Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier: b+D93P0nI7Tizjzp66IlwbSciV2SekABX5AaMMASrBE=
Subject key identifier: 30:B3:73:28:68:58:92:EF:02:42:52:91:3D:F9:F3:69:13:B2:CC:DC
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 0194BCE0E5D899A32F3C97780F53A607B977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: 3XRftSnmBvJ2RUOfHdBIfeYpXLS3wzJFuEjUNoiuvPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e5:d8:99:a3:2f:3c:97:78:0f:53:a6:07:b9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=30b37328685892ef024252913df9f36913b2ccdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:1d:86:60:ac:1a:db:9f:ef:3b:58:76:ca:
6c:4a:bc:9c:d6:ac:cf:fc:fb:2f:d8:69:13:30:7a:
ab:05:01:ec:b7:8d:bd:66:37:5f:e5:3b:30:92:42:
76:3b:80:2f:b3:b3:a5:e2:5f:f2:fb:f0:89:8c:f1:
32:ca:fb:35:3d:ba:31:a1:af:a4:87:59:3a:21:29:
2e:fb:30:f9:ee:ae:90:d7:bc:67:a9:ea:26:3b:d3:
b0:9d:39:04:a4:f4:98:d9:de:ce:8d:9f:eb:26:66:
1c:99:0a:10:8f:91:f6:03:8c:93:b3:3a:62:ee:cf:
3e:96:e8:1e:51:8a:2c:c5:5d:56:0c:d2:54:de:0d:
6f:11:aa:67:6f:82:4c:6e:3f:91:d6:a0:f6:25:11:
5c:9f:5a:53:92:0e:cb:83:67:5e:ab:ad:30:6a:d3:
c0:cf:ac:e2:5c:fc:6f:f7:0b:44:02:0b:51:00:cc:
6c:09:a1:b0:48:4b:49:83:e7:71:71:d7:6a:97:82:
18:98:25:c0:cc:b4:2d:da:16:f0:ba:38:c1:e2:fd:
ea:74:3b:8c:2a:3a:ed:b9:72:96:60:35:f0:bf:bd:
b5:f0:b3:d6:12:93:9f:e9:50:34:3c:05:43:4e:74:
4d:a6:c0:1f:2f:01:66:39:e2:a6:70:da:1a:20:9b:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:73:28:68:58:92:EF:02:42:52:91:3D:F9:F3:69:13:B2:CC:DC
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:27:dd:f9:2b:2d:a3:4b:13:43:35:07:dd:7d:01:88:ed:3b:
4e:20:f4:73:8a:41:ec:cb:56:46:37:d1:6e:7d:16:f1:da:80:
0c:65:39:70:8b:36:15:b9:b6:23:1a:fa:bb:ba:8e:4a:10:79:
ef:77:5e:b9:75:b4:c8:50:66:b7:69:55:de:3b:0b:7a:e0:a4:
e3:68:59:45:9f:f0:35:63:32:f6:99:14:33:6c:25:0e:5d:f6:
09:73:9b:88:b2:94:f2:fe:94:b5:e0:01:f9:ec:bf:fa:63:6f:
4c:a0:79:26:54:7a:90:ac:fb:cb:da:9d:b4:a9:cb:a2:4a:51:
99:52:fb:0c:17:33:62:6b:dd:8a:ca:30:b8:cb:24:c1:73:37:
7d:29:72:68:90:df:c9:fb:5b:7d:d7:a4:fe:68:d3:96:e8:f7:
2b:72:46:93:b0:97:45:26:41:7c:61:3f:54:f9:a0:ce:c4:74:
6d:fb:e7:91:ef:a1:4f:4c:a9:4e:e1:50:cb:1e:9e:6e:c1:03:
1f:05:ab:a5:fd:d5:a6:e5:95:59:24:c7:d6:cd:f3:7d:59:4c:
f3:80:e8:47:6c:50:db:c1:cf:4f:ef:43:63:06:10:4f:58:79:
79:6f:9b:87:28:8a:af:f1:35:41:85:b5:2f:f4:c3:ba:f5:f9:
30:da:77:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OXYmaMvPJd4D1OmB7l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YWY1MzEwODA1ZWM3NTYxYTFhMjJmOWM4OTBjOTczMWZi
NmRlYmYwHhcNMjUwMTMxMTUwMDQyWhcNMjUwMjAxMTUwMDQyWjAzMTEwLwYDVQQD
EygzMGIzNzMyODY4NTg5MmVmMDI0MjUyOTEzZGY5ZjM2OTEzYjJjY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrsdhmCsGtuf7ztYdspsSryc1qzP
/Psv2GkTMHqrBQHst429Zjdf5TswkkJ2O4Avs7Ol4l/y+/CJjPEyyvs1Pboxoa+k
h1k6ISku+zD57q6Q17xnqeomO9OwnTkEpPSY2d7OjZ/rJmYcmQoQj5H2A4yTszpi
7s8+lugeUYosxV1WDNJU3g1vEapnb4JMbj+R1qD2JRFcn1pTkg7Lg2deq60watPA
z6ziXPxv9wtEAgtRAMxsCaGwSEtJg+dxcddql4IYmCXAzLQt2hbwujjB4v3qdDuM
KjrtuXKWYDXwv7218LPWEpOf6VA0PAVDTnRNpsAfLwFmOeKmcNoaIJvUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCzcyhoWJLvAkJSkT3582kTsszcMB8GA1UdIwQY
MBaAFIWvUxCAXsdWGhoi+ciQyXMftt6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTct
NzUyODM1MGQ0YzEzLzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8wMDE0MDYtMmUxZi00YWViLTkwYTctNzUyODM1MGQ0YzEz
LzEvaGE5VEVJQmV4MVlhR2lMNXlKREpjeC0yM3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyfd+Sst
o0sTQzUH3X0BiO07TiD0c4pB7MtWRjfRbn0W8dqADGU5cIs2Fbm2Ixr6u7qOShB5
73deuXW0yFBmt2lV3jsLeuCk42hZRZ/wNWMy9pkUM2wlDl32CXObiLKU8v6UteAB
+ey/+mNvTKB5JlR6kKz7y9qdtKnLokpRmVL7DBczYmvdisowuMskwXM3fSlyaJDf
yftbfdek/mjTluj3K3JGk7CXRSZBfGE/VPmgzsR0bfvnke+hT0ypTuFQyx6ebsED
HwWrpf3VpuWVWSTH1s3zfVlM84DoR2xQ28HPT+9DYwYQT1h5eW+bhyiKr/E1QYW1
L/TDuvX5MNp3sQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:39 2025 by rpki-client