGE1Y2JlMTQ3ZTA5ZDEwMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkXTRxhIhzmZdoJ758+FShxxgGWq
XScXzAto4R+aK/STFMH7fHlSFlbBQsAPPHKeq/txt1G2jWg4TjF+qbu+O46NqYN3
0Sgy4Kg8q/NxkjJ4s2c/ZfeF4tWRv7/Ro9KGVtr5mC1kL3UQKs1QCozEFYOy06av
fkgPfUH/vJzcKM35Myew9d7A6x0FVViaaODjmIl89QM9Hl2iRSjf2SP5xSM600Z7
samCBUC5ky+BosVo97R55Rj/Z8np+J1zGKjNOmto9ZYOBHk/sICNJSzYkp5pG7RB
qriLnSn5YAtlppMDkrPVMyeD7hSvSJu/r/1+xrXPyvnHRPT+35TCOea7VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3M9sroxLFnzKAbCly+FH4J0QM+MB8GA1UdIwQY
MBaAFIRjhiYg1GfIp5+PRO81u2Cvgj+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgt
ZmU3YWQ3ZmM0Nzg5LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgtZmU3YWQ3ZmM0Nzg5
LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnRqIxmz
NzeIhB5YEyZIBFqH/JCVmtgtehrBd+hvIj90CuNnaQHrl9nNEib40sVc7Mzk5L/+
dhVb1dsvj0tlp2EjFFzxgFliEJCr7A3ICoU/cxFDFQjYcKWKGFtXy717z3YyuB+S
QfEHzygu99RjKsPgjwKFUrUxucECqqM6zb+5yJYKBQVcc5FWe8p3AnW3B72d8pln
e5OSIr2zKUJ2rRqTQ7URo/4CyWHst8JTc8KUsEUehiqHg2F5QjCXtMWAGdi3qgsC
liYkW8Yjz2B6oz9NPVijNdFpYXmAhhbAKEOfGDklPeeQAo0LeyCmfwqF1LNLolsu
VMasiC+RxYunOA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:12 2025 by rpki-client