Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: iQWyWUHnbgJDnWC7nfkYg30OKqJbkjuMeN2AIhoPIxw=
Subject key identifier: EA:1D:21:FE:39:9E:97:2B:61:AB:BA:96:F3:88:F4:46:33:DB:1F:2C
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 0194BD4E8E8844E71F31F4083958879FBD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: v3p9osvla7Q9xeswQHFDGaNHnUL9cnqIq6IevQf+tvo=)
2: vNgalWxKyCFGqWuDm-_4-hQvAN8.roa (hash: dwnMTxgyRJ4mgwfPlrMhwXTTLitc5c5TREsY1/YmwBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8e:88:44:e7:1f:31:f4:08:39:58:87:9f:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=ea1d21fe399e972b61abba96f388f44633db1f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:8e:e7:53:2d:e5:68:79:6a:f8:26:8f:ee:
4b:15:04:7d:6b:59:f8:e8:34:13:3b:67:8a:eb:dc:
ae:57:6e:29:1c:5b:a9:67:dd:6d:ae:5e:68:3d:6f:
17:bf:05:33:ac:19:3a:05:39:d6:ba:ea:71:5d:9a:
53:e4:ac:b1:05:fa:29:6d:a1:ec:de:ed:4c:70:1b:
92:3d:72:76:df:2c:fd:5a:bc:5e:b0:66:39:52:6d:
79:ea:97:00:ab:b2:96:45:9a:ab:6b:19:dd:fa:a8:
62:25:5b:5b:3b:5d:61:73:fe:77:7a:d6:7b:34:94:
6e:ee:27:fe:e4:e5:c8:20:2d:9b:a3:c8:57:7a:18:
e5:71:cb:a4:7c:8c:1a:e1:e0:4a:9c:4f:41:65:77:
35:f7:bd:a3:56:da:69:f2:6a:1a:d9:06:04:ac:b4:
e5:ab:74:98:f7:68:b0:b9:80:bd:01:26:e7:37:5a:
d3:98:f5:1d:d9:ea:6a:16:0b:39:63:a2:d3:b0:99:
b8:57:34:73:2c:ec:c1:85:3f:d2:4f:bb:b8:e3:40:
46:01:c3:50:9d:42:74:56:5c:35:60:e3:02:66:f1:
6c:da:b0:90:74:dd:61:a7:c8:d3:39:5b:93:c0:74:
88:02:f0:9b:ef:1a:4b:5c:3b:77:2d:af:cc:b2:a5:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:21:FE:39:9E:97:2B:61:AB:BA:96:F3:88:F4:46:33:DB:1F:2C
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c6:34:b4:c6:ee:1f:eb:c0:cd:35:4d:bc:de:65:c1:37:5c:
a6:ce:f4:ae:05:9a:55:8d:a8:f1:7f:d4:07:f7:80:59:8e:f1:
c7:d1:10:3a:d3:99:aa:31:73:b6:27:54:a5:e7:94:e7:01:a5:
14:6b:cf:bc:02:5d:ac:4d:13:61:b7:c3:25:ec:c4:e8:a9:c7:
a0:d6:d9:16:48:45:2c:05:ac:0a:d3:a0:8c:67:bc:6b:bb:ca:
e0:c3:fe:45:f5:a6:d0:c8:e6:71:e9:3e:83:a4:53:6a:3f:55:
ae:10:42:ce:f0:13:27:c1:a4:11:30:e3:2d:dd:27:82:0d:07:
0b:94:46:fe:0c:a8:e1:94:a3:74:b8:3e:1b:76:e3:ca:41:83:
c8:ce:f4:02:62:42:db:b2:96:17:cb:68:91:59:b3:ab:37:ca:
1e:cd:45:37:fe:00:52:6e:8c:3c:16:20:de:37:79:66:e8:2b:
0b:cc:eb:0e:71:90:cf:a7:8a:0a:32:3b:74:20:2a:16:53:6c:
ba:7c:c5:28:bf:8f:86:8f:14:d2:92:ec:91:b6:ca:3c:17:b2:
ba:ee:a2:ee:d2:fb:69:ba:04:4e:43:a2:ba:b3:67:59:ca:4f:
0e:f6:df:b0:b8:93:ee:8a:2f:b8:37:db:a6:84:fb:e0:c9:89:
2e:da:cc:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9To6IROcfMfQIOViHn71MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZWQ0ZmNjNDU5NjRkNGVhNzJmYzQ0OTJjNGQ3OTU3MTMz
MjEwYzMwHhcNMjUwMTMxMTcwMDI5WhcNMjUwMjAxMTcwMDI5WjAzMTEwLwYDVQQD
EyhlYTFkMjFmZTM5OWU5NzJiNjFhYmJhOTZmMzg4ZjQ0NjMzZGIxZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JaO51Mt5Wh5avgmj+5LFQR9a1n4
6DQTO2eK69yuV24pHFupZ91trl5oPW8XvwUzrBk6BTnWuupxXZpT5KyxBfopbaHs
3u1McBuSPXJ23yz9WrxesGY5Um156pcAq7KWRZqraxnd+qhiJVtbO11hc/53etZ7
NJRu7if+5OXIIC2bo8hXehjlccukfIwa4eBKnE9BZXc1972jVtpp8moa2QYErLTl
q3SY92iwuYC9ASbnN1rTmPUd2epqFgs5Y6LTsJm4VzRzLOzBhT/ST7u440BGAcNQ
nUJ0Vlw1YOMCZvFs2rCQdN1hp8jTOVuTwHSIAvCb7xpLXDt3La/MsqX8PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOodIf45npcrYau6lvOI9EYz2x8sMB8GA1UdIwQY
MBaAFIXtT8xFlk1Opy/ESSxNeVcTMhDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTkt
Zjg1YTdjYjFkMTkyLzEvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jYTQ2MGUtNjYzNS00ODFiLWI2ZTktZjg1YTdjYjFkMTky
LzEvaGUxUHpFV1dUVTZuTDhSSkxFMTVWeE15RU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8Y0tMbu
H+vAzTVNvN5lwTdcps70rgWaVY2o8X/UB/eAWY7xx9EQOtOZqjFztidUpeeU5wGl
FGvPvAJdrE0TYbfDJezE6KnHoNbZFkhFLAWsCtOgjGe8a7vK4MP+RfWm0Mjmcek+
g6RTaj9VrhBCzvATJ8GkETDjLd0ngg0HC5RG/gyo4ZSjdLg+G3bjykGDyM70AmJC
27KWF8tokVmzqzfKHs1FN/4AUm6MPBYg3jd5ZugrC8zrDnGQz6eKCjI7dCAqFlNs
unzFKL+Pho8U0pLskbbKPBeyuu6i7tL7aboETkOiurNnWcpPDvbfsLiT7oovuDfb
poT74MmJLtrM7g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:12 2025 by rpki-client