Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: U37kM/ULarzRCZecaSxCGAzqXM0N2cfJFGQLaa4z16U=
Subject key identifier: 4D:0A:E2:33:94:83:40:1F:DD:1B:D1:47:26:76:70:AB:EE:CE:9A:D4
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 0194BC72EB7CE624590287C5AC2DC67AC3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: IMGUrwcb/d1cBgamNOOWC3ltGQZ2PqiindyquY5XQ48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:7c:e6:24:59:02:87:c5:ac:2d:c6:7a:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=4d0ae2339483401fdd1bd147267670abeece9ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:e4:9e:44:ea:f1:6c:6a:f1:46:79:b1:c9:
38:ac:2d:ae:61:f6:3b:42:ed:49:9a:b5:85:ef:95:
3f:91:94:8f:83:fe:32:b8:6f:a4:77:70:e2:6e:34:
ef:7c:ae:e5:d4:53:14:ad:80:fd:a0:01:c0:ac:cc:
21:4d:43:a9:ee:07:93:94:dd:54:3b:57:52:40:fc:
78:51:81:6e:16:83:69:a2:67:bd:6b:cd:37:0c:a4:
89:15:78:45:08:c6:2a:bd:92:56:a5:ca:80:68:d7:
d3:10:cd:9c:47:0f:b9:7b:cf:f5:8e:57:ce:7f:a5:
41:19:f1:32:5d:94:2e:47:2f:cf:4e:32:4b:ae:2c:
20:e5:68:51:75:f0:cb:e6:fe:d2:99:21:62:c8:94:
08:7c:4e:b7:42:8c:5b:9c:7d:28:14:c1:88:6a:43:
af:88:8d:7b:82:d2:e0:70:87:1d:e3:22:d7:93:5c:
37:c3:39:7e:f3:21:3a:b9:14:29:c1:3f:40:b5:44:
ee:67:ff:95:83:ec:d8:f4:be:6f:66:23:0d:a3:08:
5f:c9:3e:7f:ac:7f:dc:3b:5a:84:d2:c6:02:f3:b5:
f9:63:85:a7:cc:11:3a:da:24:af:3a:55:13:c4:58:
44:86:9d:e5:25:36:3f:80:c8:50:8e:d3:12:4f:21:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:E2:33:94:83:40:1F:DD:1B:D1:47:26:76:70:AB:EE:CE:9A:D4
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:b4:4c:6c:17:3a:80:8e:4f:b4:08:e9:3f:f5:ea:60:7a:
64:0c:34:cb:c4:08:b7:03:14:f4:0b:72:e4:b6:52:ae:58:46:
49:b8:b6:c7:e4:08:a8:48:1f:4f:96:5f:c1:11:c8:7a:55:36:
63:47:50:4c:95:c6:84:37:45:2a:f2:9d:f6:8c:29:b8:83:e2:
e0:2d:91:af:4f:53:e7:13:63:bd:78:ed:18:2b:18:05:38:fd:
32:7a:df:47:77:ab:b4:03:ed:82:70:f1:ee:b4:6b:92:5b:f0:
0a:6a:b9:9c:5d:74:bc:99:a4:03:8d:76:d4:97:17:09:92:9b:
8f:12:51:e9:bb:f1:81:19:da:88:0f:af:e1:60:48:96:b7:a4:
4a:dd:25:a6:2d:37:d6:9f:fe:17:32:2a:d5:82:29:fc:45:d6:
68:fe:b4:7d:a4:21:93:6f:2d:23:7e:7c:d6:4c:70:94:e1:a9:
d2:2f:85:e8:3a:79:3f:7d:36:2e:ab:8d:80:e2:7f:6b:39:82:
f1:d2:e2:16:58:7f:b4:9c:68:b4:a6:67:ce:8e:d4:cc:26:ec:
fc:85:c1:76:6f:7c:0c:ff:a2:f6:71:33:1d:6f:01:4f:52:15:
65:10:97:e0:27:b0:96:f6:86:6b:ff:7a:8e:d4:39:fc:e0:64:
ca:20:56:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cut85iRZAofFrC3GesO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWRlMjAzMjQwMDhiMmQyN2ViOTc0OTVhY2NlMmViYmNk
Yzg3YzcwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
Eyg0ZDBhZTIzMzk0ODM0MDFmZGQxYmQxNDcyNjc2NzBhYmVlY2U5YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3HknkTq8Wxq8UZ5sck4rC2uYfY7
Qu1JmrWF75U/kZSPg/4yuG+kd3DibjTvfK7l1FMUrYD9oAHArMwhTUOp7geTlN1U
O1dSQPx4UYFuFoNpome9a803DKSJFXhFCMYqvZJWpcqAaNfTEM2cRw+5e8/1jlfO
f6VBGfEyXZQuRy/PTjJLriwg5WhRdfDL5v7SmSFiyJQIfE63QoxbnH0oFMGIakOv
iI17gtLgcIcd4yLXk1w3wzl+8yE6uRQpwT9AtUTuZ/+Vg+zY9L5vZiMNowhfyT5/
rH/cO1qE0sYC87X5Y4WnzBE62iSvOlUTxFhEhp3lJTY/gMhQjtMSTyFp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0K4jOUg0Af3RvRRyZ2cKvuzprUMB8GA1UdIwQY
MBaAFIYd4gMkAIstJ+uXSVrM4uu83IfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUt
MWU0NmFlODcyMWVmLzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUtMWU0NmFlODcyMWVm
LzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf760TGwX
OoCOT7QI6T/16mB6ZAw0y8QItwMU9Aty5LZSrlhGSbi2x+QIqEgfT5ZfwRHIelU2
Y0dQTJXGhDdFKvKd9owpuIPi4C2Rr09T5xNjvXjtGCsYBTj9MnrfR3ertAPtgnDx
7rRrklvwCmq5nF10vJmkA4121JcXCZKbjxJR6bvxgRnaiA+v4WBIlrekSt0lpi03
1p/+FzIq1YIp/EXWaP60faQhk28tI3581kxwlOGp0i+F6Dp5P302LquNgOJ/azmC
8dLiFlh/tJxotKZnzo7UzCbs/IXBdm98DP+i9nEzHW8BT1IVZRCX4CewlvaGa/96
jtQ5/OBkyiBWKw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:00 2025 by rpki-client