Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: lObesERYZ+HL0cMnBisC9DENGnvUOhj1c8jHNBtPvdY=
Subject key identifier: 22:A2:84:6F:B0:E8:F9:FA:43:C3:F2:33:81:48:5E:C1:D2:C8:9D:7D
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0194BCE0E4283BA3426153146C0926729D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 1-5pQvRUfpHyrPrbdZ6GsVE594ag.roa (hash: 7Kutcany57MSExUAr+jtlWvg+A79uCCKubDB0SOm6y8=)
2: J2vDIE39ML2dQIioX-84LBq6-7M.roa (hash: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=)
3: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
4: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: lziYdeOkM8HIT7R5bSj8o41xSdyA/mllGBqujpMUgwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e4:28:3b:a3:42:61:53:14:6c:09:26:72:9d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=22a2846fb0e8f9fa43c3f23381485ec1d2c89d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:ff:f8:a6:0b:cc:63:e5:60:60:13:d2:26:
35:4d:7a:a3:73:0b:e7:7f:01:56:13:3a:49:43:0c:
ec:af:74:04:8f:c9:7b:7e:f2:c3:c6:66:43:36:bc:
a1:f3:25:6b:bb:bb:d6:6a:8a:49:98:ca:f5:ea:e3:
7d:e8:0e:3b:e9:e2:09:c1:1c:6e:37:40:fa:79:e4:
db:71:7d:ff:99:b8:e5:b2:bb:09:c6:d1:a1:c8:70:
02:85:92:19:bc:e2:7e:47:1d:26:a8:aa:2a:f2:5f:
52:ff:f3:ee:b4:aa:92:27:b6:cc:52:ff:1e:13:f3:
cc:da:50:c5:ca:26:98:13:38:68:e7:31:91:e9:02:
c2:34:64:33:d3:cf:c1:fa:5c:02:76:44:5c:f5:8f:
a5:3c:52:01:36:c6:19:84:45:6c:e2:c3:9f:77:7a:
8f:fc:b2:69:c1:30:12:a9:cf:6e:c9:c8:d9:91:e8:
1e:0f:b0:78:98:3b:96:84:89:db:c3:b2:45:b9:35:
f2:66:6b:23:98:fc:6d:cb:a2:fa:78:17:d4:cc:f9:
2d:f0:9c:63:35:fa:02:e8:1e:9d:41:46:ad:ca:80:
f5:3e:f8:99:20:02:02:31:1e:09:fb:de:27:cd:a6:
c9:b1:08:96:4d:23:ec:53:b6:9d:90:b9:73:96:d7:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A2:84:6F:B0:E8:F9:FA:43:C3:F2:33:81:48:5E:C1:D2:C8:9D:7D
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:eb:88:55:ba:6f:89:44:e7:51:72:4c:00:22:6d:ad:93:
0b:15:94:0b:3d:fb:af:19:44:88:3d:2d:10:de:f9:42:1e:bf:
62:8f:f7:ad:6c:76:47:57:37:71:c4:bf:7a:4b:84:87:96:1e:
82:92:1d:69:17:ff:bb:c1:c6:dc:af:5a:3e:4b:d7:9b:dd:a9:
b0:de:03:4e:89:7a:70:80:e9:a7:15:13:42:82:5b:59:f1:a6:
5e:bd:ac:e0:89:30:0d:75:05:d1:96:0b:fa:db:3a:d5:3a:bf:
64:60:40:49:5e:03:32:9c:c9:c8:f3:bb:68:03:ab:fe:e6:0f:
d9:79:94:14:b3:2c:49:43:58:46:7d:7e:6e:4f:bf:5f:58:97:
50:26:14:5b:2f:4a:e9:ab:ad:fd:63:59:70:1d:cf:4e:34:af:
cb:f1:7c:c7:7e:43:fd:7c:b1:36:45:c9:15:d4:db:96:18:49:
33:7c:50:cc:9f:de:ea:c0:de:c6:5e:ad:f3:f9:fd:c6:d8:02:
f6:d3:60:45:54:3c:7a:cd:6f:21:c8:8a:73:82:80:6c:31:09:
b3:a0:b4:f6:af:32:d7:39:18:6a:e1:6f:d8:30:06:4e:7f:fd:
39:f4:47:35:fe:c9:a7:28:5a:71:5f:c5:e0:27:a6:e4:86:0c:
49:8c:b2:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OQoO6NCYVMUbAkmcp2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1
N2U2YzMwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EygyMmEyODQ2ZmIwZThmOWZhNDNjM2YyMzM4MTQ4NWVjMWQyYzg5ZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGv/+KYLzGPlYGAT0iY1TXqjcwvn
fwFWEzpJQwzsr3QEj8l7fvLDxmZDNryh8yVru7vWaopJmMr16uN96A476eIJwRxu
N0D6eeTbcX3/mbjlsrsJxtGhyHAChZIZvOJ+Rx0mqKoq8l9S//PutKqSJ7bMUv8e
E/PM2lDFyiaYEzho5zGR6QLCNGQz08/B+lwCdkRc9Y+lPFIBNsYZhEVs4sOfd3qP
/LJpwTASqc9uycjZkegeD7B4mDuWhInbw7JFuTXyZmsjmPxty6L6eBfUzPkt8Jxj
NfoC6B6dQUatyoD1PviZIAICMR4J+94nzabJsQiWTSPsU7adkLlzltcDUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKihG+w6Pn6Q8PyM4FIXsHSyJ19MB8GA1UdIwQY
MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt
NzYxZGFiMzg5YjViLzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi
LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgO7riFW6
b4lE51FyTAAiba2TCxWUCz37rxlEiD0tEN75Qh6/Yo/3rWx2R1c3ccS/ekuEh5Ye
gpIdaRf/u8HG3K9aPkvXm92psN4DTol6cIDppxUTQoJbWfGmXr2s4IkwDXUF0ZYL
+ts61Tq/ZGBASV4DMpzJyPO7aAOr/uYP2XmUFLMsSUNYRn1+bk+/X1iXUCYUWy9K
6aut/WNZcB3PTjSvy/F8x35D/XyxNkXJFdTblhhJM3xQzJ/e6sDexl6t8/n9xtgC
9tNgRVQ8es1vIciKc4KAbDEJs6C09q8y1zkYauFv2DAGTn/9OfRHNf7JpyhacV/F
4Cem5IYMSYyyLw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:50 2025 by rpki-client