Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: 2GqScxMOiacG+AY/3TDze8mJgj5iZqhJRrI1ruVU6YU=
Subject key identifier: 61:9E:DD:AF:DB:C1:0A:B8:9B:AE:F7:14:72:56:B3:85:FF:22:53:D3
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0194BC3C962D5BFA470CC0ED25738E4E1064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 068A
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: 4giBD+3JnPTGdrGxBTVZPXxf1AHdveUahx8S1xa4wX4=)
2: hBoScTy_R6C4FFLywFrPnD1jiew.roa (hash: WCOs1P/NqciJzYty2KMERa2qn2v6xHWa62Th2aUgdxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:2d:5b:fa:47:0c:c0:ed:25:73:8e:4e:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=619eddafdbc10ab89baef7147256b385ff2253d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:07:71:9e:a2:71:8f:7e:2d:8b:f7:cf:ce:a4:
c1:2d:14:a6:72:6e:fd:b0:cd:50:d0:25:68:35:97:
cf:6a:45:cb:89:34:94:8b:67:2f:0d:0b:78:0c:69:
a8:b1:90:b9:94:9b:19:8a:78:44:72:b8:46:4d:df:
67:0b:95:6e:98:33:81:d1:9d:8b:22:f5:c9:6e:26:
60:95:42:c0:e1:f6:4d:02:05:8c:7b:cb:43:ff:12:
c1:9d:fe:66:13:d2:bb:79:9f:56:cf:fd:20:3a:f1:
35:b3:7d:fb:47:2d:a6:30:12:31:41:30:7d:e0:67:
19:50:37:b0:ae:d0:58:f4:1a:66:3c:84:cb:b3:14:
21:2f:84:4a:2d:9f:82:5c:90:bc:16:38:34:17:7a:
f6:a3:7c:c8:11:39:57:ca:96:ed:a2:47:43:58:e8:
8b:b2:b0:7c:d7:66:65:89:31:28:5e:3e:4a:dc:c4:
3e:d6:47:4c:6b:9b:91:44:1c:2e:98:14:8c:e2:f5:
a1:37:b6:a3:30:02:b9:82:34:28:2b:56:67:a5:98:
14:ca:b0:87:16:8b:86:78:17:bd:e5:91:83:33:f4:
c7:5b:e5:91:97:f6:fd:b7:77:17:77:31:f6:70:4e:
11:63:13:a8:7f:40:71:a6:56:ed:e9:a2:32:a7:2e:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9E:DD:AF:DB:C1:0A:B8:9B:AE:F7:14:72:56:B3:85:FF:22:53:D3
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:d7:d8:52:09:2b:07:26:94:40:7e:94:9b:27:fd:df:ed:e9:
7f:e6:00:b4:c5:2a:3a:e5:65:5a:df:b0:e2:4d:94:e7:95:18:
5a:26:d5:70:a6:48:4f:7f:58:1f:4d:ac:ae:29:82:97:4d:85:
5f:fd:d8:51:98:3a:f0:db:be:09:44:51:de:95:51:95:df:d4:
71:1a:46:1f:2a:db:5d:ff:5a:ad:70:e0:6f:72:b9:29:63:7b:
f6:bf:31:bd:4b:32:cc:39:0c:48:c3:50:cf:ec:d2:71:f3:c8:
20:2b:fc:65:22:a0:0d:bb:8e:85:e8:92:c0:73:f9:6b:bf:d2:
a5:15:94:d4:47:d3:d0:d9:4d:86:a2:6d:13:79:40:36:30:35:
70:43:dd:b3:a4:a0:41:d1:50:d3:1a:cc:5a:49:18:74:82:97:
cb:03:20:88:13:fb:7b:25:1a:34:00:30:2f:f3:ab:a8:7b:21:
d3:32:98:c4:66:62:ed:40:73:4d:ff:54:96:34:a5:16:2a:e1:
00:b2:b8:ea:f3:24:a8:6c:cd:a5:e5:34:b6:88:7c:ba:b7:8a:
9c:83:c2:54:6f:c7:e6:8f:e2:6e:3b:15:98:33:a0:61:58:4e:
ef:fa:73:bf:61:1a:08:fb:c6:94:43:c5:93:b9:2c:db:5e:9e:
1a:a6:a0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJYtW/pHDMDtJXOOThBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZGMxYTliZmZhMmNmMTVhN2Q4MDk5YzhhM2MzMTdjZTA3
ZGI1ZWEwHhcNMjUwMTMxMTIwMTE0WhcNMjUwMjAxMTIwMTE0WjAzMTEwLwYDVQQD
Eyg2MTllZGRhZmRiYzEwYWI4OWJhZWY3MTQ3MjU2YjM4NWZmMjI1M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQdxnqJxj34ti/fPzqTBLRSmcm79
sM1Q0CVoNZfPakXLiTSUi2cvDQt4DGmosZC5lJsZinhEcrhGTd9nC5VumDOB0Z2L
IvXJbiZglULA4fZNAgWMe8tD/xLBnf5mE9K7eZ9Wz/0gOvE1s337Ry2mMBIxQTB9
4GcZUDewrtBY9BpmPITLsxQhL4RKLZ+CXJC8Fjg0F3r2o3zIETlXypbtokdDWOiL
srB812ZliTEoXj5K3MQ+1kdMa5uRRBwumBSM4vWhN7ajMAK5gjQoK1ZnpZgUyrCH
FouGeBe95ZGDM/THW+WRl/b9t3cXdzH2cE4RYxOof0Bxplbt6aIypy7aywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGe3a/bwQq4m673FHJWs4X/IlPTMB8GA1UdIwQY
MBaAFIfcGpv/os8Vp9gJnIo8MXzgfbXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMt
NDlhZDk2ODRiMjE3LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zZDA1ZTktMzA5ZC00YWZlLTgxMWMtNDlhZDk2ODRiMjE3
LzEvaDl3YW1fLWl6eFduMkFtY2lqd3hmT0I5dGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0dfYUgkr
ByaUQH6Umyf93+3pf+YAtMUqOuVlWt+w4k2U55UYWibVcKZIT39YH02srimCl02F
X/3YUZg68Nu+CURR3pVRld/UcRpGHyrbXf9arXDgb3K5KWN79r8xvUsyzDkMSMNQ
z+zScfPIICv8ZSKgDbuOheiSwHP5a7/SpRWU1EfT0NlNhqJtE3lANjA1cEPds6Sg
QdFQ0xrMWkkYdIKXywMgiBP7eyUaNAAwL/OrqHsh0zKYxGZi7UBzTf9UljSlFirh
ALK46vMkqGzNpeU0toh8ureKnIPCVG/H5o/ibjsVmDOgYVhO7/pzv2EaCPvGlEPF
k7ks216eGqagmQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:41 2025 by rpki-client