Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json)
Hash identifier: YgmwOkM4mOO7R9uyredv6U03fguGQ6bg8ngCmUuRaRo=
Subject key identifier: BB:D8:2A:52:8C:6C:6B:8A:B5:A5:CA:09:1E:C2:83:DB:CC:82:5A:D4
Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Certificate serial: 0194BBCE51CBADFE83CE8F33E3D8EFBA0423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
Manifest number: B1
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: eDBDTrJD4ChjvQyvBv4iq5HbC0fgHbf6WMvXv3eiCZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:51:cb:ad:fe:83:ce:8f:33:e3:d8:ef:ba:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=bbd82a528c6c6b8ab5a5ca091ec283dbcc825ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:f2:69:58:bd:0c:0a:d1:75:c5:e8:63:9e:
4d:df:52:03:6a:5a:39:a5:b0:f1:6f:2c:10:91:2b:
01:83:39:c2:50:13:08:ce:9e:2e:5d:a1:0b:76:f2:
bf:a4:bf:49:05:eb:b4:8c:c7:1f:7c:09:04:1b:d2:
38:fe:1b:ae:56:c6:12:7e:8d:1e:22:bc:e3:a6:74:
55:63:3a:60:19:fe:74:68:13:2d:ce:47:e0:ab:0d:
c9:2f:25:7f:a7:9f:99:cd:b5:d3:2e:dd:67:df:91:
26:4c:07:7b:75:7f:cb:50:ca:a0:32:1e:f3:39:5b:
5d:6f:4a:9c:03:03:4e:49:9d:72:61:13:a6:9e:c9:
9d:68:64:8c:31:ff:80:7f:11:48:01:32:19:30:d4:
21:f7:be:38:36:f6:e4:92:48:55:6e:53:64:b2:28:
c3:33:77:c6:c6:9f:7a:00:64:f2:cb:fb:2c:7a:58:
9a:0a:0b:89:9a:2f:ba:aa:f1:35:ed:b8:9c:ae:85:
9b:94:26:6d:fd:1a:4b:3f:ca:a5:bd:31:36:4a:1f:
ae:b6:8d:24:2c:38:e9:51:16:38:4b:c7:4d:dd:93:
d3:8e:5a:64:a6:ef:6d:7e:72:3c:ff:2c:df:28:8e:
7e:d9:5e:c6:5e:f5:a8:48:84:88:37:d3:89:a5:e0:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:2A:52:8C:6C:6B:8A:B5:A5:CA:09:1E:C2:83:DB:CC:82:5A:D4
X509v3 Authority Key Identifier:
keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:b2:0b:4e:4b:f7:be:35:1d:47:78:ff:b3:74:a0:f3:1d:
e0:d5:c5:0a:7c:72:69:a0:ea:14:c1:66:cd:ba:07:49:c2:36:
d1:04:f3:22:b6:b8:f6:c7:d9:b5:10:2c:05:10:8f:7c:7a:7e:
67:b8:15:1e:17:91:82:2b:d0:1c:6c:fa:13:e8:43:4f:f6:cc:
b1:67:a3:f9:7b:37:a6:93:4a:fb:2c:3f:54:bb:3e:55:4e:c8:
f2:33:a1:f4:07:a9:5f:df:03:ac:ea:00:0e:b6:b9:8f:6b:d1:
c9:15:cd:f1:3d:99:48:5d:ad:dd:5e:bb:df:60:df:de:89:26:
9f:a4:3d:fd:99:2d:c0:76:56:8a:6f:87:03:ba:ed:e3:93:24:
27:89:a2:78:f4:fb:9c:68:b2:0f:90:30:a9:60:ad:b0:ba:ba:
a1:a7:ff:14:0d:fc:5d:5c:d8:8c:fa:a1:40:1c:bc:5d:23:42:
99:27:b8:42:51:13:d8:01:0e:3f:5d:87:01:26:e5:d0:1c:49:
d8:e0:7f:6c:63:d0:82:ae:2f:93:f6:e4:8f:0d:d1:fa:3f:7a:
1c:9f:10:27:a9:e8:c4:93:6c:9b:db:2d:67:c6:b7:14:be:9e:
f9:e0:2b:72:02:6d:18:a1:3d:e3:27:e2:d5:bb:0a:96:6c:ab:
ab:96:0b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlHLrf6Dzo8z49jvugQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDM0NGNjNzk3NmVhMDE1MjhmZDExZTdjNWE2NjhhZWZl
MzFkY2IwHhcNMjUwMTMxMTAwMDQ4WhcNMjUwMjAxMTAwMDQ4WjAzMTEwLwYDVQQD
EyhiYmQ4MmE1MjhjNmM2YjhhYjVhNWNhMDkxZWMyODNkYmNjODI1YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wzyaVi9DArRdcXoY55N31IDalo5
pbDxbywQkSsBgznCUBMIzp4uXaELdvK/pL9JBeu0jMcffAkEG9I4/huuVsYSfo0e
IrzjpnRVYzpgGf50aBMtzkfgqw3JLyV/p5+ZzbXTLt1n35EmTAd7dX/LUMqgMh7z
OVtdb0qcAwNOSZ1yYROmnsmdaGSMMf+AfxFIATIZMNQh9744NvbkkkhVblNksijD
M3fGxp96AGTyy/sseliaCguJmi+6qvE17bicroWblCZt/RpLP8qlvTE2Sh+uto0k
LDjpURY4S8dN3ZPTjlpkpu9tfnI8/yzfKI5+2V7GXvWoSISIN9OJpeCXDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvYKlKMbGuKtaXKCR7Cg9vMglrUMB8GA1UdIwQY
MBaAFBwDRMx5duoBUo/RHnxaZorv4x3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYt
YmRmMjA0MjQ3YzRmLzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYtYmRmMjA0MjQ3YzRm
LzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkqyC05L
9741HUd4/7N0oPMd4NXFCnxyaaDqFMFmzboHScI20QTzIra49sfZtRAsBRCPfHp+
Z7gVHheRgivQHGz6E+hDT/bMsWej+Xs3ppNK+yw/VLs+VU7I8jOh9AepX98DrOoA
Dra5j2vRyRXN8T2ZSF2t3V6732Df3okmn6Q9/ZktwHZWim+HA7rt45MkJ4miePT7
nGiyD5AwqWCtsLq6oaf/FA38XVzYjPqhQBy8XSNCmSe4QlET2AEOP12HASbl0BxJ
2OB/bGPQgq4vk/bkjw3R+j96HJ8QJ6noxJNsm9stZ8a3FL6e+eArcgJtGKE94yfi
1bsKlmyrq5YLgQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:04 2025 by rpki-client