Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
File: Hd51apttFAAMPhUNW31glbdhP-Q.mft (raw, json)
Hash identifier: BGUpyDSZuvxablJHh2wyCYvk0LADtviQi0vl+LlEZdE=
Subject key identifier: 87:E6:4D:D3:0D:4C:64:77:37:EA:E4:50:70:AF:89:AE:FA:30:76:A9
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Certificate issuer: /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial: 0194BC3C06C5DBD7D84970B887760ACEA292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: Hd51apttFAAMPhUNW31glbdhP-Q.crl (hash: nRInnV+kqyMalUBM6hKMLwYKjpCdBuMzJteaxST0HtA=)
2: dcbMwMMoAbrSDYORYR-a2Au1hPA.roa (hash: GaJP4UO0sS8NGTP1pZn3Q8XkpBsgZUPrCjP5yXsfKKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:c5:db:d7:d8:49:70:b8:87:76:0a:ce:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=87e64dd30d4c647737eae45070af89aefa3076a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:f3:43:00:24:90:e8:76:3f:f9:51:61:23:
eb:79:eb:a4:75:e0:4f:5d:62:1b:83:60:e6:cf:3b:
ec:ce:77:d2:b0:82:84:dc:f4:fd:0a:b0:42:f9:4f:
e8:12:67:1d:69:16:36:5c:e8:70:4e:f8:f5:f2:ff:
4a:4d:ac:4d:87:e1:b9:85:ff:ce:e1:dd:6b:a3:73:
f3:89:34:19:7c:0a:80:e7:64:8e:2d:98:7c:65:94:
3d:7b:73:aa:6b:d4:3e:56:77:4b:d0:d1:21:5a:4b:
85:75:14:f6:2f:0c:95:a0:98:ba:28:ad:de:32:66:
2f:8b:d3:4b:61:91:77:f4:4f:ba:46:4f:53:57:4b:
f5:e3:29:7e:bb:42:1a:be:9a:61:f5:f6:55:38:87:
dc:17:94:72:00:7d:ac:fe:84:b0:1d:62:d0:13:72:
4a:a7:ae:d3:b3:33:e0:78:4c:3a:d5:2f:62:98:3d:
c2:50:90:a7:2b:b7:86:fd:7e:a3:9f:94:30:a1:e8:
bf:1e:75:96:2c:34:b0:a1:aa:9c:ed:3f:6c:ee:41:
3b:73:d8:ed:ad:2c:f6:6d:1c:f8:85:b2:e8:a6:90:
55:01:05:46:a0:22:b9:9e:da:89:af:9c:93:c3:0b:
26:ed:5f:59:af:94:9e:19:9f:6b:fe:c6:94:8f:87:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:4D:D3:0D:4C:64:77:37:EA:E4:50:70:AF:89:AE:FA:30:76:A9
X509v3 Authority Key Identifier:
keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:73:ce:b4:d5:a9:3e:e1:87:82:d5:76:1d:14:92:49:d1:
1c:74:95:87:e4:ef:56:f2:0b:7b:c8:f1:0b:bf:04:6f:c7:04:
c7:e7:66:b2:7e:af:15:f1:69:4b:81:0e:24:e5:11:92:27:e3:
89:f0:57:c0:dd:9b:fb:19:1f:4e:2e:50:42:68:e4:9d:79:ff:
61:88:63:71:da:0f:57:e3:cb:88:e7:81:2d:04:02:ab:0d:40:
c2:1e:11:07:48:67:54:ee:33:35:bf:c0:d8:2f:04:9e:86:ae:
88:d8:9f:8d:a0:9e:e8:e8:8f:fa:bb:86:97:f0:81:91:9a:57:
fe:e5:5b:d0:c1:bc:52:85:ef:7d:c2:0f:1b:86:be:3a:79:44:
88:2e:25:ae:78:d1:08:b9:5a:a4:6b:29:09:ea:a7:91:ec:2b:
71:27:4a:2f:d7:34:64:7f:93:aa:68:96:50:83:c4:0d:95:62:
73:0e:01:f0:5d:db:7e:e6:35:9a:dc:f9:49:b4:a7:95:be:56:
e1:c6:78:1a:ea:aa:bc:88:db:7d:26:01:0d:7f:d1:5f:b0:8c:
86:92:d7:09:2a:9b:7b:23:fc:2c:b8:bc:a2:75:da:8a:48:e1:
92:02:f9:7f:bb:86:df:51:6c:66:cd:ee:cb:70:6c:20:78:29:
35:d0:27:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAbF29fYSXC4h3YKzqKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU3NTZhOWI2ZDE0MDAwYzNlMTUwZDViN2Q2MDk1Yjc2
MTNmZTQwHhcNMjUwMTMxMTIwMDM3WhcNMjUwMjAxMTIwMDM3WjAzMTEwLwYDVQQD
Eyg4N2U2NGRkMzBkNGM2NDc3MzdlYWU0NTA3MGFmODlhZWZhMzA3NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJLzQwAkkOh2P/lRYSPreeukdeBP
XWIbg2DmzzvsznfSsIKE3PT9CrBC+U/oEmcdaRY2XOhwTvj18v9KTaxNh+G5hf/O
4d1ro3PziTQZfAqA52SOLZh8ZZQ9e3Oqa9Q+VndL0NEhWkuFdRT2LwyVoJi6KK3e
MmYvi9NLYZF39E+6Rk9TV0v14yl+u0Iavpph9fZVOIfcF5RyAH2s/oSwHWLQE3JK
p67TszPgeEw61S9imD3CUJCnK7eG/X6jn5Qwoei/HnWWLDSwoaqc7T9s7kE7c9jt
rSz2bRz4hbLoppBVAQVGoCK5ntqJr5yTwwsm7V9Zr5SeGZ9r/saUj4fOFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfmTdMNTGR3N+rkUHCvia76MHapMB8GA1UdIwQY
MBaAFB3edWqbbRQADD4VDVt9YJW3YT/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ1MWFwdHRGQUFNUGhVTlczMWdsYmRoUC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80YTFlYmQtZDQ0ZS00ODkyLTg1YjMt
NzM1YTBjYzFlNzg5LzEvSGQ1MWFwdHRGQUFNUGhVTlczMWdsYmRoUC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My80YTFlYmQtZDQ0ZS00ODkyLTg1YjMtNzM1YTBjYzFlNzg5
LzEvSGQ1MWFwdHRGQUFNUGhVTlczMWdsYmRoUC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic1zzrTV
qT7hh4LVdh0UkknRHHSVh+TvVvILe8jxC78Eb8cEx+dmsn6vFfFpS4EOJOURkifj
ifBXwN2b+xkfTi5QQmjknXn/YYhjcdoPV+PLiOeBLQQCqw1Awh4RB0hnVO4zNb/A
2C8EnoauiNifjaCe6OiP+ruGl/CBkZpX/uVb0MG8UoXvfcIPG4a+OnlEiC4lrnjR
CLlapGspCeqnkewrcSdKL9c0ZH+TqmiWUIPEDZVicw4B8F3bfuY1mtz5SbSnlb5W
4cZ4GuqqvIjbfSYBDX/RX7CMhpLXCSqbeyP8LLi8onXaikjhkgL5f7uG31FsZs3u
y3BsIHgpNdAnwg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client