Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier: JAOwAfwAIZUEAjOSTi2Wc+thZ820vkm6DsUUIXY7mGo=
Subject key identifier: 93:BB:C5:EE:CD:80:1E:B9:44:85:BA:87:6E:20:A6:74:3B:3A:BE:BD
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial: 0194BD4EB382BEF5BD2565749AC601CDC4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: RSfNBZfsa1/DGal5mPgxuuiGyE7ZVBlvJFE0D+cse7o=)
2: w-uN_1VCR8_SOj5bY-QHNqktijQ.roa (hash: 0MkMfXtYvuQQQ2rI12rE9KqS+DI9qKcacxegwXpKbvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:82:be:f5:bd:25:65:74:9a:c6:01:cd:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=93bbc5eecd801eb94485ba876e20a6743b3abebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:27:17:fd:f0:2a:fc:08:f9:3b:40:e7:2f:
ef:46:e4:a9:25:28:1f:8e:7e:50:7d:4b:50:b1:35:
3b:76:79:9b:ca:88:08:74:a3:35:24:a5:20:59:c1:
98:cf:6d:3b:b5:47:12:11:e7:a4:b0:57:31:b7:cf:
6b:cf:de:11:41:96:5f:47:20:c8:a1:ef:fe:24:ce:
79:64:2b:97:d8:cb:4b:85:9e:ea:4b:c6:31:b6:ba:
7e:4e:33:8d:12:a4:d5:a2:95:61:4a:ab:28:1b:ae:
9f:bf:49:d1:5a:1a:cf:7f:1d:01:cb:4e:00:50:d0:
49:d0:55:c3:cd:cf:82:d2:66:86:cf:dc:be:e9:9c:
29:0f:b3:c6:c2:ba:0e:39:d3:6c:53:0f:b2:95:f9:
1f:5d:57:61:8d:d0:56:e9:3f:79:f6:ab:3f:34:d5:
ec:09:8d:e6:6b:81:24:99:bd:ca:62:fa:93:ae:14:
3a:70:71:8f:a9:04:e6:70:11:70:46:28:bf:6b:69:
9b:6b:0c:df:a5:a3:74:3d:b6:7b:de:c8:a2:32:01:
ae:93:e7:5c:1e:b9:34:35:45:31:c5:7c:a3:6d:65:
be:0a:9a:94:9f:7f:63:20:a0:a8:84:2f:51:9f:12:
86:e9:8f:ae:72:c4:51:2c:81:02:e5:f0:43:d9:e8:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BB:C5:EE:CD:80:1E:B9:44:85:BA:87:6E:20:A6:74:3B:3A:BE:BD
X509v3 Authority Key Identifier:
keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b5:0f:cf:24:c2:9e:30:61:31:25:71:d6:fe:df:9b:39:fe:
34:7e:76:cf:30:09:82:f5:a4:a7:ff:f8:35:bd:b6:d8:c6:e8:
68:e0:31:be:91:ba:df:c3:57:dc:2a:ef:29:66:59:fe:0a:03:
db:ca:27:15:c3:50:4a:b3:74:03:a4:e1:d1:b0:4a:a0:00:0d:
24:db:89:43:c6:7b:38:63:ab:8b:30:c1:66:59:20:75:f5:51:
f7:9f:72:b5:61:1e:79:82:cb:13:c3:9b:48:02:9e:2b:26:bc:
5d:14:46:48:a1:74:a1:bf:8d:83:12:c3:6a:ff:6c:27:50:df:
26:b2:05:b0:e3:c8:d6:2e:57:14:44:60:4e:66:4d:0b:74:44:
39:c1:ef:40:63:75:a6:f4:20:56:75:0e:d8:b6:fd:fa:53:c9:
9e:80:38:1d:d2:ef:af:c1:06:9c:0c:aa:3c:02:50:c9:eb:bc:
84:68:64:14:c3:47:d7:50:5d:16:93:43:b1:63:1a:b2:cd:92:
5e:6a:d5:bb:2e:f6:59:de:df:2b:e0:99:ad:ec:ad:20:79:e0:
42:15:ee:d0:65:7e:dc:3c:b6:bb:70:93:41:8e:b1:d4:71:1a:
57:31:fe:09:48:2e:e5:ce:13:11:9c:0c:98:a7:63:eb:52:53:
10:8a:66:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrOCvvW9JWV0msYBzcTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTEyMmMwZTU2MmU0MDc5NzY4MjNkOTRlMTllMmE3OTRm
OGNiNjIwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg5M2JiYzVlZWNkODAxZWI5NDQ4NWJhODc2ZTIwYTY3NDNiM2FiZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY4nF/3wKvwI+TtA5y/vRuSpJSgf
jn5QfUtQsTU7dnmbyogIdKM1JKUgWcGYz207tUcSEeeksFcxt89rz94RQZZfRyDI
oe/+JM55ZCuX2MtLhZ7qS8Yxtrp+TjONEqTVopVhSqsoG66fv0nRWhrPfx0By04A
UNBJ0FXDzc+C0maGz9y+6ZwpD7PGwroOOdNsUw+ylfkfXVdhjdBW6T959qs/NNXs
CY3ma4Ekmb3KYvqTrhQ6cHGPqQTmcBFwRii/a2mbawzfpaN0PbZ73siiMgGuk+dc
Hrk0NUUxxXyjbWW+CpqUn39jIKCohC9RnxKG6Y+ucsRRLIEC5fBD2ehVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO7xe7NgB65RIW6h24gpnQ7Or69MB8GA1UdIwQY
MBaAFIZRIsDlYuQHl2gj2U4Z4qeU+MtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUt
YjhkZDE4ZTQ4ZTg2LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUtYjhkZDE4ZTQ4ZTg2
LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0bUPzyTC
njBhMSVx1v7fmzn+NH52zzAJgvWkp//4Nb222MboaOAxvpG638NX3CrvKWZZ/goD
28onFcNQSrN0A6Th0bBKoAANJNuJQ8Z7OGOrizDBZlkgdfVR959ytWEeeYLLE8Ob
SAKeKya8XRRGSKF0ob+NgxLDav9sJ1DfJrIFsOPI1i5XFERgTmZNC3REOcHvQGN1
pvQgVnUO2Lb9+lPJnoA4HdLvr8EGnAyqPAJQyeu8hGhkFMNH11BdFpNDsWMass2S
XmrVuy72Wd7fK+CZreytIHngQhXu0GV+3Dy2u3CTQY6x1HEaVzH+CUgu5c4TEZwM
mKdj61JTEIpmHw==
-----END CERTIFICATE-----
Generated at Sun May 4 10:43:40 2025 by rpki-client