Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: LKAvvAbenyLPhdh+M6p/62GwldERbLTTgjE3eVfe1UI=
Subject key identifier: CD:58:3C:1A:5E:8E:4F:5A:21:3C:9E:74:A2:4C:AE:23:05:53:45:B4
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 0194BC3C7E417312E7CA506A296A4FEB741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 101C
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: PQrH3wTQieaCeUD2G17PmZ610Ayeqeh3cs5tBy7l6yY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7e:41:73:12:e7:ca:50:6a:29:6a:4f:eb:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=cd583c1a5e8e4f5a213c9e74a24cae23055345b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:04:e6:18:cc:8f:28:47:a4:e4:2d:7b:5e:
3a:00:b0:98:28:3c:6e:67:83:10:d7:d0:89:ae:1a:
3c:e3:e3:27:49:72:b5:d4:3d:f9:ef:16:6f:7c:c6:
84:16:44:41:20:c2:e8:04:4f:60:a2:3a:24:5a:a0:
f2:09:a3:5f:e5:ae:e5:68:79:81:04:4c:05:91:20:
e4:2f:3d:f9:23:45:cc:1d:fc:ff:e0:4d:7e:9e:14:
01:fa:fc:f5:f8:b7:7d:ab:b6:61:2b:4d:e4:b1:c8:
c6:bd:2b:bb:20:fb:e0:2b:69:2f:4b:d9:a3:fa:fa:
18:de:8f:4d:5f:3d:69:36:28:ca:ac:65:ff:22:13:
09:f5:1e:f4:56:72:ba:d7:84:28:b8:57:69:d0:ef:
26:91:e3:cb:96:bf:54:07:ca:e1:28:f4:76:ba:0b:
60:bb:70:c4:9d:6b:63:c5:3a:a5:08:80:be:4c:bb:
ed:67:74:c3:fb:88:18:a4:ab:3b:60:a3:ee:63:bc:
a8:18:68:6a:88:39:32:4d:00:2b:4f:04:07:8f:b0:
d9:b0:3c:2c:04:01:9f:42:ff:47:e3:5d:20:ba:f9:
95:64:cb:d0:d6:e1:31:9f:bb:17:a5:cf:ca:9e:1f:
22:dd:37:b9:ac:f8:9d:88:cf:55:71:93:ea:68:15:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:3C:1A:5E:8E:4F:5A:21:3C:9E:74:A2:4C:AE:23:05:53:45:B4
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:60:7e:da:49:be:4f:02:20:3e:a2:0f:28:5b:1b:5f:2a:
69:07:3a:93:65:8a:8c:48:a8:3f:74:73:f4:32:e5:ae:0e:f0:
24:b5:69:01:de:61:fe:72:5e:20:4b:07:8c:8c:27:92:fb:b9:
ed:84:33:4a:6b:7b:b9:a7:17:c5:c4:33:7d:61:c9:46:f1:a2:
3e:90:3c:76:e1:7f:2d:05:bf:0c:df:92:42:c7:b1:e1:9f:18:
78:99:8d:29:17:b1:82:dd:9f:c9:8f:19:fc:8c:a9:79:d6:d3:
b7:52:17:89:90:f1:09:51:5b:75:b1:ea:ae:37:81:cf:df:44:
cf:c8:a8:8e:16:c6:d3:e4:de:ff:17:24:f1:52:e7:88:75:bd:
63:2f:e5:9c:ab:d6:25:1c:65:59:41:55:ab:12:d7:ce:0e:4e:
f1:c8:3c:47:aa:31:73:b0:0b:85:31:03:4f:72:cb:fe:73:b6:
1c:7c:f1:d9:0b:93:76:2e:3a:09:61:fb:8d:bc:ed:1e:4c:68:
41:49:44:8c:38:15:00:44:b4:d8:2a:0b:7e:2b:cd:e9:9a:bb:
95:12:f5:31:34:05:10:26:96:53:5b:f2:af:a8:16:e4:a2:b0:
ad:5f:7e:62:2a:db:1b:97:58:e6:78:14:50:60:d2:5c:54:7a:
e3:2d:29:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PH5BcxLnylBqKWpP63QcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjQ3YjY1YTUyNTMzMjY5YmQyMTk4MTNhNTIwM2FmZGQ5
ZTVkYmUwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
EyhjZDU4M2MxYTVlOGU0ZjVhMjEzYzllNzRhMjRjYWUyMzA1NTM0NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx70E5hjMjyhHpOQte146ALCYKDxu
Z4MQ19CJrho84+MnSXK11D357xZvfMaEFkRBIMLoBE9gojokWqDyCaNf5a7laHmB
BEwFkSDkLz35I0XMHfz/4E1+nhQB+vz1+Ld9q7ZhK03kscjGvSu7IPvgK2kvS9mj
+voY3o9NXz1pNijKrGX/IhMJ9R70VnK614QouFdp0O8mkePLlr9UB8rhKPR2ugtg
u3DEnWtjxTqlCIC+TLvtZ3TD+4gYpKs7YKPuY7yoGGhqiDkyTQArTwQHj7DZsDws
BAGfQv9H410guvmVZMvQ1uExn7sXpc/Knh8i3Te5rPidiM9VcZPqaBVmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1YPBpejk9aITyedKJMriMFU0W0MB8GA1UdIwQY
MBaAFIX0e2WlJTMmm9IZgTpSA6/dnl2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYt
MjQxMzc4MmM3MTY2LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYtMjQxMzc4MmM3MTY2
LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFdgftpJ
vk8CID6iDyhbG18qaQc6k2WKjEioP3Rz9DLlrg7wJLVpAd5h/nJeIEsHjIwnkvu5
7YQzSmt7uacXxcQzfWHJRvGiPpA8duF/LQW/DN+SQsex4Z8YeJmNKRexgt2fyY8Z
/IypedbTt1IXiZDxCVFbdbHqrjeBz99Ez8iojhbG0+Te/xck8VLniHW9Yy/lnKvW
JRxlWUFVqxLXzg5O8cg8R6oxc7ALhTEDT3LL/nO2HHzx2QuTdi46CWH7jbztHkxo
QUlEjDgVAES02CoLfivN6Zq7lRL1MTQFECaWU1vyr6gW5KKwrV9+YirbG5dY5ngU
UGDSXFR64y0pHA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:52 2025 by rpki-client