Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
File: HvNtbboJfqbUsq2k52PoTss9gXo.mft (raw, json)
Hash identifier: KtnEgKkjIZqUmFduawafNn/wf0vpwg7Be4DcVMP3+D0=
Subject key identifier: 56:EC:85:31:04:24:44:2C:5F:66:0D:A1:3A:AC:ED:00:64:6E:A4:59
Authority key identifier: 1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
Certificate issuer: /CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Certificate serial: 0194BCA9B6F8774E7F61C2885458918D3299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
Manifest number: 0315
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 1-fDLqnKfMZzfosw8Gra-kuHRukQ.roa (hash: 91Wi2oW4Wdmr3Kf24VCGVEfXWacp6jcVuiTMlTsIcZQ=)
2: HvNtbboJfqbUsq2k52PoTss9gXo.crl (hash: DFDfI0LEl/gNZwEaFlTkZaiBBksBXei59/HlxGsboyE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:f8:77:4e:7f:61:c2:88:54:58:91:8d:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef36d6dba097ea6d4b2ada4e763e84ecb3d817a
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=56ec85310424442c5f660da13aaced00646ea459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:b1:f3:5e:1b:1c:23:12:79:01:cb:f4:5a:
b8:b8:1d:b9:7d:b1:d0:84:40:aa:54:a6:2a:5b:a4:
86:d1:15:f4:92:9e:11:4a:12:fd:40:94:68:82:a4:
8c:58:c5:02:87:f9:e6:1d:9f:77:ef:8b:0d:e5:d4:
e3:9a:ae:ec:3e:57:98:c6:8b:7f:9f:6d:c2:d9:ed:
9b:cd:94:3c:c0:e7:56:18:a4:0b:8c:17:ba:b5:42:
5e:e7:01:1a:e8:7c:a0:4c:02:1b:76:34:69:81:28:
d6:d9:39:74:fe:e7:b1:eb:1b:01:a4:65:76:ac:5e:
dd:0c:62:a6:bd:9d:fe:13:88:10:b1:28:aa:a2:fd:
73:ab:28:85:bd:dd:e0:0b:f2:18:b2:ab:ed:69:de:
36:b1:5b:64:6b:0a:a8:6a:e4:db:a3:84:4b:e6:e0:
70:4d:46:b5:c5:bc:e1:51:86:13:1b:42:8e:06:c5:
67:01:83:c5:a6:ff:1d:68:aa:98:8a:6d:4e:2e:27:
c4:f1:69:02:33:7d:3f:37:f8:2b:1f:87:e7:34:75:
d4:5b:53:58:89:c2:81:f4:cf:67:52:ba:58:be:3f:
50:45:0b:56:52:9c:e5:16:06:8f:c1:b4:b5:54:bc:
19:a4:10:b7:41:9e:6b:08:bc:cb:af:33:76:9f:56:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:85:31:04:24:44:2C:5F:66:0D:A1:3A:AC:ED:00:64:6E:A4:59
X509v3 Authority Key Identifier:
keyid:1E:F3:6D:6D:BA:09:7E:A6:D4:B2:AD:A4:E7:63:E8:4E:CB:3D:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvNtbboJfqbUsq2k52PoTss9gXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3ed37b-b80a-4b10-914b-57c92431d3d3/1/HvNtbboJfqbUsq2k52PoTss9gXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:75:da:68:2e:85:a2:c7:f6:90:d1:b6:92:52:24:6a:12:
19:92:2a:7d:f6:55:19:54:4e:33:42:fd:ce:ec:72:f9:72:63:
36:ed:67:4a:e1:36:0a:01:63:ad:eb:5b:4d:eb:6c:a7:45:3a:
db:0e:3c:27:b3:3b:d6:a5:d4:33:a5:8e:ca:a9:4d:2a:fc:81:
07:96:3b:d4:6d:aa:6a:cb:d3:7c:a0:21:30:1a:a3:29:c2:ec:
ef:19:79:86:4f:8c:3e:03:28:79:21:28:80:89:58:47:76:e0:
27:93:5e:f9:d6:68:d2:9c:e0:ce:2b:b9:26:3d:0a:53:0a:09:
67:f6:a5:5f:e9:e1:17:f7:7e:80:5f:e0:4a:c9:d4:28:cc:ee:
93:9a:d9:2a:bf:00:df:8e:f8:bc:2e:92:cc:93:69:3e:d6:1e:
24:a7:92:35:36:70:43:50:4b:8a:3a:62:64:2f:93:64:10:63:
48:a5:83:b9:6a:31:ea:ec:f8:ca:a4:e5:f1:ce:c1:49:43:c4:
4e:1f:92:48:b1:3c:d4:a4:f1:42:44:72:fd:8c:38:0a:d9:dc:
49:94:ee:ec:c2:73:f5:34:36:92:02:35:f7:90:45:86:41:66:
e5:72:2f:e8:76:a6:52:c2:05:3e:b7:63:e2:af:c8:b1:e3:6b:
57:90:32:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbb4d05/YcKIVFiRjTKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjM2ZDZkYmEwOTdlYTZkNGIyYWRhNGU3NjNlODRlY2Iz
ZDgxN2EwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
Eyg1NmVjODUzMTA0MjQ0NDJjNWY2NjBkYTEzYWFjZWQwMDY0NmVhNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Wx814bHCMSeQHL9Fq4uB25fbHQ
hECqVKYqW6SG0RX0kp4RShL9QJRogqSMWMUCh/nmHZ9374sN5dTjmq7sPleYxot/
n23C2e2bzZQ8wOdWGKQLjBe6tUJe5wEa6HygTAIbdjRpgSjW2Tl0/uex6xsBpGV2
rF7dDGKmvZ3+E4gQsSiqov1zqyiFvd3gC/IYsqvtad42sVtkawqoauTbo4RL5uBw
TUa1xbzhUYYTG0KOBsVnAYPFpv8daKqYim1OLifE8WkCM30/N/grH4fnNHXUW1NY
icKB9M9nUrpYvj9QRQtWUpzlFgaPwbS1VLwZpBC3QZ5rCLzLrzN2n1aQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbshTEEJEQsX2YNoTqs7QBkbqRZMB8GA1UdIwQY
MBaAFB7zbW26CX6m1LKtpOdj6E7LPYF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGIt
NTdjOTI0MzFkM2QzLzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zZWQzN2ItYjgwYS00YjEwLTkxNGItNTdjOTI0MzFkM2Qz
LzEvSHZOdGJib0pmcWJVc3EyazUyUG9Uc3M5Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwp12mgu
haLH9pDRtpJSJGoSGZIqffZVGVROM0L9zuxy+XJjNu1nSuE2CgFjretbTetsp0U6
2w48J7M71qXUM6WOyqlNKvyBB5Y71G2qasvTfKAhMBqjKcLs7xl5hk+MPgMoeSEo
gIlYR3bgJ5Ne+dZo0pzgziu5Jj0KUwoJZ/alX+nhF/d+gF/gSsnUKMzuk5rZKr8A
3474vC6SzJNpPtYeJKeSNTZwQ1BLijpiZC+TZBBjSKWDuWox6uz4yqTl8c7BSUPE
Th+SSLE81KTxQkRy/Yw4CtncSZTu7MJz9TQ2kgI195BFhkFm5XIv6HamUsIFPrdj
4q/IseNrV5Ay2g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:46 2025 by rpki-client