Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
File: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft (raw, json)
Hash identifier: mKoTcU12EOtTHcvgpGDENlhNuPd9ymWw//giyew/7EE=
Subject key identifier: EE:74:A4:8B:D5:E5:11:FE:D3:D0:87:0E:92:20:7C:53:B6:8C:26:5D
Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Certificate serial: 0194BC04B37E6AF4D5D53E5D0D794238DE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
Manifest number: 0227
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: bnBiazYSImw_ApoJseLeYwZStp4.roa (hash: I2WcGK9ihJdOIVnj78YrG67UcyAn3LlxUVqcoFs7moE=)
2: ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl (hash: Hq8jfkd1KPiGh2v0bpNldXS3cMABVO4G+Aui1e0S7OU=)
3: qHz8JgVyW7Y2ey-2uD49I-CkUds.roa (hash: nfGpEgDs7AV87sCTHpwjPD+dCfTR2zl6OCzmjs1XoeQ=)
4: sOcMNTKEK2vEMDsn_cwPjTFtrV4.roa (hash: pJ6YvqIq3DawUThWjacZ6kiuFXQ2zw291qAdZv05g/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:7e:6a:f4:d5:d5:3e:5d:0d:79:42:38:de:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=ee74a48bd5e511fed3d0870e92207c53b68c265d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:98:55:83:3d:17:af:42:06:a3:01:eb:29:
3e:47:a6:ee:07:2c:cb:6a:96:45:92:21:07:2c:6f:
4e:1c:5b:e8:f5:e0:cd:0f:03:74:81:35:e5:ac:9c:
2d:22:fc:5d:c6:ab:cb:fd:86:3f:43:3b:8a:32:10:
81:1a:3c:f5:e2:71:11:c0:9f:4c:e9:e9:33:c1:e5:
74:13:a4:0d:1b:20:8d:56:6e:0d:c9:bd:47:67:fc:
78:91:56:17:78:fd:2a:51:f4:e7:c1:3c:94:10:fa:
e0:36:db:44:29:35:7c:7d:ef:e2:98:aa:3c:d3:62:
78:94:a6:6d:08:f6:b9:22:96:d8:5a:d7:6b:53:13:
9f:78:5b:cf:52:5c:9c:45:72:9d:e4:d1:82:30:e1:
6f:3c:6a:ef:2b:b7:c2:46:26:4b:92:bc:7d:d5:95:
3f:dc:74:2e:5e:df:a1:13:8f:39:33:95:32:b9:d0:
f7:01:8c:a0:75:d4:d9:4d:a3:1d:9c:3d:23:9f:f8:
ee:ce:20:b0:b6:54:91:ab:19:a1:6a:bb:a3:8e:d8:
63:cd:45:ce:0d:fa:55:5b:50:bd:59:28:15:8c:63:
2d:e0:68:ab:82:ea:86:22:47:bf:88:09:f9:88:fc:
7a:81:8b:54:03:82:ce:0c:2f:6c:00:a4:09:b7:a8:
90:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:A4:8B:D5:E5:11:FE:D3:D0:87:0E:92:20:7C:53:B6:8C:26:5D
X509v3 Authority Key Identifier:
keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:6f:ad:d3:bd:e5:6a:fa:95:dd:7b:86:7b:59:51:3e:ef:11:
07:1b:7f:4f:70:98:a7:93:30:e1:cc:e5:d0:8b:f1:c6:9b:f2:
f2:06:5d:8b:33:4b:d9:7b:ec:c1:b7:fe:38:98:63:29:2a:1b:
93:84:93:9d:8f:4f:35:5f:7d:e5:78:af:b2:44:98:78:94:2f:
4c:4d:d0:86:70:f3:6d:44:6c:ba:36:c3:57:94:1b:e1:b8:0b:
9c:6a:93:e9:86:7f:78:58:61:93:36:2e:1a:8f:73:e0:32:39:
5f:f1:1f:bb:23:6d:d3:74:b3:33:7b:36:f5:98:33:4b:27:7e:
97:33:74:5d:db:c2:65:df:9e:34:c8:0c:6f:74:13:f3:a3:17:
67:21:2a:93:1c:20:fb:76:11:be:c1:4e:2e:4a:70:da:e9:55:
fb:de:75:e9:a9:49:65:49:4a:ce:c1:d1:37:2f:6f:96:39:e5:
5a:ea:8c:05:e2:d3:16:c1:0e:a7:b5:71:32:71:56:e2:06:8b:
60:ee:26:6d:8a:4f:4f:12:50:0c:f6:5f:79:47:f0:6d:3e:72:
96:33:6f:da:7e:fa:7f:4f:0c:6c:dc:a5:c4:f8:12:d5:bd:aa:
2a:23:5d:6d:de:3d:65:d0:a2:df:11:47:23:71:8f:6a:67:60:
9a:5a:85:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLN+avTV1T5dDXlCON4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2
NmJmMjgwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EyhlZTc0YTQ4YmQ1ZTUxMWZlZDNkMDg3MGU5MjIwN2M1M2I2OGMyNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppyYVYM9F69CBqMB6yk+R6buByzL
apZFkiEHLG9OHFvo9eDNDwN0gTXlrJwtIvxdxqvL/YY/QzuKMhCBGjz14nERwJ9M
6ekzweV0E6QNGyCNVm4Nyb1HZ/x4kVYXeP0qUfTnwTyUEPrgNttEKTV8fe/imKo8
02J4lKZtCPa5IpbYWtdrUxOfeFvPUlycRXKd5NGCMOFvPGrvK7fCRiZLkrx91ZU/
3HQuXt+hE485M5UyudD3AYygddTZTaMdnD0jn/juziCwtlSRqxmharujjthjzUXO
DfpVW1C9WSgVjGMt4GirguqGIke/iAn5iPx6gYtUA4LODC9sAKQJt6iQ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO50pIvV5RH+09CHDpIgfFO2jCZdMB8GA1UdIwQY
MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt
MWI3ZWMzOGU5ZjQ0LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0
LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02+t073l
avqV3XuGe1lRPu8RBxt/T3CYp5Mw4czl0Ivxxpvy8gZdizNL2Xvswbf+OJhjKSob
k4STnY9PNV995XivskSYeJQvTE3QhnDzbURsujbDV5Qb4bgLnGqT6YZ/eFhhkzYu
Go9z4DI5X/EfuyNt03SzM3s29ZgzSyd+lzN0XdvCZd+eNMgMb3QT86MXZyEqkxwg
+3YRvsFOLkpw2ulV+9516alJZUlKzsHRNy9vljnlWuqMBeLTFsEOp7VxMnFW4gaL
YO4mbYpPTxJQDPZfeUfwbT5yljNv2n76f08MbNylxPgS1b2qKiNdbd49ZdCi3xFH
I3GPamdgmlqFTw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:00 2025 by rpki-client