Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
File: hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft (raw, json)
Hash identifier: /ZAzt1/0pnkbZaPNxpcCFsCW6GG3eT1Ro6XpWRw8/oE=
Subject key identifier: B1:E0:3D:7F:A2:0B:81:8E:FF:67:5E:69:2C:8C:1C:D8:48:2B:F8:A5
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Certificate issuer: /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial: 0194BD855E373F439E7856615560A2616C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: RIDaaDvlCW6kZ_Qmkvg7iHhvkxs.roa (hash: TtEPT7gUdS6PVf0+fJoFxhyGOnl72shQIlFVnXWjJd4=)
2: hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl (hash: fqW/yEW5Y9VK3xhK6FXo8AG/SXbj0B/Mbzu8+K7wzVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5e:37:3f:43:9e:78:56:61:55:60:a2:61:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=b1e03d7fa20b818eff675e692c8c1cd8482bf8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:4f:df:d4:14:81:83:40:11:b6:ba:b1:00:
f5:8b:f4:e6:6e:a2:43:89:e4:3e:39:a7:d3:d3:30:
16:f5:bd:e6:9d:19:08:77:78:3d:a4:d7:7a:96:82:
10:23:14:ac:a3:22:ce:5a:59:65:60:e9:7a:31:9f:
68:cc:23:e1:bc:5c:24:63:48:e2:f1:02:9f:15:01:
99:56:c6:9a:c1:c4:b0:03:42:e8:6d:32:2b:79:1e:
ab:8a:8b:00:20:62:a9:e1:16:79:fc:71:b3:ae:c6:
aa:f0:fd:a5:1e:9a:b2:0b:91:22:a6:40:2c:9c:6f:
99:3f:dd:12:a9:e5:e7:ba:00:fd:9e:db:83:43:bb:
14:9f:9a:83:b5:3c:cb:41:a0:7a:dc:45:f7:bd:6f:
00:36:f4:02:b7:69:d6:00:0b:42:54:02:d3:0c:32:
f7:f3:86:ab:2b:bb:23:f9:6e:de:c5:55:bd:d2:94:
83:22:53:cc:0f:ba:9c:66:f3:7d:0f:bd:a6:fa:b2:
31:c6:f0:09:19:7a:4a:d8:82:af:e4:24:ef:70:69:
41:5c:9d:c1:62:27:86:74:32:d4:34:5f:82:96:b7:
59:47:a4:07:54:9c:91:40:48:6e:2f:09:31:5d:4a:
a6:3d:1d:1c:d8:3e:fe:3f:28:a2:d7:c4:22:7a:c0:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:3D:7F:A2:0B:81:8E:FF:67:5E:69:2C:8C:1C:D8:48:2B:F8:A5
X509v3 Authority Key Identifier:
keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:ed:22:c5:4a:ec:b6:dd:c1:e4:ca:83:19:af:57:ad:4f:
a9:3c:9f:9e:df:a4:21:2f:80:ba:04:1d:4b:72:8b:ce:90:39:
f2:b3:43:90:a5:54:49:c0:f3:ce:52:95:9b:c0:f7:db:5e:e2:
07:55:73:59:60:75:44:53:bd:ec:fe:7a:44:32:c1:87:0b:6c:
16:87:57:3c:ef:2e:35:72:6f:29:35:56:fb:f9:2c:f8:12:2e:
33:2e:a4:ee:e3:1c:08:fd:0c:71:92:32:5a:0e:fa:c8:51:53:
db:9e:38:ac:67:eb:5d:a6:70:7a:9a:e1:9d:d6:24:4d:32:54:
eb:ad:58:92:e9:e3:ae:ee:51:d8:33:e4:b7:59:d8:eb:73:50:
2d:7a:27:58:fc:6a:47:fb:49:05:ee:04:db:49:74:7c:23:54:
88:5c:84:fc:2a:9c:cc:d0:0f:a3:e9:d7:26:7c:2c:c2:45:11:
f3:3a:d1:74:ec:b8:43:6f:32:ee:12:c1:48:01:62:2f:19:a9:
cc:35:66:2b:29:8e:62:d1:68:04:49:fd:32:8c:f1:62:6f:2c:
47:c5:64:69:64:40:d1:3b:8a:70:c1:e9:51:81:2b:09:a1:5b:
d1:cf:a1:e8:90:f3:1b:c5:b0:88:27:78:5a:9b:c9:85:fa:f8:
e2:fe:7a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hV43P0OeeFZhVWCiYWw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTRhY2EwMjBmYjJiZGM5M2E0NzI2NmU4N2VjNjdjZGM4
ODU3YzUwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
EyhiMWUwM2Q3ZmEyMGI4MThlZmY2NzVlNjkyYzhjMWNkODQ4MmJmOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZP39QUgYNAEba6sQD1i/TmbqJD
ieQ+OafT0zAW9b3mnRkId3g9pNd6loIQIxSsoyLOWlllYOl6MZ9ozCPhvFwkY0ji
8QKfFQGZVsaawcSwA0LobTIreR6riosAIGKp4RZ5/HGzrsaq8P2lHpqyC5EipkAs
nG+ZP90SqeXnugD9ntuDQ7sUn5qDtTzLQaB63EX3vW8ANvQCt2nWAAtCVALTDDL3
84arK7sj+W7exVW90pSDIlPMD7qcZvN9D72m+rIxxvAJGXpK2IKv5CTvcGlBXJ3B
YieGdDLUNF+ClrdZR6QHVJyRQEhuLwkxXUqmPR0c2D7+Pyii18QiesCyDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHgPX+iC4GO/2deaSyMHNhIK/ilMB8GA1UdIwQY
MBaAFISkrKAg+yvck6RyZuh+xnzciFfFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEtTc29DRDdLOXlUcEhKbTZIN0dmTnlJVjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82YmIyMjctNWIzNi00ZjJhLWExYzUt
OWVmMzZkMjUxNTE3LzEvaEtTc29DRDdLOXlUcEhKbTZIN0dmTnlJVjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82YmIyMjctNWIzNi00ZjJhLWExYzUtOWVmMzZkMjUxNTE3
LzEvaEtTc29DRDdLOXlUcEhKbTZIN0dmTnlJVjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCbtIsVK
7LbdweTKgxmvV61PqTyfnt+kIS+AugQdS3KLzpA58rNDkKVUScDzzlKVm8D3217i
B1VzWWB1RFO97P56RDLBhwtsFodXPO8uNXJvKTVW+/ks+BIuMy6k7uMcCP0McZIy
Wg76yFFT2544rGfrXaZweprhndYkTTJU661Ykunjru5R2DPkt1nY63NQLXonWPxq
R/tJBe4E20l0fCNUiFyE/CqczNAPo+nXJnwswkUR8zrRdOy4Q28y7hLBSAFiLxmp
zDVmKymOYtFoBEn9MozxYm8sR8VkaWRA0TuKcMHpUYErCaFb0c+h6JDzG8WwiCd4
WpvJhfr44v56cQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client