Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: 1Zou3xAg0/UGFlFPKHiHJQSyOgBbpFlwNClK+tE6APg=
Subject key identifier: 94:01:7D:29:98:C4:95:D4:60:99:23:7C:CA:73:E5:FD:59:B5:6F:81
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 0194BC04FE6841694589941DCCBF6E89FAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 0C85
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: Ty2x8YSt5++LmJjog46qdxJWT3tKQ2rbtltmTSFYayw=)
2: vH3uZ08iyiY8zb-A3dRrracn6LQ.roa (hash: zmUAFJf99C5ECEtVBxVkr25oo8bxiW5B47UWFtDZGZ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fe:68:41:69:45:89:94:1d:cc:bf:6e:89:fa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=94017d2998c495d46099237cca73e5fd59b56f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:a5:d1:4b:54:d8:4c:f4:11:4c:3d:b1:22:
0d:c0:e3:c9:46:07:ce:62:21:43:f2:ca:6e:8d:f4:
6a:e1:bb:10:c5:5f:7c:7a:75:3d:6c:83:8c:25:46:
10:ae:6d:c9:bf:63:eb:1b:9d:e3:17:15:96:67:60:
f4:ce:0a:48:a4:a9:a1:7d:76:78:b7:8a:91:aa:01:
d5:fd:80:fc:06:b8:c8:3b:97:8b:e8:a4:fe:31:a3:
31:a7:14:87:8e:f8:5d:0f:75:66:75:6f:47:e4:ad:
00:41:a0:f1:a1:fe:68:e8:cb:ed:6f:b4:1d:05:41:
0d:7b:8c:27:19:37:ca:d1:57:7d:e2:81:fa:dd:e3:
c5:06:72:05:71:ef:6b:01:09:2b:f2:c4:12:2d:55:
dc:f1:7f:4e:80:d8:a1:4a:81:b4:78:a0:51:cd:72:
42:b8:b9:39:db:ef:dd:61:3d:24:46:e9:5b:4f:53:
95:6c:6e:07:1a:e3:2e:0d:8e:4f:64:f4:82:79:a5:
70:8a:a5:1b:ce:08:80:5c:e6:c4:52:11:40:23:7a:
d0:70:d6:d2:ab:67:e7:e3:2a:2d:c5:be:bd:21:a5:
3e:94:bf:e3:21:7d:3e:d9:74:ec:bc:6d:ab:15:4e:
1a:53:52:98:32:0c:a4:c2:53:73:3f:82:71:76:2d:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:7D:29:98:C4:95:D4:60:99:23:7C:CA:73:E5:FD:59:B5:6F:81
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:cf:d3:95:be:73:9e:36:23:1b:f7:35:0f:57:96:8d:9d:
c6:10:f4:a6:62:b1:08:dd:68:98:03:5a:7f:2d:38:29:a6:f5:
9f:18:ab:c6:d7:bc:30:e3:0d:02:04:e0:1a:88:4a:23:07:35:
60:52:b9:29:f1:bb:51:22:59:2f:54:24:83:37:18:0e:34:80:
ad:d6:6c:76:33:9d:c5:47:38:e1:08:0e:3c:51:c3:f4:df:74:
d2:2a:03:f3:7b:4d:18:87:d4:62:ac:53:5b:bd:9c:44:ad:77:
bc:57:d4:97:55:8b:85:92:e3:13:6f:35:b9:73:58:51:b6:86:
f7:b5:df:cf:b4:35:f3:9a:61:e0:f6:61:36:3f:b7:3f:e7:54:
63:3e:9b:12:b7:11:0a:e3:6a:50:00:43:9b:34:b4:69:36:6e:
9a:4d:fe:e8:f6:f6:2d:71:05:b6:bb:d3:85:55:1e:71:dd:ca:
6a:7f:6a:c6:bd:11:65:92:ba:49:2b:af:88:4b:50:af:1c:29:
7e:0c:2c:cb:33:c4:92:9c:d7:30:01:c5:c6:95:4f:94:32:ac:
7c:7c:7a:01:86:6f:54:eb:40:aa:f2:91:8a:2b:d9:70:58:77:
e2:b4:04:b3:a7:4e:80:73:49:aa:f8:83:64:ce:c8:fa:e0:a2:
38:00:04:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BP5oQWlFiZQdzL9uifrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw
M2Q3ZjgwHhcNMjUwMTMxMTEwMDMxWhcNMjUwMjAxMTEwMDMxWjAzMTEwLwYDVQQD
Eyg5NDAxN2QyOTk4YzQ5NWQ0NjA5OTIzN2NjYTczZTVmZDU5YjU2ZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKCl0UtU2Ez0EUw9sSINwOPJRgfO
YiFD8spujfRq4bsQxV98enU9bIOMJUYQrm3Jv2PrG53jFxWWZ2D0zgpIpKmhfXZ4
t4qRqgHV/YD8BrjIO5eL6KT+MaMxpxSHjvhdD3VmdW9H5K0AQaDxof5o6Mvtb7Qd
BUENe4wnGTfK0Vd94oH63ePFBnIFce9rAQkr8sQSLVXc8X9OgNihSoG0eKBRzXJC
uLk52+/dYT0kRulbT1OVbG4HGuMuDY5PZPSCeaVwiqUbzgiAXObEUhFAI3rQcNbS
q2fn4yotxb69IaU+lL/jIX0+2XTsvG2rFU4aU1KYMgykwlNzP4Jxdi0fEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQBfSmYxJXUYJkjfMpz5f1ZtW+BMB8GA1UdIwQY
MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt
NWI0NTM2YTc5ZTgyLzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy
LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRfP05W+
c542Ixv3NQ9Xlo2dxhD0pmKxCN1omANafy04Kab1nxirxte8MOMNAgTgGohKIwc1
YFK5KfG7USJZL1QkgzcYDjSArdZsdjOdxUc44QgOPFHD9N900ioD83tNGIfUYqxT
W72cRK13vFfUl1WLhZLjE281uXNYUbaG97Xfz7Q185ph4PZhNj+3P+dUYz6bErcR
CuNqUABDmzS0aTZumk3+6Pb2LXEFtrvThVUecd3Kan9qxr0RZZK6SSuviEtQrxwp
fgwsyzPEkpzXMAHFxpVPlDKsfHx6AYZvVOtAqvKRiivZcFh34rQEs6dOgHNJqviD
ZM7I+uCiOAAE4w==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:35:08 2025 by rpki-client