Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: umAz8MZ8x3d/umX6irxjApFX19LcFge5F7rGTwUuigo=
Subject key identifier: 8D:B1:53:AF:B7:59:55:7A:9B:2E:24:AA:EE:51:FD:75:42:36:E6:4F
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 0194BC728345EB59FDD45BDF29BD56ABC60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 0B9E
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: BY4hxWksL/pMmCc75qssTiEhNW9lNzHiNoodq86DU1A=)
2: avz1C0F6AMtca4Jk8pkbgzEJLN8.roa (hash: ADspRghw06xkDcKSrVQ1jSLJvsNT1skZ/kqfKOoRUM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:83:45:eb:59:fd:d4:5b:df:29:bd:56:ab:c6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=8db153afb759557a9b2e24aaee51fd754236e64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:7c:e2:ff:c6:cd:eb:80:2d:28:0a:3a:65:
ac:d8:61:04:7e:0e:a2:31:69:aa:a7:ae:49:66:5d:
ba:84:0b:76:66:e3:22:59:f1:30:80:fc:82:d6:32:
7f:be:35:40:ca:be:66:b1:d8:f4:17:73:f2:41:53:
6d:79:9f:41:20:69:89:4b:bc:6f:9d:14:ff:64:c2:
da:5c:e8:1e:2b:83:a4:16:ee:e1:31:e4:d7:2d:a7:
e6:ca:7d:67:c4:14:f6:5a:a3:02:38:9d:ec:80:41:
7f:9a:96:55:c3:34:8a:c3:e4:38:93:8f:27:6f:04:
a0:65:a1:94:ad:24:a6:33:59:66:3c:63:3b:98:f1:
e6:76:69:df:72:52:66:3b:06:eb:8c:e6:9d:f3:3f:
10:3e:0c:69:b2:29:95:3c:4e:0f:3e:b3:01:53:ec:
c6:8a:7d:af:c4:56:6e:22:7a:65:4b:12:63:c6:7d:
34:9f:a3:c8:00:99:55:96:4c:20:92:5b:a7:ee:c5:
92:d9:2e:dd:ad:0f:54:19:ff:35:47:5f:3d:73:92:
9d:2a:d5:24:45:53:86:b4:35:fa:e5:f2:62:a1:c3:
76:30:f0:ea:d9:c3:5a:0c:e5:44:ec:c4:ea:94:30:
89:29:02:9f:03:17:fb:83:be:b5:79:bf:a2:e4:76:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:53:AF:B7:59:55:7A:9B:2E:24:AA:EE:51:FD:75:42:36:E6:4F
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c7:f5:22:66:22:06:45:2e:78:91:37:cb:c0:95:83:7b:08:
7d:9e:33:ad:44:a2:39:8b:88:fe:1e:7c:8a:8e:00:19:db:82:
aa:3e:bb:3e:32:e9:16:fc:5b:ff:95:9f:e2:f9:b6:e5:45:57:
1f:31:14:a6:69:ec:43:8e:d8:a2:20:f5:e7:d3:d5:dd:fa:14:
59:ba:67:99:2f:b7:36:85:42:e8:12:1a:ab:35:e7:5d:3d:33:
fe:cf:0d:52:1e:16:46:ff:84:d5:37:98:37:37:de:06:35:aa:
31:95:39:83:12:da:1d:32:87:f0:47:11:91:9c:6f:61:1e:e4:
7c:66:bf:e2:c5:d4:14:56:c3:8f:d2:00:a7:49:b9:a3:79:2e:
18:7e:cc:e4:6f:47:bd:eb:87:ea:fc:f1:82:08:bd:b1:1d:e2:
66:cd:d7:2f:22:27:bf:d5:b4:4f:ef:7f:49:8c:0f:5a:e3:af:
30:2c:88:ea:c4:64:0e:1e:cb:86:3b:3d:3e:c1:e5:a8:85:36:
e6:9a:5d:0a:21:ce:bd:b8:08:a5:0e:d2:79:54:4c:a6:b2:69:
31:b2:10:51:e5:3c:48:ff:f8:32:0b:f3:17:1f:c3:f1:a1:7a:
e2:bc:81:da:40:9c:f2:de:22:2b:74:eb:60:b6:2d:33:f3:6a:
c4:a7:72:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coNF61n91FvfKb1Wq8YNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDhhNTllZDk4ZjU5YTBlYTBlNmM0Mzc5YzMwZjViZDVm
MjA4MjEwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
Eyg4ZGIxNTNhZmI3NTk1NTdhOWIyZTI0YWFlZTUxZmQ3NTQyMzZlNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1Z84v/GzeuALSgKOmWs2GEEfg6i
MWmqp65JZl26hAt2ZuMiWfEwgPyC1jJ/vjVAyr5msdj0F3PyQVNteZ9BIGmJS7xv
nRT/ZMLaXOgeK4OkFu7hMeTXLafmyn1nxBT2WqMCOJ3sgEF/mpZVwzSKw+Q4k48n
bwSgZaGUrSSmM1lmPGM7mPHmdmnfclJmOwbrjOad8z8QPgxpsimVPE4PPrMBU+zG
in2vxFZuInplSxJjxn00n6PIAJlVlkwgklun7sWS2S7drQ9UGf81R189c5KdKtUk
RVOGtDX65fJiocN2MPDq2cNaDOVE7MTqlDCJKQKfAxf7g761eb+i5HbFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2xU6+3WVV6my4kqu5R/XVCNuZPMB8GA1UdIwQY
MBaAFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDct
MWY0MDczYmE0MzZmLzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDctMWY0MDczYmE0MzZm
LzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcf1ImYi
BkUueJE3y8CVg3sIfZ4zrUSiOYuI/h58io4AGduCqj67PjLpFvxb/5Wf4vm25UVX
HzEUpmnsQ47YoiD159PV3foUWbpnmS+3NoVC6BIaqzXnXT0z/s8NUh4WRv+E1TeY
NzfeBjWqMZU5gxLaHTKH8EcRkZxvYR7kfGa/4sXUFFbDj9IAp0m5o3kuGH7M5G9H
veuH6vzxggi9sR3iZs3XLyInv9W0T+9/SYwPWuOvMCyI6sRkDh7Lhjs9PsHlqIU2
5ppdCiHOvbgIpQ7SeVRMprJpMbIQUeU8SP/4MgvzFx/D8aF64ryB2kCc8t4iK3Tr
YLYtM/NqxKdyVw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client