Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: PI9Z+VD7WIPKHhOUClMihXV/94YXuuZ8GEcrt6lTa54=
Subject key identifier: 0A:0C:40:65:DF:83:ED:73:E5:1F:B8:71:29:49:CD:EF:9A:C6:34:DF
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 0194BCE0D1CE98503E3FCFF9488E742F365F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: tJI2vcT0G2LkgMAAc8MKDVX2DUcWfwUhfTYx3jg8038=)
2: R5Y0djQcssCZ701JjQDPk4xfdyk.roa (hash: DSc2N36MG8S0TaEh5/lKpHOjngU7hgS2sauKy31uyUE=)
3: hRSmm6516V7O9m-dgRCN1dXhmM0.roa (hash: s+JGSz7mfrWnjIH/FpqXmM7l8VH4pyNnAOb8PA/Xeww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d1:ce:98:50:3e:3f:cf:f9:48:8e:74:2f:36:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=0a0c4065df83ed73e51fb8712949cdef9ac634df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:49:6b:2e:b5:c3:4a:4c:44:17:11:f8:8d:f4:
cd:6b:10:b4:3f:f2:ba:ed:c5:42:61:70:87:70:3c:
31:2f:88:94:1e:e6:28:4b:9e:1a:15:a5:20:9f:d9:
5c:eb:bd:de:9e:eb:f4:1c:38:7e:9f:f4:d2:b3:72:
ed:84:dd:6d:20:da:e1:06:82:7e:35:55:12:17:91:
39:6d:88:bb:ef:db:c1:55:e6:dc:9a:6a:12:e9:e6:
b6:f1:c3:e7:f3:fd:11:90:bf:77:2a:2a:47:7d:c7:
38:f5:5c:30:e0:f9:7a:96:35:a1:b6:f9:9b:5e:f0:
0a:be:98:7c:cb:87:3b:09:f3:ba:ba:3b:64:42:4f:
fc:c0:e3:05:76:17:ea:6b:3c:cd:86:62:e3:76:60:
ef:c6:20:62:b6:54:49:90:ac:cb:af:90:70:1e:e9:
18:02:b4:ba:cf:98:ee:d7:49:d7:ec:23:35:e3:b6:
6d:01:a9:13:b1:56:94:c9:ea:09:00:7e:4a:49:b4:
85:48:20:3d:fb:e9:42:c5:dd:0b:66:b6:af:c5:e4:
5e:4c:01:99:d0:b8:30:aa:6d:95:35:88:52:13:ca:
0f:7b:59:02:8c:6a:a8:d0:a2:05:f8:1c:f1:f5:1f:
eb:fd:d7:27:a7:dd:78:0a:9a:bd:9c:41:fc:b6:c4:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:40:65:DF:83:ED:73:E5:1F:B8:71:29:49:CD:EF:9A:C6:34:DF
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:49:e1:66:0d:cd:aa:26:d4:9f:40:ab:c6:dd:8d:d7:9c:66:
0a:e4:c5:6a:28:f1:72:11:09:f7:9b:72:c0:d2:ab:c7:cb:29:
c1:22:f4:34:9e:28:de:bf:a3:8d:21:63:08:7f:e3:58:c9:86:
be:6e:e8:e8:b7:7e:79:b6:00:c0:89:ab:85:c3:86:f6:6e:6a:
b7:04:eb:fc:03:e5:18:6d:fd:0a:bf:11:1f:4d:b6:ce:f5:42:
cb:e9:60:46:af:80:48:ac:24:7e:13:a2:74:fc:8d:da:b4:9c:
ee:ac:bc:80:42:0a:b6:e3:54:90:dc:7f:60:0c:db:66:12:6c:
91:bc:5e:7f:ef:11:d4:8b:20:07:30:8f:e6:db:04:90:8e:22:
52:f8:a4:bd:65:00:1a:ef:51:52:8e:25:bf:69:de:66:71:cb:
2c:7a:60:83:b9:3f:e3:a6:3d:02:51:fa:c0:5b:a5:76:3a:4b:
e4:68:45:ed:f2:27:24:71:25:74:53:e6:09:6a:73:35:a7:c4:
91:83:98:5e:a3:15:f7:31:ca:4c:aa:50:7d:c7:77:cf:d3:ed:
e2:02:9d:e0:63:8f:f1:7e:5e:70:5c:05:70:e9:e6:96:a1:f9:
a9:0a:ef:fe:2a:a1:7b:6b:5a:2c:ee:a9:84:a9:98:b6:03:32:
3f:17:b7:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NHOmFA+P8/5SI50LzZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYmQ1NzQ2ZTMwMDA5MWRlZDFhMTFhMTNiMTY4MDdiNGZk
MGYxZmMwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
EygwYTBjNDA2NWRmODNlZDczZTUxZmI4NzEyOTQ5Y2RlZjlhYzYzNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlklrLrXDSkxEFxH4jfTNaxC0P/K6
7cVCYXCHcDwxL4iUHuYoS54aFaUgn9lc673enuv0HDh+n/TSs3LthN1tINrhBoJ+
NVUSF5E5bYi779vBVebcmmoS6ea28cPn8/0RkL93KipHfcc49Vww4Pl6ljWhtvmb
XvAKvph8y4c7CfO6ujtkQk/8wOMFdhfqazzNhmLjdmDvxiBitlRJkKzLr5BwHukY
ArS6z5ju10nX7CM147ZtAakTsVaUyeoJAH5KSbSFSCA9++lCxd0LZravxeReTAGZ
0Lgwqm2VNYhSE8oPe1kCjGqo0KIF+Bzx9R/r/dcnp914Cpq9nEH8tsT2aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoMQGXfg+1z5R+4cSlJze+axjTfMB8GA1UdIwQY
MBaAFBy9V0bjAAkd7RoRoTsWgHtP0PH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQt
YmRlYTYzZTVhN2M0LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMzA4NmMtZDcyZi00MWVhLTk0NDQtYmRlYTYzZTVhN2M0
LzEvSEwxWFJ1TUFDUjN0R2hHaE94YUFlMF9ROGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEknhZg3N
qibUn0Crxt2N15xmCuTFaijxchEJ95tywNKrx8spwSL0NJ4o3r+jjSFjCH/jWMmG
vm7o6Ld+ebYAwImrhcOG9m5qtwTr/APlGG39Cr8RH022zvVCy+lgRq+ASKwkfhOi
dPyN2rSc7qy8gEIKtuNUkNx/YAzbZhJskbxef+8R1IsgBzCP5tsEkI4iUvikvWUA
Gu9RUo4lv2neZnHLLHpgg7k/46Y9AlH6wFuldjpL5GhF7fInJHEldFPmCWpzNafE
kYOYXqMV9zHKTKpQfcd3z9Pt4gKd4GOP8X5ecFwFcOnmlqH5qQrv/iqhe2taLO6p
hKmYtgMyPxe3Yg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:00 2025 by rpki-client