Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: N3UNiMYhOZ03TXDjvXW/7IpQJKBiHIAt+iqeC7UbjR4=
Subject key identifier: D9:98:36:A9:40:B7:46:0C:CD:2B:B5:D1:8A:D8:0E:58:79:2C:AC:44
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 0194BC3CA44FEDF6F384CBE6CE8BF6A61860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: yJlEOPil6qF4rkhfS1t3knVT3ZGV2f7yxDyp+85a8y4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:4f:ed:f6:f3:84:cb:e6:ce:8b:f6:a6:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=d99836a940b7460ccd2bb5d18ad80e58792cac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:cc:ef:28:e3:e1:e8:00:24:dd:51:27:a3:
c6:18:4e:75:39:81:6c:35:34:e8:64:3f:f1:3b:cb:
de:7e:b5:43:eb:9d:b9:ba:ea:34:14:30:fa:c4:b3:
37:42:3e:cb:ac:95:5c:f1:a5:08:e8:6c:59:2a:9e:
b5:8c:dd:17:da:f3:e6:a2:fa:0a:d2:25:75:f2:95:
9b:78:ce:55:e1:bc:2b:6f:29:bf:e1:90:56:14:00:
14:68:af:ab:7b:76:58:6f:72:c2:c3:8b:3c:09:aa:
e8:08:35:83:0d:6f:57:b4:f7:14:46:f4:e4:50:0f:
8f:61:68:d4:98:d9:5b:d7:d2:05:46:49:1e:86:76:
34:29:35:36:ff:e1:83:33:11:bc:cf:1f:03:c1:ad:
0d:42:0d:0c:b0:1e:88:26:0e:a8:fe:be:dd:17:f7:
09:b4:b2:35:ce:ca:99:64:3c:e6:f9:f4:51:7e:f9:
8b:95:20:01:0e:45:e3:eb:b7:a6:c3:dd:43:95:37:
67:39:26:f1:c5:de:f4:39:e5:a6:a0:74:69:6e:33:
b6:ae:8a:c8:8b:4a:c4:50:5a:dd:47:be:4a:e7:10:
7b:75:10:cc:ad:20:31:c8:1a:a3:01:6c:4c:f9:2d:
26:93:4c:1a:0d:e0:a6:d8:e4:a0:4d:62:a0:c8:43:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:98:36:A9:40:B7:46:0C:CD:2B:B5:D1:8A:D8:0E:58:79:2C:AC:44
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:b3:07:9f:a3:a4:13:3b:a9:32:de:76:5c:2d:51:c3:23:
29:88:83:2a:c5:04:fc:b7:ee:70:6b:1f:52:03:ba:4c:20:33:
16:ab:73:42:b1:73:d3:e8:2f:ff:02:25:05:ed:8b:a4:c7:75:
a6:96:72:f9:a1:2e:13:1c:82:1b:73:b2:d9:f1:64:5a:65:89:
c1:ab:66:2b:c9:f8:61:af:ac:3b:16:bd:e5:3b:82:28:52:5a:
ec:a2:39:d4:b0:9c:b8:d1:dc:d2:a9:f0:21:74:3f:55:00:fc:
73:c3:fe:fa:35:26:63:a6:54:5c:e8:74:a5:9d:44:75:a4:78:
58:c0:17:2c:ce:d9:21:12:08:53:b2:b9:c4:c6:b3:eb:d8:ca:
4b:7c:0f:67:30:6b:08:a3:85:81:eb:97:f0:a6:af:ff:46:ec:
bf:73:63:81:94:a9:1d:f6:b6:91:56:b1:0f:f7:3b:f7:59:26:
83:83:a9:f5:72:82:04:c7:4e:9c:9a:90:58:b6:8f:c0:43:3a:
81:83:67:20:db:20:d9:da:76:b6:46:ba:07:42:73:d8:ea:c2:
41:f5:d7:f4:2f:54:de:fa:06:72:fc:f6:3d:c2:93:e5:ce:f5:
40:35:9b:59:50:4b:a0:e4:59:a7:23:b6:bd:83:e9:ca:f2:f2:
43:fa:f5:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKRP7fbzhMvmzov2phhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWExYzNjMjU5MDcxYzJiY2JjMjdmNzkxZmQxZTIwZjU4
MGE5NmEwHhcNMjUwMTMxMTIwMTE4WhcNMjUwMjAxMTIwMTE4WjAzMTEwLwYDVQQD
EyhkOTk4MzZhOTQwYjc0NjBjY2QyYmI1ZDE4YWQ4MGU1ODc5MmNhYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqPM7yjj4egAJN1RJ6PGGE51OYFs
NTToZD/xO8vefrVD6525uuo0FDD6xLM3Qj7LrJVc8aUI6GxZKp61jN0X2vPmovoK
0iV18pWbeM5V4bwrbym/4ZBWFAAUaK+re3ZYb3LCw4s8CaroCDWDDW9XtPcURvTk
UA+PYWjUmNlb19IFRkkehnY0KTU2/+GDMxG8zx8Dwa0NQg0MsB6IJg6o/r7dF/cJ
tLI1zsqZZDzm+fRRfvmLlSABDkXj67emw91DlTdnOSbxxd70OeWmoHRpbjO2rorI
i0rEUFrdR75K5xB7dRDMrSAxyBqjAWxM+S0mk0waDeCm2OSgTWKgyENXGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmYNqlAt0YMzSu10YrYDlh5LKxEMB8GA1UdIwQY
MBaAFNYaHDwlkHHCvLwn95H9HiD1gKlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjct
ODU3MTQwNjY5N2FkLzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjctODU3MTQwNjY5N2Fk
LzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkCzB5+j
pBM7qTLedlwtUcMjKYiDKsUE/LfucGsfUgO6TCAzFqtzQrFz0+gv/wIlBe2LpMd1
ppZy+aEuExyCG3Oy2fFkWmWJwatmK8n4Ya+sOxa95TuCKFJa7KI51LCcuNHc0qnw
IXQ/VQD8c8P++jUmY6ZUXOh0pZ1EdaR4WMAXLM7ZIRIIU7K5xMaz69jKS3wPZzBr
CKOFgeuX8Kav/0bsv3NjgZSpHfa2kVaxD/c791kmg4Op9XKCBMdOnJqQWLaPwEM6
gYNnINsg2dp2tka6B0Jz2OrCQfXX9C9U3voGcvz2PcKT5c71QDWbWVBLoORZpyO2
vYPpyvLyQ/r1vA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client