Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: BNlCX3RM83sFI1b0UJaLHMFlea/H5QRgiXSWxvB1w1U=
Subject key identifier: 57:4D:84:77:E5:AE:9C:30:57:97:37:68:50:80:0B:2E:7B:31:20:E5
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 0194BD857FB4EDFB181360039BA7C3C8BE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: ENjY8lzxKcUrPq9c+Rs6p3tJcr8MAaQ9QZP+W05SXjY=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7f:b4:ed:fb:18:13:60:03:9b:a7:c3:c8:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=574d8477e5ae9c305797376850800b2e7b3120e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:5a:31:94:f8:8e:04:75:40:bc:51:8d:10:
0b:14:6d:f1:a3:7d:a5:79:94:5d:ee:15:d4:bc:1a:
51:0d:61:0f:40:11:05:97:b3:29:9f:12:77:66:bd:
17:67:f3:6b:14:04:f3:cb:47:27:75:08:bb:34:4f:
9c:d7:f0:7d:1b:fe:bc:91:36:c3:06:c4:0a:f4:ad:
13:eb:29:d1:ee:8d:ea:3b:0b:6f:48:e4:42:5f:fb:
80:e7:26:5c:03:aa:4c:a5:b0:da:9c:65:b8:c7:a6:
6a:b4:89:cf:4e:7c:06:82:6a:0e:5b:11:88:91:8c:
5c:a9:27:82:9b:6e:4d:39:11:dd:e2:85:d6:24:d3:
09:d4:9e:9c:f6:d9:49:39:1f:92:33:46:af:5e:a3:
00:64:72:81:fb:72:c6:51:72:4c:a9:ae:89:fd:6d:
8e:72:9a:b9:12:7d:fc:be:83:05:fd:fc:fd:85:81:
3b:b9:c7:ef:09:49:89:86:c2:3f:ae:b8:e6:e3:19:
ff:26:62:d2:f9:6b:c9:55:7d:67:bd:ea:58:fe:62:
34:11:6c:f8:64:35:bd:1c:6c:bc:b6:e5:6a:2d:bc:
fc:95:f1:a6:cb:aa:e0:2f:82:4b:94:7a:d0:88:85:
30:f4:98:7d:54:5c:ea:a8:9a:6c:20:5f:05:e1:6b:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:84:77:E5:AE:9C:30:57:97:37:68:50:80:0B:2E:7B:31:20:E5
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bb:0f:8c:0d:5d:28:53:7e:5c:93:fe:03:53:8f:71:74:2c:
0f:71:78:da:b1:ba:80:04:76:bb:4d:1e:cb:a5:15:8e:be:a0:
a7:c9:08:68:f0:fd:79:d3:4b:4a:4a:3b:68:fc:9b:d7:dd:40:
4a:da:59:82:4e:11:f8:8f:a5:9a:f1:ee:7e:71:b9:3d:28:0b:
d3:72:c3:b4:49:f8:27:38:d7:39:42:d0:45:04:90:73:62:2c:
20:ba:87:4a:a0:cc:50:2d:f8:a5:21:c2:2f:c2:ed:bb:0f:c1:
7a:33:fd:77:0c:f2:ee:ad:83:2e:32:23:89:1e:1c:86:2c:7d:
6a:e7:7d:43:5e:78:2e:82:be:ff:43:ee:65:55:af:4f:81:eb:
ba:41:83:03:5e:10:8d:55:5c:0d:7c:da:93:cb:f6:bd:5b:39:
fe:4e:14:b2:a0:10:fd:fc:b3:af:48:12:09:f3:c3:7d:db:d1:
2d:18:3c:0b:82:43:f0:51:44:40:85:73:7a:b5:0b:d0:87:14:
69:5c:62:df:36:27:b9:ac:bc:61:b0:90:4b:40:cc:40:d5:99:
b7:8c:d3:00:f3:0f:a4:46:3a:da:fb:dc:6d:03:de:4c:ec:a9:
ca:be:a8:d1:4b:16:68:da:04:a1:88:9b:ad:19:f5:b4:2b:3d:
af:77:2c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hX+07fsYE2ADm6fDyL42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjgzZjk1Yzk4ZDJjZmU5ZDc5Y2RkM2RiOGVlODEzOGJi
MzU3NzIwHhcNMjUwMTMxMTgwMDMwWhcNMjUwMjAxMTgwMDMwWjAzMTEwLwYDVQQD
Eyg1NzRkODQ3N2U1YWU5YzMwNTc5NzM3Njg1MDgwMGIyZTdiMzEyMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RNaMZT4jgR1QLxRjRALFG3xo32l
eZRd7hXUvBpRDWEPQBEFl7MpnxJ3Zr0XZ/NrFATzy0cndQi7NE+c1/B9G/68kTbD
BsQK9K0T6ynR7o3qOwtvSORCX/uA5yZcA6pMpbDanGW4x6ZqtInPTnwGgmoOWxGI
kYxcqSeCm25NORHd4oXWJNMJ1J6c9tlJOR+SM0avXqMAZHKB+3LGUXJMqa6J/W2O
cpq5En38voMF/fz9hYE7ucfvCUmJhsI/rrjm4xn/JmLS+WvJVX1nvepY/mI0EWz4
ZDW9HGy8tuVqLbz8lfGmy6rgL4JLlHrQiIUw9Jh9VFzqqJpsIF8F4WsUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdNhHflrpwwV5c3aFCACy57MSDlMB8GA1UdIwQY
MBaAFBxoP5XJjSz+nXnN09uO6BOLs1dyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWIt
YjNhZTFlNGMzMmI3LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MDZmM2QtYzg2My00NjJmLTg3ZWItYjNhZTFlNGMzMmI3
LzEvSEdnX2xjbU5MUDZkZWMzVDI0N29FNHV6VjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELsPjA1d
KFN+XJP+A1OPcXQsD3F42rG6gAR2u00ey6UVjr6gp8kIaPD9edNLSko7aPyb191A
StpZgk4R+I+lmvHufnG5PSgL03LDtEn4JzjXOULQRQSQc2IsILqHSqDMUC34pSHC
L8Ltuw/BejP9dwzy7q2DLjIjiR4chix9aud9Q154LoK+/0PuZVWvT4HrukGDA14Q
jVVcDXzak8v2vVs5/k4UsqAQ/fyzr0gSCfPDfdvRLRg8C4JD8FFEQIVzerUL0IcU
aVxi3zYnuay8YbCQS0DMQNWZt4zTAPMPpEY62vvcbQPeTOypyr6o0UsWaNoEoYib
rRn1tCs9r3csJg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:58 2025 by rpki-client