Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: OVlqbv+oKk50TVHN3LnzB97cbTpQdaOlI3FORZMgFFo=
Subject key identifier: C8:27:A1:2B:8B:21:47:C7:22:96:4E:10:EC:B7:37:90:85:47:8F:5B
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 0194BD859C581DF68E0071389F169281E72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0C48
Signing time: Fri 31 Jan 2025 18:00:37 +0000
Manifest this update: Fri 31 Jan 2025 18:00:37 +0000
Manifest next update: Sat 01 Feb 2025 18:00:37 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: eoE5BmAguMl9/Qjo7Y+Tp9HoUlLBBlRtPOFm3UNzwEk=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9c:58:1d:f6:8e:00:71:38:9f:16:92:81:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Jan 31 18:00:37 2025 GMT
Not After : Feb 1 18:00:37 2025 GMT
Subject: CN=c827a12b8b2147c722964e10ecb7379085478f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:91:ac:6f:40:76:90:b8:3d:30:89:c4:ab:
7a:1b:a0:4d:f2:3b:70:3f:9f:27:7c:d9:ed:83:56:
f9:e6:ad:29:e2:ea:c3:b6:1d:d7:12:0a:ca:20:44:
82:48:ff:9c:ea:e7:d2:ab:a8:59:50:56:24:d8:cd:
c2:78:e9:e1:71:2c:6a:ac:f6:48:63:b1:63:ce:a6:
01:43:9d:70:4d:b1:72:6e:92:7e:63:9a:83:d3:88:
2a:b6:9c:30:36:78:6c:07:8d:29:51:87:7c:7f:0a:
94:e9:ac:9b:6e:95:46:87:49:ff:4a:ec:47:05:c0:
e2:4b:8b:c9:10:ba:54:30:e2:b9:63:1b:8b:19:03:
32:ed:09:3f:9a:cf:45:6e:63:dd:fc:92:b3:85:8a:
42:89:36:41:29:79:66:bf:cf:f0:68:46:e2:6c:08:
ee:30:62:a5:1d:9d:7e:b4:97:9a:77:3b:b7:0b:63:
34:49:23:87:0e:78:b0:d3:36:71:22:48:83:b5:5d:
79:35:f8:5c:dc:64:5f:80:4f:24:f4:cc:be:de:62:
57:3e:04:9d:a4:b7:34:fa:6b:73:d7:70:35:9e:84:
03:c2:21:dd:31:dd:63:42:f5:6a:b6:4d:3c:77:07:
87:f1:79:10:31:51:c8:d8:dd:23:d5:9f:f4:d3:a7:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:27:A1:2B:8B:21:47:C7:22:96:4E:10:EC:B7:37:90:85:47:8F:5B
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:02:d5:8e:aa:bf:36:0c:d6:f2:8a:84:62:f9:38:bd:13:eb:
70:5e:12:f4:26:e3:0a:3e:f9:37:ca:02:7c:eb:c4:d6:9f:ef:
ab:dd:f1:62:d1:bd:d9:7f:a7:f4:83:44:8e:3c:ab:53:e6:6a:
87:9b:08:c2:d4:9b:b6:cf:aa:04:8e:04:f2:61:42:85:de:88:
41:62:91:83:dd:8b:60:a5:76:02:2b:0d:81:96:76:57:49:df:
6b:21:5b:5c:3c:6e:9d:48:a4:01:82:26:15:4a:fb:9f:1b:d9:
be:2b:d5:97:b8:d4:51:d9:0d:c5:45:60:5b:87:35:31:ba:f3:
85:e3:fa:4e:80:6f:78:68:2d:5b:7c:e9:70:1b:57:8e:74:67:
1a:48:46:03:4e:7c:e5:19:eb:3f:ae:4e:4f:e0:8e:d9:09:c8:
d5:77:bc:b3:35:fa:f7:84:2b:c0:24:e0:76:05:c2:b1:a6:b4:
94:b0:18:29:54:f6:7c:1a:36:32:e7:7c:19:35:f4:15:65:8a:
78:da:62:9b:18:9e:1b:66:b5:b3:01:29:1e:23:97:23:c4:f6:
c0:f9:eb:b9:06:a2:6d:22:9c:4a:6b:13:62:f4:d1:38:4a:e1:
73:ee:40:b2:be:5a:5a:ab:0b:11:0e:7f:a6:6b:e6:34:51:bc:
64:7e:de:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZxYHfaOAHE4nxaSgecrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjUwMTMxMTgwMDM3WhcNMjUwMjAxMTgwMDM3WjAzMTEwLwYDVQQD
EyhjODI3YTEyYjhiMjE0N2M3MjI5NjRlMTBlY2I3Mzc5MDg1NDc4ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UmRrG9AdpC4PTCJxKt6G6BN8jtw
P58nfNntg1b55q0p4urDth3XEgrKIESCSP+c6ufSq6hZUFYk2M3CeOnhcSxqrPZI
Y7FjzqYBQ51wTbFybpJ+Y5qD04gqtpwwNnhsB40pUYd8fwqU6aybbpVGh0n/SuxH
BcDiS4vJELpUMOK5YxuLGQMy7Qk/ms9FbmPd/JKzhYpCiTZBKXlmv8/waEbibAju
MGKlHZ1+tJeadzu3C2M0SSOHDniw0zZxIkiDtV15Nfhc3GRfgE8k9My+3mJXPgSd
pLc0+mtz13A1noQDwiHdMd1jQvVqtk08dweH8XkQMVHI2N0j1Z/006fkyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgnoSuLIUfHIpZOEOy3N5CFR49bMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQLVjqq/
NgzW8oqEYvk4vRPrcF4S9CbjCj75N8oCfOvE1p/vq93xYtG92X+n9INEjjyrU+Zq
h5sIwtSbts+qBI4E8mFChd6IQWKRg92LYKV2AisNgZZ2V0nfayFbXDxunUikAYIm
FUr7nxvZvivVl7jUUdkNxUVgW4c1MbrzheP6ToBveGgtW3zpcBtXjnRnGkhGA058
5RnrP65OT+CO2QnI1Xe8szX694QrwCTgdgXCsaa0lLAYKVT2fBo2Mud8GTX0FWWK
eNpimxieG2a1swEpHiOXI8T2wPnruQaibSKcSmsTYvTROErhc+5Asr5aWqsLEQ5/
pmvmNFG8ZH7eOw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:18 2025 by rpki-client