Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
File: hesz_RfSMvvmsq22bLCv4N7pA7A.mft (raw, json)
Hash identifier: AwwqNUEN6GtgDWyoVqb98O9JoMEKbh66CscGccRUnP8=
Subject key identifier: A3:12:B9:50:1A:03:16:26:CA:A2:2A:AD:AB:91:5B:E0:DC:1B:0E:3C
Authority key identifier: 85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
Certificate issuer: /CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
Certificate serial: 0194BC72CC29809DD0E9CB58249D7923F573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
Manifest number: 02B7
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: hesz_RfSMvvmsq22bLCv4N7pA7A.crl (hash: R/EpTPlYEMu8U0I63TwhXrEaLXOQ2FJYS7r/TOWFeCk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:29:80:9d:d0:e9:cb:58:24:9d:79:23:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85eb33fd17d232fbe6b2adb66cb0afe0dee903b0
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=a312b9501a031626caa22aadab915be0dc1b0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:2a:66:c9:eb:9f:0f:6b:25:67:f9:e4:47:
b8:84:d9:25:ec:58:8d:fb:a5:bc:0d:a7:68:2c:8c:
29:02:21:f0:23:5b:5c:aa:b2:86:8d:84:6a:53:38:
4b:cf:4c:55:3e:10:93:a9:2a:15:ab:4b:80:72:bb:
20:68:4e:17:e4:5b:34:6a:23:e8:81:ff:12:8f:9d:
c1:2b:07:e7:8a:7a:2a:46:eb:78:fc:ed:e2:f6:82:
50:c1:68:24:be:7d:3a:c8:d6:24:d4:7a:61:3b:e7:
82:32:40:69:35:6d:57:a2:9e:a0:5f:3d:f2:05:47:
4e:59:0b:45:30:3e:e3:98:c9:ff:ee:b5:52:41:45:
93:ad:54:8c:31:7e:44:36:09:c3:c4:e6:32:d5:32:
31:53:39:95:75:65:a7:79:f6:6b:d9:26:b0:6f:30:
b3:d9:2c:71:06:99:1f:e8:af:a8:57:f0:0c:f9:2a:
25:50:38:50:b7:b5:80:6a:3f:8f:ce:98:2c:1f:4b:
9d:9b:77:43:6e:23:b0:38:21:8f:d3:85:2d:f6:61:
20:2d:06:2f:78:97:52:12:70:4f:33:1b:fd:38:ca:
01:52:17:2c:99:11:31:b8:16:a0:56:43:33:f5:93:
d8:3b:1a:aa:c0:f7:5f:14:64:7c:9e:9a:84:87:30:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:B9:50:1A:03:16:26:CA:A2:2A:AD:AB:91:5B:E0:DC:1B:0E:3C
X509v3 Authority Key Identifier:
keyid:85:EB:33:FD:17:D2:32:FB:E6:B2:AD:B6:6C:B0:AF:E0:DE:E9:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hesz_RfSMvvmsq22bLCv4N7pA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce824f-73c9-485e-8edc-8a38ea2b1f54/1/hesz_RfSMvvmsq22bLCv4N7pA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:66:53:54:e2:7c:23:5e:53:a8:44:93:0b:98:0e:6a:bb:
e0:9c:72:69:2b:80:36:d1:76:76:33:eb:38:6a:6c:ae:9e:b0:
c2:9e:c7:54:e6:8b:a5:55:40:20:0b:21:c4:9a:27:f9:d2:c6:
94:2e:0e:59:6c:9d:70:b0:2b:4e:91:50:f7:f2:ae:87:f4:db:
f2:67:81:0e:bc:f2:75:b8:90:e4:60:29:46:b3:d5:9a:ae:9f:
b6:28:9e:66:87:e3:70:27:a5:b9:16:1e:91:81:bd:3d:a5:47:
fb:be:63:25:98:70:80:cf:52:46:50:97:9e:3c:8f:cc:e0:6b:
9a:7e:4c:9c:c4:86:fe:8f:05:b0:38:70:f2:14:aa:47:86:68:
8e:de:16:5f:d4:b8:eb:4c:0a:4a:40:31:d0:8f:2f:21:97:47:
0f:bd:8b:fc:ad:c3:d8:1b:9b:b0:10:f3:28:39:8d:8a:be:4b:
a1:3c:34:51:08:ff:8a:b4:ae:2b:a3:0f:3f:dd:90:11:c1:e9:
20:9b:9d:e5:23:4d:7d:91:12:cc:a5:10:70:18:ba:64:94:b7:
bb:ec:57:8b:4c:0b:ae:ab:6a:e7:08:15:66:87:07:a3:40:eb:
96:00:8d:f3:ed:e6:c8:6e:9c:ff:eb:27:4e:dc:ee:13:b5:8d:
30:23:61:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cswpgJ3Q6ctYJJ15I/VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZWIzM2ZkMTdkMjMyZmJlNmIyYWRiNjZjYjBhZmUwZGVl
OTAzYjAwHhcNMjUwMTMxMTMwMDI3WhcNMjUwMjAxMTMwMDI3WjAzMTEwLwYDVQQD
EyhhMzEyYjk1MDFhMDMxNjI2Y2FhMjJhYWRhYjkxNWJlMGRjMWIwZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJkqZsnrnw9rJWf55Ee4hNkl7FiN
+6W8DadoLIwpAiHwI1tcqrKGjYRqUzhLz0xVPhCTqSoVq0uAcrsgaE4X5Fs0aiPo
gf8Sj53BKwfninoqRut4/O3i9oJQwWgkvn06yNYk1HphO+eCMkBpNW1Xop6gXz3y
BUdOWQtFMD7jmMn/7rVSQUWTrVSMMX5ENgnDxOYy1TIxUzmVdWWnefZr2SawbzCz
2SxxBpkf6K+oV/AM+SolUDhQt7WAaj+PzpgsH0udm3dDbiOwOCGP04Ut9mEgLQYv
eJdSEnBPMxv9OMoBUhcsmRExuBagVkMz9ZPYOxqqwPdfFGR8npqEhzB5VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMSuVAaAxYmyqIqrauRW+DcGw48MB8GA1UdIwQY
MBaAFIXrM/0X0jL75rKttmywr+De6QOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVzel9SZlNNdnZtc3EyMmJMQ3Y0TjdwQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTgyNGYtNzNjOS00ODVlLThlZGMt
OGEzOGVhMmIxZjU0LzEvaGVzel9SZlNNdnZtc3EyMmJMQ3Y0TjdwQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTgyNGYtNzNjOS00ODVlLThlZGMtOGEzOGVhMmIxZjU0
LzEvaGVzel9SZlNNdnZtc3EyMmJMQ3Y0TjdwQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg1mU1Ti
fCNeU6hEkwuYDmq74JxyaSuANtF2djPrOGpsrp6wwp7HVOaLpVVAIAshxJon+dLG
lC4OWWydcLArTpFQ9/Kuh/Tb8meBDrzydbiQ5GApRrPVmq6ftiieZofjcCeluRYe
kYG9PaVH+75jJZhwgM9SRlCXnjyPzOBrmn5MnMSG/o8FsDhw8hSqR4Zojt4WX9S4
60wKSkAx0I8vIZdHD72L/K3D2BubsBDzKDmNir5LoTw0UQj/irSuK6MPP92QEcHp
IJud5SNNfZESzKUQcBi6ZJS3u+xXi0wLrqtq5wgVZocHo0DrlgCN8+3myG6c/+sn
TtzuE7WNMCNhRw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client