Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
File: hwCTRBAfUQ52oqserOnpp9kuTtU.mft (raw, json)
Hash identifier: geOlvO/F7lmQHDMJDDTPjXzCW5zeZkOB8jdgm9lad00=
Subject key identifier: 84:CA:BF:79:95:96:E4:96:D3:61:22:F2:9A:99:AB:82:11:A4:9A:50
Authority key identifier: 87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
Certificate issuer: /CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Certificate serial: 0194BBCE9BF4EE1E25F5F6925B5E6543C40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
Manifest number: 068C
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: hwCTRBAfUQ52oqserOnpp9kuTtU.crl (hash: 3ouDc+Nm9CuGw1p9WMiAt+Qv+/OEjeFwEtzuZodAcJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:f4:ee:1e:25:f5:f6:92:5b:5e:65:43:c4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87009344101f510e76a2ab1eace9e9a7d92e4ed5
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=84cabf799596e496d36122f29a99ab8211a49a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:b1:c2:44:69:19:60:c1:1a:d2:4d:04:3c:
d5:0d:82:35:34:c9:7c:24:1e:5d:17:47:8e:64:53:
43:56:32:c2:f6:52:b1:b1:e7:1d:41:c0:5b:72:af:
4e:4f:46:a6:ab:93:fc:72:a3:67:e6:a2:04:88:55:
61:0a:d1:bd:cb:f0:d3:67:d3:85:fb:49:e0:e8:34:
12:51:a8:7f:4e:76:c1:c1:57:58:13:a4:99:a0:53:
38:ea:e8:43:95:83:f9:dc:b5:e8:5b:d7:de:c6:a4:
74:c2:77:99:93:7e:7b:58:8a:38:a9:57:06:23:79:
84:99:16:2e:f0:3b:4c:46:fb:2b:52:67:11:f7:ce:
b1:71:ed:b8:91:fe:80:1e:4a:9f:90:db:00:8e:88:
e8:3f:da:6e:f1:17:e6:5f:8f:36:6e:51:38:49:ce:
c2:b4:0f:f4:2c:8f:a8:7c:48:88:fb:61:2b:12:38:
40:0c:38:59:19:b3:93:b3:99:30:f3:92:27:da:a8:
55:d1:bf:48:63:21:1b:07:fc:10:a2:a0:da:66:3b:
83:78:89:c3:bd:7c:27:ac:6c:de:a5:3b:96:47:f2:
24:8e:dd:23:42:a0:38:84:66:62:29:85:a4:da:f6:
8a:97:c9:59:c4:2e:9f:54:57:a7:42:c6:4f:61:c9:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CA:BF:79:95:96:E4:96:D3:61:22:F2:9A:99:AB:82:11:A4:9A:50
X509v3 Authority Key Identifier:
keyid:87:00:93:44:10:1F:51:0E:76:A2:AB:1E:AC:E9:E9:A7:D9:2E:4E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwCTRBAfUQ52oqserOnpp9kuTtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71492d-8c60-409d-a009-d6ada1281668/1/hwCTRBAfUQ52oqserOnpp9kuTtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:40:21:f8:a8:8c:cb:74:2e:08:3f:84:eb:9e:22:1a:6a:
c6:4b:a8:b9:c7:66:52:33:8e:0a:01:6d:94:b4:bb:96:c6:d4:
4f:8b:48:97:ec:45:bc:f4:38:74:1f:8a:d5:24:ca:27:1a:54:
02:5b:99:1c:06:12:34:b7:1b:1a:d6:3f:c0:c7:dd:b2:b6:02:
d7:c0:27:ea:c4:5c:60:8a:46:b4:79:f1:8b:46:82:b9:4d:c2:
37:9b:93:6c:8d:72:18:c9:bc:82:52:ef:6e:79:18:ca:5f:8e:
89:5e:d6:70:16:7d:61:f2:e4:9b:91:19:d0:1c:58:ef:1d:8d:
24:00:8e:45:5d:dd:78:d3:56:3c:7a:f6:e9:29:e0:b4:01:42:
dd:b6:cb:94:6d:9c:39:94:b7:90:39:42:c4:86:6c:dc:14:c3:
e7:80:8f:a2:29:1d:c2:f6:b5:72:10:eb:9f:a6:dc:61:d6:3d:
1f:16:0c:7c:74:de:a5:f3:0d:5d:8b:d2:db:33:35:1b:b8:f9:
5f:49:6a:c8:98:22:cf:f9:1e:0a:59:ea:a7:79:d3:0b:4a:25:
2f:74:7d:ea:c7:a1:35:74:0d:1b:50:77:c2:0f:a3:1d:13:83:
48:08:4d:9a:3a:04:f3:c3:14:f2:5e:7b:31:69:ff:e9:f4:08:
b1:00:17:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpv07h4l9faSW15lQ8QNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MDA5MzQ0MTAxZjUxMGU3NmEyYWIxZWFjZTllOWE3ZDky
ZTRlZDUwHhcNMjUwMTMxMTAwMTA3WhcNMjUwMjAxMTAwMTA3WjAzMTEwLwYDVQQD
Eyg4NGNhYmY3OTk1OTZlNDk2ZDM2MTIyZjI5YTk5YWI4MjExYTQ5YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kWxwkRpGWDBGtJNBDzVDYI1NMl8
JB5dF0eOZFNDVjLC9lKxsecdQcBbcq9OT0amq5P8cqNn5qIEiFVhCtG9y/DTZ9OF
+0ng6DQSUah/TnbBwVdYE6SZoFM46uhDlYP53LXoW9fexqR0wneZk357WIo4qVcG
I3mEmRYu8DtMRvsrUmcR986xce24kf6AHkqfkNsAjojoP9pu8RfmX482blE4Sc7C
tA/0LI+ofEiI+2ErEjhADDhZGbOTs5kw85In2qhV0b9IYyEbB/wQoqDaZjuDeInD
vXwnrGzepTuWR/Ikjt0jQqA4hGZiKYWk2vaKl8lZxC6fVFenQsZPYckA3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITKv3mVluSW02Ei8pqZq4IRpJpQMB8GA1UdIwQY
MBaAFIcAk0QQH1EOdqKrHqzp6afZLk7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDkt
ZDZhZGExMjgxNjY4LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MTQ5MmQtOGM2MC00MDlkLWEwMDktZDZhZGExMjgxNjY4
LzEvaHdDVFJCQWZVUTUyb3FzZXJPbnBwOWt1VHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXdAIfio
jMt0Lgg/hOueIhpqxkuoucdmUjOOCgFtlLS7lsbUT4tIl+xFvPQ4dB+K1STKJxpU
AluZHAYSNLcbGtY/wMfdsrYC18An6sRcYIpGtHnxi0aCuU3CN5uTbI1yGMm8glLv
bnkYyl+OiV7WcBZ9YfLkm5EZ0BxY7x2NJACORV3deNNWPHr26SngtAFC3bbLlG2c
OZS3kDlCxIZs3BTD54CPoikdwva1chDrn6bcYdY9HxYMfHTepfMNXYvS2zM1G7j5
X0lqyJgiz/keClnqp3nTC0olL3R96sehNXQNG1B3wg+jHRODSAhNmjoE88MU8l57
MWn/6fQIsQAXng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client