Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File: huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier: V6mqfrvL1maxWaPKdelZ3JP2FxqcpX4iR+X+0mV/aNA=
Subject key identifier: 2E:98:2B:3B:15:C9:AF:2D:E9:A3:4F:FE:3A:69:6A:18:F3:2F:56:B2
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: 0194BD177ADB3C01758600B644C1C2B6DDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: Q7vNAscnF-4OhkgVonOsxeJBDjA.roa (hash: 0ioDa0FuPDgR/Y4yLPplBITqL6YDwLS4b5dcomdJX+s=)
2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: BU8ae8eQPJqzbPZUW+Mu300OnGws/9xdhHmKR6aftW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:db:3c:01:75:86:00:b6:44:c1:c2:b6:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=2e982b3b15c9af2de9a34ffe3a696a18f32f56b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:a4:3e:13:b9:aa:db:03:c7:51:da:e6:70:
e8:b6:ed:b7:8e:66:eb:04:4a:60:4a:7a:5d:c5:d9:
df:42:86:69:6f:c3:c6:53:d9:bf:40:ce:5c:3c:a7:
9c:29:b7:a1:72:4f:26:83:61:63:51:a2:c8:46:b9:
82:31:12:78:88:2f:04:d4:81:2d:9c:7a:e1:71:1c:
21:71:00:0b:ca:57:88:6f:d9:ff:8d:09:7d:91:af:
56:53:c9:a4:2b:23:f2:a3:62:b2:0d:83:5b:91:34:
d6:cd:71:03:f4:64:62:b5:d1:72:57:42:06:cd:02:
eb:89:04:ea:87:dc:72:96:97:06:f8:c4:18:a0:2a:
2a:ca:72:ad:ce:bd:ea:f5:12:ab:10:3d:a0:24:6d:
35:39:6f:c9:27:ef:e8:61:8b:8e:6f:25:a1:ba:5b:
71:b8:a9:5c:1b:02:0c:75:a4:f2:a4:f7:9f:4a:38:
f7:b0:d3:2d:5e:9c:98:af:0f:2e:46:85:8a:e7:39:
32:a9:c4:bb:46:7f:f1:4e:67:90:01:85:41:7e:bc:
a0:21:57:c7:7d:71:ac:59:9c:79:36:25:5b:a3:91:
87:d5:bb:b5:d8:ed:ad:64:32:1f:0a:fb:d6:28:38:
cb:9c:4f:b9:97:10:9c:c2:79:77:63:23:49:98:e4:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:2B:3B:15:C9:AF:2D:E9:A3:4F:FE:3A:69:6A:18:F3:2F:56:B2
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:55:cc:30:3f:3c:1e:2c:c0:92:84:5b:7e:d6:8b:a2:16:
90:4b:20:1d:bf:98:2a:ea:14:4f:98:42:c9:d0:d6:23:b5:ec:
d5:b9:0e:d8:c3:7a:c7:1e:61:d7:fb:e5:f4:8c:94:97:a2:27:
e3:70:12:47:e7:52:5d:13:58:82:1d:bd:05:32:48:9a:af:9c:
bd:7c:b2:2f:38:b5:5a:7a:a5:17:f4:e7:09:34:9b:ee:8c:82:
95:b6:5f:e8:90:8b:64:f4:28:61:62:cb:fb:0d:af:9a:e1:2f:
80:e4:bd:20:3e:cc:45:b7:00:ac:ea:7c:9b:22:8d:cc:7a:a5:
a8:93:06:42:f5:e5:ea:c1:39:2c:70:f2:12:56:d5:35:55:77:
74:55:98:61:59:93:34:4f:ce:cd:e8:99:d3:c0:a9:0b:8f:3e:
de:b4:a0:e8:b2:74:55:d2:8c:ec:d5:f1:f1:21:5e:82:5d:e6:
6c:f4:18:d2:1c:04:2d:76:d9:3d:66:66:7e:ba:2b:aa:ff:72:
be:1f:1e:4f:63:b4:a9:8c:74:21:bc:3f:41:f3:db:a0:62:17:
b7:55:ab:d2:41:7e:34:74:78:be:25:bc:1f:85:b0:1e:ef:d0:
69:56:2d:77:ea:1a:c6:47:2e:02:56:24:70:af:fb:f5:87:a4:
f7:f9:f7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3rbPAF1hgC2RMHCtt22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTFhYmE2MDBjZGU1ZWMzMTgzMTliMTU1OTRiNjhhYjk2
Yzk1NmMwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EygyZTk4MmIzYjE1YzlhZjJkZTlhMzRmZmUzYTY5NmExOGYzMmY1NmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqCkPhO5qtsDx1Ha5nDotu23jmbr
BEpgSnpdxdnfQoZpb8PGU9m/QM5cPKecKbehck8mg2FjUaLIRrmCMRJ4iC8E1IEt
nHrhcRwhcQALyleIb9n/jQl9ka9WU8mkKyPyo2KyDYNbkTTWzXED9GRitdFyV0IG
zQLriQTqh9xylpcG+MQYoCoqynKtzr3q9RKrED2gJG01OW/JJ+/oYYuObyWhultx
uKlcGwIMdaTypPefSjj3sNMtXpyYrw8uRoWK5zkyqcS7Rn/xTmeQAYVBfrygIVfH
fXGsWZx5NiVbo5GH1bu12O2tZDIfCvvWKDjLnE+5lxCcwnl3YyNJmORrdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6YKzsVya8t6aNP/jppahjzL1ayMB8GA1UdIwQY
MBaAFIbhq6YAzeXsMYMZsVWUtoq5bJVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjIt
ZDYwNWM1M2EzNWJlLzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNjg0NWQtMWMzYy00OGQ2LWE2YjItZDYwNWM1M2EzNWJl
LzEvaHVHcnBnRE41ZXd4Z3hteFZaUzJpcmxzbFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRFVzDA/
PB4swJKEW37Wi6IWkEsgHb+YKuoUT5hCydDWI7Xs1bkO2MN6xx5h1/vl9IyUl6In
43ASR+dSXRNYgh29BTJImq+cvXyyLzi1WnqlF/TnCTSb7oyClbZf6JCLZPQoYWLL
+w2vmuEvgOS9ID7MRbcArOp8myKNzHqlqJMGQvXl6sE5LHDyElbVNVV3dFWYYVmT
NE/OzeiZ08CpC48+3rSg6LJ0VdKM7NXx8SFegl3mbPQY0hwELXbZPWZmfrorqv9y
vh8eT2O0qYx0Ibw/QfPboGIXt1Wr0kF+NHR4viW8H4WwHu/QaVYtd+oaxkcuAlYk
cK/79Yek9/n39w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:58 2025 by rpki-client