Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json)
Hash identifier: ppiRXcfgoBJHOZoByLxSY9p7xWnjrUp3SHHVSb/XKUg=
Subject key identifier: D1:DE:F3:A8:36:A9:26:83:58:B8:93:A6:73:97:C2:C9:29:11:0A:A9
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 0194BC3C4AA31E079D0D1A67499C45EDA055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
Manifest number: 0928
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=)
2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: 3FmQkXHJFdxUdF+yBRGGdel+Ql5ss0Qay6HNKAwsMdQ=)
3: goSMWDerSHWQm8a_biGbxip6JFU.roa (hash: XaD94ECbN6BS26VvKKBdjXS3UxYcMtbVwFJAn3/LvwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:a3:1e:07:9d:0d:1a:67:49:9c:45:ed:a0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=d1def3a836a9268358b893a67397c2c929110aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:d7:9e:f1:ae:40:cd:ae:a5:fd:d2:ff:2f:
99:1f:77:ba:d6:0c:8c:21:8a:7f:0a:c0:b1:1d:02:
4a:91:71:89:04:25:ef:d4:e7:b5:ec:ba:76:7a:1f:
0b:8f:89:79:c6:fe:54:0c:3c:2a:fa:80:3c:f0:68:
af:b4:bc:0a:25:c3:de:d5:b7:a1:17:cf:c9:b6:1f:
a0:0c:a3:f4:21:93:fc:db:0d:68:99:64:9f:12:ac:
70:40:f9:af:37:93:c2:60:60:e4:fb:12:f0:2e:05:
3b:52:82:50:99:99:b9:a6:b8:77:fb:17:f8:33:00:
47:2c:8c:24:22:b6:16:45:83:c9:69:78:e0:2e:f4:
a3:6f:d7:f9:49:1c:97:d7:09:ca:10:fa:77:9b:b7:
46:79:21:fa:9a:23:24:9a:e0:1d:3e:7b:b2:8f:b8:
3d:0f:11:23:79:41:69:ba:e6:ee:0c:86:a3:f3:4c:
16:2f:42:50:ce:69:8d:6d:bd:d1:a3:51:71:b1:0f:
7a:52:f9:e3:bc:b8:12:33:2e:e9:5d:1a:73:30:52:
46:dc:6c:f9:06:1d:c1:28:27:f1:2d:db:34:9e:a0:
80:b8:cb:69:77:36:75:c0:97:fc:ff:21:6e:f8:cb:
d6:88:26:34:1d:08:4f:93:1a:d4:a2:02:61:59:e7:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:F3:A8:36:A9:26:83:58:B8:93:A6:73:97:C2:C9:29:11:0A:A9
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:c5:c9:82:a2:dc:df:14:47:5f:4c:14:93:db:46:dc:29:
09:2a:66:73:84:6f:1b:b8:15:de:b8:28:25:3a:0a:1c:15:34:
86:e5:af:ab:a7:15:84:8c:14:18:63:b1:b1:07:b3:91:e6:36:
96:95:25:46:36:3f:ab:43:c1:e0:cb:e8:ed:2a:c7:e8:0e:35:
4c:de:18:cf:45:d6:4b:5c:6d:6d:99:e1:87:54:ed:fe:fc:ce:
95:a1:ba:ac:bf:01:e2:6b:d0:7b:93:6b:5b:00:e0:81:eb:ed:
48:14:4e:70:55:fe:bf:bb:31:4d:f3:29:81:38:95:6a:af:db:
3c:ad:b3:70:8e:0f:a7:b4:7d:6e:ae:2b:b4:61:57:a9:03:9f:
25:0e:f9:52:b0:53:41:da:e0:14:d0:7e:3e:c0:4d:bf:d4:42:
53:ec:b5:f0:d4:ff:6b:a0:12:e9:f3:f4:94:ba:8d:c5:0d:0a:
d0:56:92:c2:34:8c:f6:34:e7:94:97:7f:e7:0e:a1:67:7b:1b:
01:79:80:a1:4a:bf:48:bd:08:91:37:c9:e3:95:2e:4e:63:2e:
be:54:f1:2f:1f:e8:a0:3b:fc:11:e3:31:72:d1:af:89:84:6f:
78:50:d0:dd:ad:5e:21:dc:5f:68:34:48:8f:13:29:4e:4c:2b:
e7:03:d9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEqjHgedDRpnSZxF7aBVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5
NWQyYWIwHhcNMjUwMTMxMTIwMDU1WhcNMjUwMjAxMTIwMDU1WjAzMTEwLwYDVQQD
EyhkMWRlZjNhODM2YTkyNjgzNThiODkzYTY3Mzk3YzJjOTI5MTEwYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjzXnvGuQM2upf3S/y+ZH3e61gyM
IYp/CsCxHQJKkXGJBCXv1Oe17Lp2eh8Lj4l5xv5UDDwq+oA88GivtLwKJcPe1beh
F8/Jth+gDKP0IZP82w1omWSfEqxwQPmvN5PCYGDk+xLwLgU7UoJQmZm5prh3+xf4
MwBHLIwkIrYWRYPJaXjgLvSjb9f5SRyX1wnKEPp3m7dGeSH6miMkmuAdPnuyj7g9
DxEjeUFpuubuDIaj80wWL0JQzmmNbb3Ro1FxsQ96UvnjvLgSMy7pXRpzMFJG3Gz5
Bh3BKCfxLds0nqCAuMtpdzZ1wJf8/yFu+MvWiCY0HQhPkxrUogJhWefn2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHe86g2qSaDWLiTpnOXwskpEQqpMB8GA1UdIwQY
MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt
MjE5YjlmNmY5MDg3LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3
LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtHFyYKi
3N8UR19MFJPbRtwpCSpmc4RvG7gV3rgoJToKHBU0huWvq6cVhIwUGGOxsQezkeY2
lpUlRjY/q0PB4Mvo7SrH6A41TN4Yz0XWS1xtbZnhh1Tt/vzOlaG6rL8B4mvQe5Nr
WwDggevtSBROcFX+v7sxTfMpgTiVaq/bPK2zcI4Pp7R9bq4rtGFXqQOfJQ75UrBT
QdrgFNB+PsBNv9RCU+y18NT/a6AS6fP0lLqNxQ0K0FaSwjSM9jTnlJd/5w6hZ3sb
AXmAoUq/SL0IkTfJ45UuTmMuvlTxLx/ooDv8EeMxctGviYRveFDQ3a1eIdxfaDRI
jxMpTkwr5wPZ+A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:30 2025 by rpki-client