Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: oRTybQv/7QUUqmJOw6vs15ki+RbElEAiMveBSXNf87k=
Subject key identifier: E8:04:A0:10:83:94:D5:C2:E9:A1:B5:F0:13:FD:13:5D:6A:5B:6E:C9
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 0194BCE05C80D5C16B5C778D22F1AFA349CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: elMtLxTKfjgDQ70tVPeKj5ot2BCkpoviopV8UIGhzKQ=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:80:d5:c1:6b:5c:77:8d:22:f1:af:a3:49:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=e804a0108394d5c2e9a1b5f013fd135d6a5b6ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:6d:fb:fc:54:e6:90:d0:46:aa:cc:47:52:
7b:8c:b4:f0:77:5b:6f:6b:32:92:d9:ca:d7:1a:26:
04:99:34:2e:60:0e:a2:b1:9c:31:d6:3d:e0:1a:11:
a5:59:4b:26:96:53:a4:07:9c:98:53:f1:95:55:25:
a8:5d:b1:7b:9c:a7:7f:e5:e2:f9:dd:07:84:65:9a:
b3:9b:af:36:29:26:c7:1c:12:a3:5c:ab:0d:9d:a0:
1f:8f:85:36:49:f5:a2:7d:cb:9f:01:ed:4f:a1:47:
9a:30:bd:cb:88:a6:60:86:e8:d5:22:ad:8a:55:84:
df:81:fe:7d:06:59:21:34:10:d1:e3:25:7a:3a:e5:
92:33:7c:d9:43:75:1b:ee:eb:fd:09:fc:6a:d9:8e:
fc:92:e2:16:30:ad:a8:f4:20:bd:c1:76:c6:91:75:
69:d2:d5:1a:a8:7c:55:2f:44:ee:65:e3:30:10:49:
95:5a:2c:b6:a0:ce:35:ca:0a:7e:6b:c3:17:64:d8:
41:70:a9:26:c6:55:8b:bf:cd:b5:ae:17:07:4f:62:
fe:33:1b:c8:15:1b:de:06:7d:1e:97:dd:39:39:a6:
f1:91:35:0f:b7:9d:51:dd:06:49:e7:c8:89:2b:df:
2a:d9:fe:96:8f:95:69:6d:ab:6a:3e:7b:ba:2e:c9:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:04:A0:10:83:94:D5:C2:E9:A1:B5:F0:13:FD:13:5D:6A:5B:6E:C9
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2b:2c:ee:63:4c:43:f7:4b:a3:72:83:fa:78:b3:4e:b8:2b:
dd:91:18:20:a9:8b:2c:b6:99:df:d6:4f:36:b7:44:dc:ba:76:
fb:1e:01:c6:cf:18:63:4e:04:d8:11:24:9d:59:46:b1:c6:dd:
9b:fb:65:e8:7b:28:a7:f0:46:b3:a0:80:49:a1:11:e5:31:30:
38:56:6c:5d:80:9c:d8:ef:34:db:20:e4:a5:a1:5f:b2:55:90:
72:2e:70:99:ed:b0:b4:64:26:93:b0:20:9c:f3:c0:32:c4:10:
62:dc:be:93:f0:e9:14:df:99:65:5a:23:9e:18:8d:6b:d9:c0:
fd:7a:82:1a:40:6c:7b:eb:1a:81:d9:e3:35:d7:b4:78:98:01:
a2:af:47:72:db:c5:ff:9e:6b:c5:1d:a0:7e:e6:ab:4e:d1:d7:
1b:d5:7a:5a:16:1a:13:ab:09:89:76:1c:16:b3:c9:b1:72:cd:
d7:74:72:ab:a0:a4:c1:f6:74:9c:9b:b5:f2:2b:61:b1:1a:70:
f3:26:35:8a:23:28:e5:7f:a1:40:f7:51:71:d5:e6:08:6f:33:
8d:67:8b:ab:d6:05:39:cc:92:6a:2d:c5:de:11:d0:f2:6f:e7:
27:bb:7e:1d:dd:10:cd:1c:e3:36:b2:43:49:15:5a:b3:3d:8f:
18:8a:38:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84FyA1cFrXHeNIvGvo0nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMGU0ZDJkYmRlOTg2ZmRjMjViZjNiZjc1NjM3ODUyZGE4
N2FiZjEwHhcNMjUwMTMxMTUwMDA3WhcNMjUwMjAxMTUwMDA3WjAzMTEwLwYDVQQD
EyhlODA0YTAxMDgzOTRkNWMyZTlhMWI1ZjAxM2ZkMTM1ZDZhNWI2ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZlt+/xU5pDQRqrMR1J7jLTwd1tv
azKS2crXGiYEmTQuYA6isZwx1j3gGhGlWUsmllOkB5yYU/GVVSWoXbF7nKd/5eL5
3QeEZZqzm682KSbHHBKjXKsNnaAfj4U2SfWifcufAe1PoUeaML3LiKZghujVIq2K
VYTfgf59BlkhNBDR4yV6OuWSM3zZQ3Ub7uv9Cfxq2Y78kuIWMK2o9CC9wXbGkXVp
0tUaqHxVL0TuZeMwEEmVWiy2oM41ygp+a8MXZNhBcKkmxlWLv821rhcHT2L+MxvI
FRveBn0el905OabxkTUPt51R3QZJ58iJK98q2f6Wj5VpbatqPnu6LsnIHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgEoBCDlNXC6aG18BP9E11qW27JMB8GA1UdIwQY
MBaAFB4OTS296Yb9wlvzv3VjeFLah6vxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMt
OTllZWExZjBhMzU0LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jOWUxMTUtMTIzNi00ZmRhLWEwMzMtOTllZWExZjBhMzU0
LzEvSGc1TkxiM3BodjNDV19PX2RXTjRVdHFIcV9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyss7mNM
Q/dLo3KD+nizTrgr3ZEYIKmLLLaZ39ZPNrdE3Lp2+x4Bxs8YY04E2BEknVlGscbd
m/tl6Hsop/BGs6CASaER5TEwOFZsXYCc2O802yDkpaFfslWQci5wme2wtGQmk7Ag
nPPAMsQQYty+k/DpFN+ZZVojnhiNa9nA/XqCGkBse+sagdnjNde0eJgBoq9HctvF
/55rxR2gfuarTtHXG9V6WhYaE6sJiXYcFrPJsXLN13Ryq6CkwfZ0nJu18ithsRpw
8yY1iiMo5X+hQPdRcdXmCG8zjWeLq9YFOcySai3F3hHQ8m/nJ7t+Hd0QzRzjNrJD
SRVasz2PGIo4Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:29 2025 by rpki-client