Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: vBrUk5gM98glwNyre0wLzRqGdrHV7nMkSKzl2fPA6rc=
Subject key identifier: 7D:DB:58:BF:FD:81:10:34:EB:C5:EF:32:B1:6A:99:C2:F9:02:6C:D4
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0194BCE0BF48CFCDC1749D29E0C99429465E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: ibX0pa8CilELKrSG34gpmhQFYFSnq7F5ZB8DWBeNPok=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bf:48:cf:cd:c1:74:9d:29:e0:c9:94:29:46:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=7ddb58bffd811034ebc5ef32b16a99c2f9026cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:7a:13:57:44:dd:01:b7:89:7f:3c:0d:f8:
0d:9f:08:c5:25:a7:88:75:76:08:0c:93:40:b5:ed:
16:80:f2:f0:19:f6:63:e6:80:17:eb:2d:01:72:48:
f1:86:bd:e2:92:6c:70:af:b3:25:b5:1f:9c:e2:cc:
cd:48:cd:0c:15:b1:a1:9a:bf:ed:b3:59:50:a3:11:
bd:88:4e:77:c3:f2:81:9f:12:b7:23:79:e9:17:00:
bc:fc:5e:41:23:1c:e1:35:ad:ad:ca:cc:34:ca:5b:
f6:b4:00:2d:76:42:e4:9c:5f:91:fe:c5:f1:62:cf:
46:74:32:db:ed:32:ac:46:74:2f:1a:a7:b0:06:09:
46:bd:67:56:2d:b4:34:da:47:f1:cd:e0:27:e7:0a:
70:92:7b:43:a8:ab:0c:0d:6d:48:40:fa:4c:ac:7c:
69:58:0f:e3:70:62:1f:d7:6d:fc:98:a4:5e:c2:71:
66:72:65:08:5a:8a:02:63:d8:9e:b8:1f:c9:cd:2c:
9b:df:a2:23:69:d6:7c:69:61:1a:6c:2b:68:41:27:
07:b6:5f:46:23:bb:c4:cc:e9:43:5c:6a:16:4a:70:
44:f5:67:72:c0:dc:89:e9:22:a3:f2:1e:55:05:db:
dd:08:5c:0b:ee:83:cd:63:3d:48:51:4f:46:fb:34:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:58:BF:FD:81:10:34:EB:C5:EF:32:B1:6A:99:C2:F9:02:6C:D4
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:61:83:47:0b:78:b7:fb:54:ba:28:f9:5f:37:4d:7e:a5:cb:
01:6d:de:6b:0b:5b:29:64:96:e8:c0:e8:16:f4:3d:2d:63:5b:
ff:c7:48:c2:da:ac:71:ad:50:be:5e:31:02:91:2a:70:70:28:
48:4a:af:cb:62:d8:ad:7c:23:ae:84:7e:79:46:05:82:4b:62:
d6:f9:0b:d1:83:bc:b1:a7:62:a7:6d:a3:15:87:5b:58:ee:49:
81:7b:06:d8:f1:56:5e:fc:7a:16:d7:a5:15:9e:b6:61:51:9d:
e7:37:4e:1d:80:c9:a3:d9:85:15:1b:aa:d5:30:e2:17:be:5c:
a5:74:07:be:2f:2e:9a:f2:b5:6b:cc:ad:68:4c:a7:83:3c:ce:
6b:ef:bc:81:68:5d:fb:bc:65:a2:c1:fa:08:c0:63:62:e5:02:
9c:40:d7:07:df:8f:02:89:a8:cf:71:9d:8a:35:88:5c:ca:57:
db:93:86:d9:57:f3:59:ce:17:44:d2:0e:d1:4d:ed:f3:9e:6c:
b9:f6:19:85:a5:24:ec:26:c9:38:25:4c:ef:35:74:45:3b:5d:
0a:a4:e5:30:40:fd:77:38:d1:cf:61:3e:80:73:3c:92:e8:cd:
7b:a0:b7:a6:36:dd:5e:bc:2c:36:4b:b1:aa:7d:43:bd:1e:f6:
40:33:4c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84L9Iz83BdJ0p4MmUKUZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzU5NTU5NDBiYmQ3NTU1ZGYwYTJlNDE3Mzc5ZmM0NDdl
ZjBjZGMwHhcNMjUwMTMxMTUwMDMzWhcNMjUwMjAxMTUwMDMzWjAzMTEwLwYDVQQD
Eyg3ZGRiNThiZmZkODExMDM0ZWJjNWVmMzJiMTZhOTljMmY5MDI2Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoV6E1dE3QG3iX88DfgNnwjFJaeI
dXYIDJNAte0WgPLwGfZj5oAX6y0Bckjxhr3ikmxwr7MltR+c4szNSM0MFbGhmr/t
s1lQoxG9iE53w/KBnxK3I3npFwC8/F5BIxzhNa2tysw0ylv2tAAtdkLknF+R/sXx
Ys9GdDLb7TKsRnQvGqewBglGvWdWLbQ02kfxzeAn5wpwkntDqKsMDW1IQPpMrHxp
WA/jcGIf1238mKRewnFmcmUIWooCY9ieuB/JzSyb36IjadZ8aWEabCtoQScHtl9G
I7vEzOlDXGoWSnBE9WdywNyJ6SKj8h5VBdvdCFwL7oPNYz1IUU9G+zRl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3bWL/9gRA068XvMrFqmcL5AmzUMB8GA1UdIwQY
MBaAFB/FlVlAu9dVXfCi5Bc3n8RH7wzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYt
MmZkYjdhYjY1ZDUyLzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xYzg4OTYtN2JlMi00MmNkLTkxMWYtMmZkYjdhYjY1ZDUy
LzEvSDhXVldVQzcxMVZkOEtMa0Z6ZWZ4RWZ2RE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWGDRwt4
t/tUuij5XzdNfqXLAW3eawtbKWSW6MDoFvQ9LWNb/8dIwtqsca1Qvl4xApEqcHAo
SEqvy2LYrXwjroR+eUYFgkti1vkL0YO8sadip22jFYdbWO5JgXsG2PFWXvx6Ftel
FZ62YVGd5zdOHYDJo9mFFRuq1TDiF75cpXQHvi8umvK1a8ytaEyngzzOa++8gWhd
+7xlosH6CMBjYuUCnEDXB9+PAomoz3GdijWIXMpX25OG2VfzWc4XRNIO0U3t855s
ufYZhaUk7CbJOCVM7zV0RTtdCqTlMED9dzjRz2E+gHM8kujNe6C3pjbdXrwsNkux
qn1DvR72QDNMUw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:52 2025 by rpki-client