Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: kdGw5EE97k9VoRcghjYx8uGL0IA67vgZQJpaI/c57eE=
Subject key identifier: F2:9C:A6:C9:14:C0:73:9E:ED:4E:09:A9:69:2A:2B:CE:2D:16:AC:95
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 0194BC3BF5A66BA1762AE3BCB4013B02CD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: Ov5Fysm5tHqBi/ZnVorbVCl36uq8ktfWJOOG3+7I8Ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:a6:6b:a1:76:2a:e3:bc:b4:01:3b:02:cd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=f29ca6c914c0739eed4e09a9692a2bce2d16ac95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:db:87:18:a6:ca:e0:36:d7:e7:35:1f:a4:e6:
63:b8:1a:83:8b:01:11:87:35:78:32:8b:83:af:e1:
ef:0f:fe:40:1f:08:db:b1:34:fe:90:58:95:35:a3:
17:ee:c6:d7:b8:c6:cb:12:65:22:ad:8e:a0:e0:86:
49:b7:fd:d5:51:5e:f8:1a:b1:a6:bb:48:6a:d7:04:
04:15:23:b0:34:d5:c1:0f:83:8c:f8:7a:ce:75:4c:
f4:5d:3f:a5:91:04:36:ac:77:59:b4:65:9b:d9:34:
1d:85:d2:98:e2:a2:d6:12:dd:6b:68:7e:38:96:45:
15:7c:a0:78:f4:cf:6c:6a:9d:b3:fb:3b:90:20:76:
49:8d:35:12:33:8a:e2:a4:48:52:d4:5e:40:59:73:
1c:5c:c9:46:61:e1:99:78:f5:f3:39:c0:00:d6:1f:
97:d6:9f:1d:50:53:2a:62:b9:e7:66:0f:02:9d:94:
90:9d:74:e4:fe:58:02:be:3b:c3:d9:64:3f:66:88:
61:5e:f0:e1:05:f3:aa:46:fd:3a:f4:d3:e8:8d:09:
f5:56:3d:01:2d:5e:5f:f0:f2:98:44:f9:5b:b2:76:
2c:c0:7a:e2:f7:55:4f:58:20:94:10:3c:60:18:ed:
df:80:e0:8a:87:fa:0a:83:c9:e3:4d:46:a5:9b:8d:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:A6:C9:14:C0:73:9E:ED:4E:09:A9:69:2A:2B:CE:2D:16:AC:95
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:42:89:13:ac:6b:6f:a5:a7:e0:3c:62:8c:51:68:32:ae:b2:
38:ce:f7:3e:f4:12:f4:83:9f:bc:0f:1b:40:b2:66:b7:fd:dc:
33:60:dd:ce:8d:3a:b4:18:6b:68:b8:92:bb:22:d8:cd:bf:f7:
e1:89:2a:06:b6:0c:81:df:9c:87:cc:d5:a9:5f:a9:e1:9e:7b:
6e:76:d6:4a:eb:7f:3e:ec:4e:46:34:ae:ae:d7:22:52:d9:d7:
55:ed:3a:28:36:ee:cb:b2:6b:e7:cc:9f:41:22:22:4a:45:76:
5c:9c:c8:9b:ba:5d:d4:3b:5d:27:76:7a:c2:15:02:84:0d:52:
81:84:86:28:c8:bb:0a:32:6c:5e:62:4a:51:07:52:1d:e8:69:
3e:12:63:32:b2:34:dc:a8:70:f1:50:be:06:a4:0a:27:5e:25:
d3:89:83:ad:1a:37:04:b8:ba:ba:b9:32:92:ad:71:b1:14:99:
a8:fa:7f:7a:5d:51:8c:b1:84:ad:78:64:f1:a0:38:76:9d:f1:
c1:5a:01:a1:ff:e4:c1:f6:5f:85:ad:28:f2:0a:23:9d:5d:53:
6d:29:bd:af:6b:bf:29:dd:54:17:ca:ec:b7:1f:75:19:0c:b7:
e4:e9:ff:52:16:a8:52:5d:c7:85:22:95:d4:ca:e1:68:61:55:
7e:2f:00:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/Wma6F2KuO8tAE7As1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjVjY2VmMTQwZmYzMGU0ZDdkYTliZjcwNTE2YTAzZjNj
YzA4MDEwHhcNMjUwMTMxMTIwMDMzWhcNMjUwMjAxMTIwMDMzWjAzMTEwLwYDVQQD
EyhmMjljYTZjOTE0YzA3MzllZWQ0ZTA5YTk2OTJhMmJjZTJkMTZhYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3duHGKbK4DbX5zUfpOZjuBqDiwER
hzV4MouDr+HvD/5AHwjbsTT+kFiVNaMX7sbXuMbLEmUirY6g4IZJt/3VUV74GrGm
u0hq1wQEFSOwNNXBD4OM+HrOdUz0XT+lkQQ2rHdZtGWb2TQdhdKY4qLWEt1raH44
lkUVfKB49M9sap2z+zuQIHZJjTUSM4ripEhS1F5AWXMcXMlGYeGZePXzOcAA1h+X
1p8dUFMqYrnnZg8CnZSQnXTk/lgCvjvD2WQ/ZohhXvDhBfOqRv069NPojQn1Vj0B
LV5f8PKYRPlbsnYswHri91VPWCCUEDxgGO3fgOCKh/oKg8njTUalm403JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKcpskUwHOe7U4JqWkqK84tFqyVMB8GA1UdIwQY
MBaAFB9lzO8UD/MOTX2pv3BRagPzzAgBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJYTTd4UVA4dzVOZmFtX2NGRnFBX1BNQ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNmM1OTItN2Q3ZS00OWFlLWIxZDQt
NDBkMDFhNzZlMjVlLzEvSDJYTTd4UVA4dzVOZmFtX2NGRnFBX1BNQ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNmM1OTItN2Q3ZS00OWFlLWIxZDQtNDBkMDFhNzZlMjVl
LzEvSDJYTTd4UVA4dzVOZmFtX2NGRnFBX1BNQ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkKJE6xr
b6Wn4DxijFFoMq6yOM73PvQS9IOfvA8bQLJmt/3cM2Ddzo06tBhraLiSuyLYzb/3
4YkqBrYMgd+ch8zVqV+p4Z57bnbWSut/PuxORjSurtciUtnXVe06KDbuy7Jr58yf
QSIiSkV2XJzIm7pd1DtdJ3Z6whUChA1SgYSGKMi7CjJsXmJKUQdSHehpPhJjMrI0
3Khw8VC+BqQKJ14l04mDrRo3BLi6urkykq1xsRSZqPp/el1RjLGErXhk8aA4dp3x
wVoBof/kwfZfha0o8gojnV1TbSm9r2u/Kd1UF8rstx91GQy35On/UhaoUl3HhSKV
1MrhaGFVfi8Agg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client