Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: Ji2zE8KL7r0IRkgcFwSF0miMbl3IS41uq5T7VwjkOj0=
Subject key identifier: B8:FC:13:B0:19:7B:F5:08:7F:7F:A8:0B:78:2F:2D:E1:53:4B:59:69
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0194BC731DE15C0DFFEF97914E2017543AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 0292
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: WK7mcf9kkTSx3oo2MMFHS1DtB3sclQg+DW0SI0X4KOo=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:e1:5c:0d:ff:ef:97:91:4e:20:17:54:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=b8fc13b0197bf5087f7fa80b782f2de1534b5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:ca:a4:f8:f9:3a:4d:d1:2f:f1:d5:45:67:
54:b3:0f:a0:49:36:15:91:29:fd:a8:fb:94:6b:5a:
16:a4:ec:9e:d1:d2:d0:fe:f4:ba:17:16:76:93:52:
b4:57:95:64:49:c8:54:69:c7:e6:62:12:e5:c4:8a:
ef:47:83:71:af:88:54:c1:c8:db:59:42:f1:cc:7e:
d4:25:9a:ef:de:48:82:16:8d:42:a9:ca:d9:2d:0a:
2f:10:f7:b4:ba:84:69:71:a4:1b:9b:c3:23:75:dd:
a3:61:d6:50:2d:01:a4:54:3d:6b:d0:49:a3:d9:b9:
f6:f9:3c:f3:86:83:3c:ad:a2:e0:06:ac:41:aa:bb:
35:29:57:ff:d3:fd:b8:33:8c:74:e7:ac:b6:1f:79:
33:c9:97:c4:c0:52:f6:08:ba:b9:8d:bb:2d:6f:fc:
d8:72:6d:58:7d:0e:04:ea:fb:5c:00:d3:be:33:a5:
df:65:72:63:7f:1b:0b:34:14:c7:e9:8f:2c:86:c1:
87:6e:93:78:65:49:7d:2d:e2:c6:3e:24:57:b6:8c:
86:52:e5:e4:0b:8b:ba:de:b6:ff:7a:82:1e:34:ac:
c8:9c:15:99:33:44:e9:7c:f3:49:db:a1:24:ed:a2:
fd:7b:49:f5:f1:5c:f4:c1:6c:bd:e6:60:02:60:48:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:13:B0:19:7B:F5:08:7F:7F:A8:0B:78:2F:2D:E1:53:4B:59:69
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ea:e3:fa:f8:5e:b8:00:78:d2:97:3e:99:7b:7e:50:ea:19:
89:9a:96:b5:7c:f2:b1:47:6d:84:1e:c9:1e:d1:d6:97:42:d1:
3f:53:5e:e5:55:fd:40:6b:22:d2:38:3a:f2:c7:62:56:68:dd:
01:6f:3e:8b:cc:28:40:37:2c:91:9d:67:c4:a1:0c:8b:c8:60:
0a:d6:47:de:9b:8a:4a:b7:34:c7:18:3d:ea:e4:ab:24:a2:37:
b7:d8:51:39:69:3f:b4:89:5b:68:7e:8f:96:0e:31:0a:b1:f4:
01:ec:b1:19:69:8e:2a:cc:64:4c:3b:a9:a4:e1:e7:9f:98:71:
a0:08:80:67:a1:15:03:7a:f6:c0:ee:c1:c1:32:aa:83:b1:a1:
58:1b:86:62:d5:6a:1d:e5:f4:4e:35:2f:f7:95:20:ac:af:c5:
ce:cd:9c:9b:d5:d4:de:1b:74:13:f3:33:0a:bf:9f:98:86:e9:
da:48:6f:99:35:59:cb:70:91:0d:30:d4:63:0a:34:cc:b2:ef:
bb:f4:80:25:8e:36:ed:f2:69:bd:69:79:36:77:de:a9:b1:55:
bf:ac:fb:e0:f2:62:ed:71:a3:cc:c5:d8:0f:f4:c2:ae:61:57:
f2:39:b5:c4:38:61:c7:c6:12:ba:1f:4c:3b:95:97:ca:7a:10:
de:82:1a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx3hXA3/75eRTiAXVDrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4N2FhYzY3NGU0ZTU3OTYwMjAxYTM0YzJjMDQyNDg2MWE3
ZmIwNzcwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EyhiOGZjMTNiMDE5N2JmNTA4N2Y3ZmE4MGI3ODJmMmRlMTUzNGI1OTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurDKpPj5Ok3RL/HVRWdUsw+gSTYV
kSn9qPuUa1oWpOye0dLQ/vS6FxZ2k1K0V5VkSchUacfmYhLlxIrvR4Nxr4hUwcjb
WULxzH7UJZrv3kiCFo1CqcrZLQovEPe0uoRpcaQbm8Mjdd2jYdZQLQGkVD1r0Emj
2bn2+TzzhoM8raLgBqxBqrs1KVf/0/24M4x056y2H3kzyZfEwFL2CLq5jbstb/zY
cm1YfQ4E6vtcANO+M6XfZXJjfxsLNBTH6Y8shsGHbpN4ZUl9LeLGPiRXtoyGUuXk
C4u63rb/eoIeNKzInBWZM0TpfPNJ26Ek7aL9e0n18Vz0wWy95mACYEhrOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj8E7AZe/UIf3+oC3gvLeFTS1lpMB8GA1UdIwQY
MBaAFAh6rGdOTleWAgGjTCwEJIYaf7B3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgt
ZGYwMmIxM2UyZTRhLzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNTgyZTgtMDY5OC00YmFmLTkwMjgtZGYwMmIxM2UyZTRh
LzEvQ0hxc1owNU9WNVlDQWFOTUxBUWtoaHBfc0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+rj+vhe
uAB40pc+mXt+UOoZiZqWtXzysUdthB7JHtHWl0LRP1Ne5VX9QGsi0jg68sdiVmjd
AW8+i8woQDcskZ1nxKEMi8hgCtZH3puKSrc0xxg96uSrJKI3t9hROWk/tIlbaH6P
lg4xCrH0AeyxGWmOKsxkTDuppOHnn5hxoAiAZ6EVA3r2wO7BwTKqg7GhWBuGYtVq
HeX0TjUv95UgrK/Fzs2cm9XU3ht0E/MzCr+fmIbp2khvmTVZy3CRDTDUYwo0zLLv
u/SAJY427fJpvWl5NnfeqbFVv6z74PJi7XGjzMXYD/TCrmFX8jm1xDhhx8YSuh9M
O5WXynoQ3oIaaQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:07 2025 by rpki-client