Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft (raw, json)
Hash identifier: Y+6W4gi9SqK+4UB6rfby1ki5O0myvENMXqZbvbZOsjw=
Subject key identifier: CA:42:F9:36:B7:17:FA:4B:48:D3:FA:5C:9C:53:B3:BC:52:5D:AB:F2
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 0194BD854271438C32FE7BD8FA7E65219207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: PbEykFk95Qp-GzLhGQEzPuqSxmk.roa (hash: Hvk7rTnua0DJqMwP5Nyh8b4Zk2rUSg2r4snTzFoJ1wk=)
2: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl (hash: hUtaX1xVhRgVqy/w5jPppO77TmUAQpxkM4+hZdjo690=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:71:43:8c:32:fe:7b:d8:fa:7e:65:21:92:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=ca42f936b717fa4b48d3fa5c9c53b3bc525dabf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:94:40:86:6d:83:d0:e0:32:f6:a7:85:8e:30:
a6:16:e4:4b:af:7d:70:40:86:2e:57:1e:e6:ba:ba:
e3:0a:85:d7:28:22:a0:c8:14:c6:ae:c6:f7:8d:9d:
8a:10:a8:3d:47:da:dc:2c:31:4a:cf:58:63:a1:df:
b4:ca:0b:90:1d:a3:d5:00:3d:ec:23:81:11:a3:38:
f8:81:c7:f0:d8:c6:d4:b3:df:4b:ce:86:fe:9b:8c:
86:be:c0:cf:a4:f1:8a:f5:76:1a:50:da:34:f3:1d:
da:b3:fb:01:9a:20:b0:94:b1:e6:24:31:de:71:86:
a4:7d:6a:10:e5:55:15:8c:ae:9f:3f:87:cc:ca:38:
6e:df:79:c2:2e:e3:86:97:26:da:54:00:5a:0e:16:
10:45:3c:28:55:66:40:84:79:f7:0d:2f:20:a3:38:
9f:df:03:1f:8a:81:7f:ef:8d:91:45:b7:8e:7c:b9:
25:ad:cd:30:b0:6d:4b:c6:9a:3f:53:ef:93:56:b1:
05:a2:ae:bb:bf:9a:5e:03:ce:11:79:f1:b9:e1:1d:
41:ca:97:30:a9:54:17:19:32:15:42:27:9d:f9:aa:
d6:29:52:94:b9:4b:59:bf:ed:a3:11:33:a9:c1:84:
a3:7b:e4:5e:d1:68:7f:bd:c8:bb:78:ef:2c:e7:11:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:F9:36:B7:17:FA:4B:48:D3:FA:5C:9C:53:B3:BC:52:5D:AB:F2
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:66:0c:4e:13:d2:ae:e0:ae:28:6a:44:d1:2f:ee:80:71:ae:
ac:40:8a:9c:9b:23:24:80:35:a8:2a:0e:d3:b3:71:3e:95:bb:
b1:83:50:c1:ba:97:1b:fa:c6:ec:f9:c3:a1:cb:d7:da:ef:bb:
a2:6b:e3:aa:65:34:c6:1b:96:4b:59:b1:c5:46:55:fb:23:41:
d5:ac:19:74:93:e9:b3:1c:75:b6:57:b6:9f:08:65:de:21:82:
c3:c0:72:b4:d0:39:91:c0:bf:d0:b0:67:f9:3c:d6:21:1c:e3:
dd:d7:1d:1c:34:7d:2d:ea:82:50:d1:36:8f:de:3f:88:17:c4:
d1:c8:ad:d7:9f:f4:f3:6c:71:dc:51:42:5c:e0:60:35:7c:20:
2e:b0:b3:bd:61:79:c8:9a:0a:af:e3:11:ae:9e:c3:d7:dd:a0:
e1:39:7c:c7:d8:d2:c8:ca:13:1a:e8:0d:17:61:6b:9f:54:54:
3f:40:3d:0c:ce:9a:f4:c6:ef:fa:da:5c:7b:cc:f1:9d:f0:5b:
3f:50:16:1c:6e:24:e1:11:d6:1a:76:27:fa:10:84:db:77:23:
99:26:a1:fd:0a:f8:b4:ed:00:d2:b4:ad:9e:11:31:84:48:a2:
97:99:32:cd:9a:3f:d7:08:90:63:2f:a2:8c:44:09:6f:26:26:
1b:66:cf:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUJxQ4wy/nvY+n5lIZIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OWQ1MTc3MDc3YjkwODE4YzZmOTBhZTRlNDQzMzJkOGNh
Y2JiNzQwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EyhjYTQyZjkzNmI3MTdmYTRiNDhkM2ZhNWM5YzUzYjNiYzUyNWRhYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pRAhm2D0OAy9qeFjjCmFuRLr31w
QIYuVx7murrjCoXXKCKgyBTGrsb3jZ2KEKg9R9rcLDFKz1hjod+0yguQHaPVAD3s
I4ERozj4gcfw2MbUs99Lzob+m4yGvsDPpPGK9XYaUNo08x3as/sBmiCwlLHmJDHe
cYakfWoQ5VUVjK6fP4fMyjhu33nCLuOGlybaVABaDhYQRTwoVWZAhHn3DS8gozif
3wMfioF/742RRbeOfLklrc0wsG1Lxpo/U++TVrEFoq67v5peA84RefG54R1Bypcw
qVQXGTIVQied+arWKVKUuUtZv+2jETOpwYSje+Re0Wh/vci7eO8s5xGkbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpC+Ta3F/pLSNP6XJxTs7xSXavyMB8GA1UdIwQY
MBaAFIWdUXcHe5CBjG+Qrk5EMy2MrLt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFoxUmR3ZDdrSUdNYjVDdVRrUXpMWXlzdTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYWVhNDMtZjMzMy00NTA5LWE2ZGIt
M2FjOTZiZTI4NWUwLzEvaFoxUmR3ZDdrSUdNYjVDdVRrUXpMWXlzdTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYWVhNDMtZjMzMy00NTA5LWE2ZGItM2FjOTZiZTI4NWUw
LzEvaFoxUmR3ZDdrSUdNYjVDdVRrUXpMWXlzdTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2YMThPS
ruCuKGpE0S/ugHGurECKnJsjJIA1qCoO07NxPpW7sYNQwbqXG/rG7PnDocvX2u+7
omvjqmU0xhuWS1mxxUZV+yNB1awZdJPpsxx1tle2nwhl3iGCw8BytNA5kcC/0LBn
+TzWIRzj3dcdHDR9LeqCUNE2j94/iBfE0cit15/082xx3FFCXOBgNXwgLrCzvWF5
yJoKr+MRrp7D192g4Tl8x9jSyMoTGugNF2Frn1RUP0A9DM6a9Mbv+tpce8zxnfBb
P1AWHG4k4RHWGnYn+hCE23cjmSah/Qr4tO0A0rStnhExhEiil5kyzZo/1wiQYy+i
jEQJbyYmG2bPcg==
-----END CERTIFICATE-----
Generated at Fri May 9 03:19:42 2025 by rpki-client