Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
File: HzjUsMuomcJPTjQHOE1tP6jVGl8.mft (raw, json)
Hash identifier: GnxTQy2fRd4JE3Odxjd7O5ROs0qxfsShkHAL0P8BPq8=
Subject key identifier: 9E:76:B2:31:CA:1C:AD:02:76:F0:1A:83:AC:2A:06:EB:78:1A:8F:BE
Authority key identifier: 1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
Certificate issuer: /CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Certificate serial: 0194BC3C08E6FD679C8FD3399DA04B22BA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
Manifest number: 01F4
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: HzjUsMuomcJPTjQHOE1tP6jVGl8.crl (hash: wMexRMaTT/I8k8a0GOem/4i7D7bFT8m90ofWih/Tdm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:e6:fd:67:9c:8f:d3:39:9d:a0:4b:22:ba:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f38d4b0cba899c24f4e3407384d6d3fa8d51a5f
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=9e76b231ca1cad0276f01a83ac2a06eb781a8fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:2c:df:7c:e7:dc:77:4f:a1:86:f2:e5:82:
bc:13:6e:e3:cb:a9:91:aa:ba:30:a4:7f:c2:9e:ff:
55:84:35:f7:a3:35:9e:e1:c9:01:e4:e7:ca:7b:56:
47:44:6d:07:f7:9c:6e:78:6d:3d:d3:7b:96:df:c5:
23:c1:6c:b0:2e:aa:d3:23:eb:94:34:37:ad:88:1d:
2f:00:8c:b4:04:f6:ca:b5:05:d3:2e:72:00:c6:a0:
21:08:bf:e8:55:34:fb:b1:51:1c:f1:e8:1f:7e:61:
16:3c:e7:e4:5b:49:6a:fb:9f:a8:96:0b:96:c5:90:
9c:87:26:a6:e0:29:20:0e:36:9a:76:9d:f8:94:c0:
20:d0:1f:a1:d0:0e:1a:0f:f1:9b:88:14:33:34:62:
13:0b:4c:a4:21:ca:91:20:43:5f:46:2b:1f:3b:14:
c9:3e:52:07:41:d2:d5:bf:7f:e1:59:32:fb:96:d9:
f8:99:32:4b:0e:cb:88:3a:96:b6:1c:af:48:fd:29:
90:74:39:f5:53:ce:7c:6e:ac:e1:44:56:76:9a:0e:
b5:5d:79:f0:d6:65:bc:56:3d:ca:fe:d3:73:c0:a2:
64:1d:53:8f:af:3a:86:39:d7:7a:06:1f:73:bb:19:
8a:7f:fc:88:fd:fc:a0:16:6b:32:6e:0b:d8:ba:db:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:76:B2:31:CA:1C:AD:02:76:F0:1A:83:AC:2A:06:EB:78:1A:8F:BE
X509v3 Authority Key Identifier:
keyid:1F:38:D4:B0:CB:A8:99:C2:4F:4E:34:07:38:4D:6D:3F:A8:D5:1A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzjUsMuomcJPTjQHOE1tP6jVGl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/16cf7d-a151-49ec-8d8a-3a288c2c852c/1/HzjUsMuomcJPTjQHOE1tP6jVGl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:28:e4:ff:54:fe:ee:ab:f5:2d:58:68:67:b6:fb:aa:da:
ef:8d:58:db:4e:c4:de:ae:40:77:e1:36:32:80:52:cc:04:3e:
4e:48:55:47:f1:76:e3:8f:8e:2f:45:7b:b1:94:d5:39:72:0a:
5f:44:21:a1:39:a1:03:31:0b:46:e2:28:b1:65:27:23:c2:50:
fb:f4:08:44:21:28:6a:55:f4:80:ed:33:6a:8d:5f:95:4c:7d:
52:0c:7a:1d:14:32:72:58:62:0f:35:98:0a:46:4c:31:ca:b9:
98:70:27:51:32:f9:a1:57:77:f7:90:a1:c9:35:f5:c5:1c:92:
9f:02:bf:a1:2c:0a:6d:1a:c8:a6:ce:b6:52:a6:fa:cd:ff:c5:
9f:66:43:fe:a6:0f:70:33:d1:e9:a8:e0:c1:d9:e8:f4:57:de:
0c:4b:37:ae:d0:73:2b:08:51:69:69:2b:90:c4:2e:db:57:35:
15:c7:83:0f:ff:10:e0:aa:aa:e7:6f:81:bf:68:4f:45:56:bc:
d3:75:49:0c:fd:81:b1:dc:53:ce:39:88:66:2f:6b:74:0b:7c:
be:e9:da:29:76:8a:7a:ef:49:5e:b9:3f:5b:9c:45:3c:12:cc:
78:c0:df:5f:e1:ce:de:f7:56:88:20:db:31:b6:be:b7:dd:88:
d3:3f:a4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAjm/Wecj9M5naBLIroDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzhkNGIwY2JhODk5YzI0ZjRlMzQwNzM4NGQ2ZDNmYThk
NTFhNWYwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg5ZTc2YjIzMWNhMWNhZDAyNzZmMDFhODNhYzJhMDZlYjc4MWE4ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlycs33zn3HdPoYby5YK8E27jy6mR
qrowpH/Cnv9VhDX3ozWe4ckB5OfKe1ZHRG0H95xueG0903uW38UjwWywLqrTI+uU
NDetiB0vAIy0BPbKtQXTLnIAxqAhCL/oVTT7sVEc8egffmEWPOfkW0lq+5+olguW
xZCchyam4CkgDjaadp34lMAg0B+h0A4aD/GbiBQzNGITC0ykIcqRIENfRisfOxTJ
PlIHQdLVv3/hWTL7ltn4mTJLDsuIOpa2HK9I/SmQdDn1U858bqzhRFZ2mg61XXnw
1mW8Vj3K/tNzwKJkHVOPrzqGOdd6Bh9zuxmKf/yI/fygFmsybgvYutv5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ52sjHKHK0CdvAag6wqBut4Go++MB8GA1UdIwQY
MBaAFB841LDLqJnCT040BzhNbT+o1RpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpqVXNNdW9tY0pQVGpRSE9FMXRQNmpWR2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xNmNmN2QtYTE1MS00OWVjLThkOGEt
M2EyODhjMmM4NTJjLzEvSHpqVXNNdW9tY0pQVGpRSE9FMXRQNmpWR2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8xNmNmN2QtYTE1MS00OWVjLThkOGEtM2EyODhjMmM4NTJj
LzEvSHpqVXNNdW9tY0pQVGpRSE9FMXRQNmpWR2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn0o5P9U
/u6r9S1YaGe2+6ra741Y207E3q5Ad+E2MoBSzAQ+TkhVR/F244+OL0V7sZTVOXIK
X0QhoTmhAzELRuIosWUnI8JQ+/QIRCEoalX0gO0zao1flUx9Ugx6HRQyclhiDzWY
CkZMMcq5mHAnUTL5oVd395ChyTX1xRySnwK/oSwKbRrIps62Uqb6zf/Fn2ZD/qYP
cDPR6ajgwdno9FfeDEs3rtBzKwhRaWkrkMQu21c1FceDD/8Q4Kqq52+Bv2hPRVa8
03VJDP2BsdxTzjmIZi9rdAt8vunaKXaKeu9JXrk/W5xFPBLMeMDfX+HO3vdWiCDb
Mba+t92I0z+k+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:16 2025 by rpki-client