Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: Yd3luW3DatDwe4719HqtDwItRhLyorNPJhx7Qr5pKDY=
Subject key identifier: 94:41:D3:91:AD:BF:4C:E7:13:7D:28:D3:AC:DC:3B:1B:06:F3:B0:F5
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 0194BBCDDED65CD0E53A8B57746795EE8489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: 57sfk1T5htCORGzOGPLhUi2qOIlTVsh1SBsYAIzLtOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:de:d6:5c:d0:e5:3a:8b:57:74:67:95:ee:84:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=9441d391adbf4ce7137d28d3acdc3b1b06f3b0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:bf:7d:86:a2:61:a4:79:c6:59:76:72:32:
f1:aa:f8:d1:06:f0:d8:7f:69:2a:20:78:7a:ec:bd:
2f:35:fd:5d:25:ea:aa:ee:65:1f:10:09:9d:f9:d7:
db:cc:27:8d:5e:ac:7d:a1:e1:9f:95:79:94:34:eb:
17:9c:3e:b2:b6:67:f0:8c:12:c9:b1:5d:9c:b4:78:
02:1d:9d:85:3d:59:1d:2e:62:4a:84:de:71:f1:a0:
3c:cd:43:d8:76:0f:52:a4:19:fe:4a:86:08:65:5b:
a2:6c:c9:ba:2c:e6:32:ba:04:5f:db:3a:da:1e:16:
0e:9b:82:2e:4d:f5:58:f1:7f:91:31:d6:08:32:03:
e5:49:e6:d4:23:a1:79:8c:62:45:4c:6f:0b:2f:ee:
c1:d7:e5:f6:0f:ab:56:4a:48:a1:00:52:bc:4f:a6:
c6:b5:8d:ec:75:5e:98:1e:41:a6:d8:c6:62:73:f3:
ce:fb:c9:f4:86:19:b6:f4:f8:0d:95:2b:ae:83:30:
b0:85:b5:0d:32:d0:26:f3:13:d8:6d:48:e5:0e:86:
c2:da:fd:67:f0:15:f7:35:30:36:f1:56:d6:20:08:
95:c6:62:2a:7c:42:ad:d1:76:ff:f0:56:9d:cd:f9:
9d:44:45:b5:ba:c3:63:da:9a:e1:31:d0:af:81:4c:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:D3:91:AD:BF:4C:E7:13:7D:28:D3:AC:DC:3B:1B:06:F3:B0:F5
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b2:e9:4a:a7:d6:49:dd:ad:37:f5:22:98:a6:c3:3e:3b:62:
c5:f6:ea:1c:d4:49:31:3c:38:d0:a9:43:a0:af:4f:c9:3c:65:
00:81:d5:fc:ce:1a:0e:e1:06:52:3d:0b:03:96:29:2a:34:cb:
22:10:01:b6:d9:5f:c8:15:29:c6:ba:b8:04:3f:09:79:5b:a9:
d5:0a:5c:6e:71:59:0c:87:68:8f:a0:df:94:16:c5:8f:67:ca:
be:f2:ac:ee:ed:33:4d:97:db:2e:75:e8:9a:32:ed:26:bc:f4:
07:e7:c2:78:51:8b:46:0f:51:4b:9a:76:af:a4:3a:b4:29:1a:
d5:1c:0c:52:d4:f8:63:89:b7:48:5b:17:50:13:92:6f:67:11:
1b:30:b8:62:33:17:2e:4e:f6:4e:05:67:c6:72:88:84:9f:a7:
83:74:26:80:9f:95:24:57:67:c0:a0:5b:58:e8:5d:0f:17:63:
dc:cb:22:be:74:2f:d2:ca:40:ef:95:21:c0:e3:43:c6:d5:e0:
62:f9:c5:eb:e0:b1:64:fd:b4:e1:2c:17:72:56:c1:e6:9a:99:
81:78:63:2c:11:97:31:d4:cf:94:1a:ff:ae:2d:87:de:0f:20:
40:5d:8e:a9:33:f0:28:5c:d8:8c:4a:0a:b1:22:f9:26:02:7e:
ff:da:d1:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zd7WXNDlOotXdGeV7oSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzRmOWQ0OTNhY2NiNjgwOTAwZjQ0N2ExZjJjOWY3YjJi
MzU4YWMwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
Eyg5NDQxZDM5MWFkYmY0Y2U3MTM3ZDI4ZDNhY2RjM2IxYjA2ZjNiMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlke/fYaiYaR5xll2cjLxqvjRBvDY
f2kqIHh67L0vNf1dJeqq7mUfEAmd+dfbzCeNXqx9oeGflXmUNOsXnD6ytmfwjBLJ
sV2ctHgCHZ2FPVkdLmJKhN5x8aA8zUPYdg9SpBn+SoYIZVuibMm6LOYyugRf2zra
HhYOm4IuTfVY8X+RMdYIMgPlSebUI6F5jGJFTG8LL+7B1+X2D6tWSkihAFK8T6bG
tY3sdV6YHkGm2MZic/PO+8n0hhm29PgNlSuugzCwhbUNMtAm8xPYbUjlDobC2v1n
8BX3NTA28VbWIAiVxmIqfEKt0Xb/8FadzfmdREW1usNj2prhMdCvgUzq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRB05Gtv0znE30o06zcOxsG87D1MB8GA1UdIwQY
MBaAFIY0+dSTrMtoCQD0R6Hyyfeys1isMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYt
YjQzMGJkMjFhMjliLzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzAyNTUtYjZlNS00NWZjLWI3NzYtYjQzMGJkMjFhMjli
LzEvaGpUNTFKT3N5MmdKQVBSSG9mTEo5N0t6V0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbLpSqfW
Sd2tN/UimKbDPjtixfbqHNRJMTw40KlDoK9PyTxlAIHV/M4aDuEGUj0LA5YpKjTL
IhABttlfyBUpxrq4BD8JeVup1QpcbnFZDIdoj6DflBbFj2fKvvKs7u0zTZfbLnXo
mjLtJrz0B+fCeFGLRg9RS5p2r6Q6tCka1RwMUtT4Y4m3SFsXUBOSb2cRGzC4YjMX
Lk72TgVnxnKIhJ+ng3QmgJ+VJFdnwKBbWOhdDxdj3MsivnQv0spA75UhwONDxtXg
YvnF6+CxZP204SwXclbB5pqZgXhjLBGXMdTPlBr/ri2H3g8gQF2OqTPwKFzYjEoK
sSL5JgJ+/9rRqw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client