Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json)
Hash identifier: 0g7B8JXHVuc7Se5ruMGIv48tOqEd2ET8XyWoyLX9bJ4=
Subject key identifier: A2:3C:AA:8F:EB:F1:59:01:A3:46:FD:4D:3E:CB:6E:20:A8:63:7A:63
Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Certificate serial: 0194BC72D230F614106564BC8B8F3A1DD86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
Manifest number: 1391
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: k2rheOo7SjSsh7RTMdKWJcrLZlG2zYrHGcYFxk78CGM=)
2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:30:f6:14:10:65:64:bc:8b:8f:3a:1d:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=a23caa8febf15901a346fd4d3ecb6e20a8637a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:c6:90:af:77:05:19:8d:1c:6f:9d:c4:f7:
6c:58:88:00:c9:62:a5:0c:52:64:f5:7d:ed:0b:57:
2a:15:76:b4:07:cf:0e:02:c2:57:3d:23:5c:6f:c7:
57:ca:0f:ab:fd:23:56:a9:7b:dc:30:e9:b6:1c:0c:
9b:58:75:3c:86:9e:3e:ec:fc:1e:e8:a5:3b:56:16:
f5:92:7d:ac:76:ac:91:bd:0c:d3:9f:36:4d:7b:3e:
a4:f7:02:69:5b:98:c3:4d:c8:ab:f9:a2:5a:5d:f0:
c9:51:26:94:35:27:51:4c:7f:6b:87:40:09:a7:09:
ff:17:ea:94:aa:5a:9e:88:c0:aa:59:b3:64:2d:0a:
9a:e6:ef:59:ba:45:5b:98:b8:ac:75:96:6c:83:ee:
c0:07:ac:87:6d:02:d9:81:2b:2d:a1:5e:9d:59:22:
8a:af:29:20:f7:1d:8a:e8:cb:e9:5f:a7:59:34:34:
ca:05:0a:7c:82:2d:5e:af:0a:11:94:58:75:1e:d0:
f0:1f:0f:c0:2f:b5:10:f6:d8:d5:d2:87:4c:9c:c2:
a6:e0:14:d6:fc:0a:5b:fc:61:a8:0a:9e:e4:94:fd:
5c:2c:73:c1:ad:1d:ba:9c:e2:db:10:82:4f:93:01:
81:a3:39:8d:ea:0f:9a:c9:5b:33:6c:0c:52:5f:d6:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:AA:8F:EB:F1:59:01:A3:46:FD:4D:3E:CB:6E:20:A8:63:7A:63
X509v3 Authority Key Identifier:
keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:23:dc:e9:35:c5:a3:27:8b:c5:34:54:e9:05:bc:0b:db:be:
12:6e:94:d2:d2:0d:7e:22:8c:c0:a1:e4:46:dd:f4:ef:32:32:
a8:68:5a:21:39:99:55:88:7a:9f:1e:d2:a0:cf:bc:9f:13:25:
1d:73:71:5a:c6:a4:ea:b0:c5:bc:d5:5a:39:04:4e:fd:bf:d0:
b0:fc:42:ce:a5:0f:0a:46:68:73:c0:1d:fb:d5:db:8c:d4:8b:
50:e2:cb:b8:52:f2:5b:0c:26:17:72:68:f6:b6:84:12:bc:5f:
35:41:24:4f:63:8e:7a:52:8e:24:f5:89:bd:58:d2:30:92:88:
27:32:5a:5f:11:3b:8f:49:fe:4b:e6:74:22:5e:b5:f3:3e:4a:
2a:d1:c7:4f:0f:96:b6:8e:26:5d:29:21:87:b3:13:9c:87:27:
f5:6f:04:c5:e0:81:c6:bd:bc:64:65:cf:c3:a1:e8:16:1d:3f:
30:ea:92:53:04:a9:8f:59:97:54:3a:f6:10:27:45:af:1d:2c:
ce:1e:12:aa:c2:fa:62:6f:de:96:d6:b2:a2:9f:bb:0a:f7:30:
b0:a5:97:3a:9a:51:04:b8:40:9e:ef:24:59:6b:64:09:08:90:
6e:f7:9f:7f:73:24:e9:ae:62:bf:1c:66:32:48:d5:37:9d:3e:
54:7b:09:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctIw9hQQZWS8i486HdhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDhiMjVjY2VhYzM4Yzk5MzcyYmY3MmIwMGM2YzhiNjQx
OGU5MjMwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EyhhMjNjYWE4ZmViZjE1OTAxYTM0NmZkNGQzZWNiNmUyMGE4NjM3YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z/GkK93BRmNHG+dxPdsWIgAyWKl
DFJk9X3tC1cqFXa0B88OAsJXPSNcb8dXyg+r/SNWqXvcMOm2HAybWHU8hp4+7Pwe
6KU7Vhb1kn2sdqyRvQzTnzZNez6k9wJpW5jDTcir+aJaXfDJUSaUNSdRTH9rh0AJ
pwn/F+qUqlqeiMCqWbNkLQqa5u9ZukVbmLisdZZsg+7AB6yHbQLZgSstoV6dWSKK
rykg9x2K6MvpX6dZNDTKBQp8gi1erwoRlFh1HtDwHw/AL7UQ9tjV0odMnMKm4BTW
/Apb/GGoCp7klP1cLHPBrR26nOLbEIJPkwGBozmN6g+ayVszbAxSX9b3nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI8qo/r8VkBo0b9TT7LbiCoY3pjMB8GA1UdIwQY
MBaAFBzYslzOrDjJk3K/crAMbItkGOkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEt
MTk2MzNmMDhlZDZhLzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEtMTk2MzNmMDhlZDZh
LzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSPc6TXF
oyeLxTRU6QW8C9u+Em6U0tINfiKMwKHkRt307zIyqGhaITmZVYh6nx7SoM+8nxMl
HXNxWsak6rDFvNVaOQRO/b/QsPxCzqUPCkZoc8Ad+9XbjNSLUOLLuFLyWwwmF3Jo
9raEErxfNUEkT2OOelKOJPWJvVjSMJKIJzJaXxE7j0n+S+Z0Il618z5KKtHHTw+W
to4mXSkhh7MTnIcn9W8ExeCBxr28ZGXPw6HoFh0/MOqSUwSpj1mXVDr2ECdFrx0s
zh4SqsL6Ym/eltayop+7CvcwsKWXOppRBLhAnu8kWWtkCQiQbveff3Mk6a5ivxxm
MkjVN50+VHsJWg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:24 2025 by rpki-client