Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: jpoJmCY8+owfn4lvljHeEweHzw/CqSTmPsfWZvOUiTs=
Subject key identifier: 61:F0:B4:08:5F:97:EB:20:D5:DC:88:1A:CF:24:B3:A8:86:AC:7F:DF
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 0194BCE079EF556BCA97C880F9C36EDF6E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:15 +0000
Manifest this update: Fri 31 Jan 2025 15:00:15 +0000
Manifest next update: Sat 01 Feb 2025 15:00:15 +0000
Files and hashes: 1: 6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa (hash: XDeNGBG9FcZmfX7y784opBbXWR4Kqd1BKc6tmbydzsk=)
2: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
3: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: suO9CbZjBorDBbS4zWUaOkpurm4bw+RpKQbv9wEdOtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:79:ef:55:6b:ca:97:c8:80:f9:c3:6e:df:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jan 31 15:00:15 2025 GMT
Not After : Feb 1 15:00:15 2025 GMT
Subject: CN=61f0b4085f97eb20d5dc881acf24b3a886ac7fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:3a:bb:4e:5c:8e:e2:2b:d0:4d:b4:68:8a:
3d:56:95:68:01:9e:3c:f6:90:0c:93:d0:ba:b2:b8:
4c:25:b6:78:f5:e3:0b:65:c8:70:7d:ef:7e:19:8b:
13:28:1e:58:e8:b3:cb:97:07:50:c3:32:87:24:fb:
e0:46:4c:fd:8e:ef:26:e6:3f:68:9a:d6:5e:be:5b:
91:96:e8:f0:da:f8:7d:05:31:32:23:59:65:cd:7e:
69:d6:36:9e:c0:06:08:35:6d:c7:5a:84:84:61:b6:
ce:9a:3b:ba:a2:94:7a:e0:35:4a:70:43:88:34:60:
a4:4d:79:ed:72:c6:27:c2:04:e0:a9:ff:4c:c0:eb:
a4:1b:d8:94:80:34:06:9b:c6:63:9b:2e:48:b4:51:
f8:65:ac:58:f1:5d:3a:44:80:8b:dd:ea:c1:58:50:
b6:36:0f:82:0b:52:e7:84:b0:78:ad:fb:6f:9e:a5:
27:e2:6a:ba:a8:9e:f4:4c:5e:15:e4:46:05:c1:52:
9e:72:72:d7:98:7a:d2:8c:88:e1:a8:3e:c2:a9:39:
33:b9:54:33:78:c7:7e:ce:2b:f4:50:c0:77:1a:49:
ba:7d:d2:78:ca:e0:29:68:4f:a3:92:08:d4:60:6f:
72:4a:a5:fa:50:7b:4f:e4:88:81:6c:8d:12:2e:96:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:B4:08:5F:97:EB:20:D5:DC:88:1A:CF:24:B3:A8:86:AC:7F:DF
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:22:87:35:7c:9c:8f:6c:dc:a3:f0:7f:55:c5:59:2f:49:2f:
ba:5e:95:d5:87:e1:70:2b:47:87:b7:cd:27:95:40:f4:33:95:
b3:97:7c:48:08:83:80:92:7c:d2:06:ed:44:0f:d0:a5:15:5c:
01:dc:86:87:10:bc:ba:91:d1:6a:01:f2:74:33:2c:3c:c7:39:
0c:0a:6c:37:bb:71:db:45:d5:cd:33:1a:d4:4f:60:ae:f4:30:
b6:5b:42:1b:71:2b:4b:39:23:86:ed:b0:f9:e6:82:3d:8c:f3:
b9:56:df:1e:58:44:26:74:a8:18:25:58:32:f9:9a:24:63:0e:
28:7e:ca:24:2b:48:14:aa:8d:b1:ce:2d:9a:8a:e8:b3:e7:6b:
b5:f1:d6:23:03:66:cc:8f:82:80:74:dc:03:34:db:19:9b:00:
37:2d:36:94:3a:8f:fc:0e:40:83:c0:22:8c:45:42:de:d8:c8:
da:e4:be:18:9d:25:6a:14:0e:65:8f:09:2c:ee:b1:f7:24:5a:
5d:69:a7:99:0e:c4:ff:ea:b8:cc:32:da:d1:8f:8e:72:be:71:
d9:da:0f:a6:70:0f:c3:23:cb:7b:c5:02:0f:5a:bf:0f:67:0f:
32:51:bd:9f:71:e7:08:00:2d:62:8c:c8:56:dd:b2:2f:c2:d0:
7b:ab:70:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HnvVWvKl8iA+cNu326aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk
OTlhYWIwHhcNMjUwMTMxMTUwMDE1WhcNMjUwMjAxMTUwMDE1WjAzMTEwLwYDVQQD
Eyg2MWYwYjQwODVmOTdlYjIwZDVkYzg4MWFjZjI0YjNhODg2YWM3ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2686u05cjuIr0E20aIo9VpVoAZ48
9pAMk9C6srhMJbZ49eMLZchwfe9+GYsTKB5Y6LPLlwdQwzKHJPvgRkz9ju8m5j9o
mtZevluRlujw2vh9BTEyI1llzX5p1jaewAYINW3HWoSEYbbOmju6opR64DVKcEOI
NGCkTXntcsYnwgTgqf9MwOukG9iUgDQGm8Zjmy5ItFH4ZaxY8V06RICL3erBWFC2
Ng+CC1LnhLB4rftvnqUn4mq6qJ70TF4V5EYFwVKecnLXmHrSjIjhqD7CqTkzuVQz
eMd+ziv0UMB3Gkm6fdJ4yuApaE+jkgjUYG9ySqX6UHtP5IiBbI0SLpbcQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHwtAhfl+sg1dyIGs8ks6iGrH/fMB8GA1UdIwQY
MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt
ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2
LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyKHNXyc
j2zco/B/VcVZL0kvul6V1YfhcCtHh7fNJ5VA9DOVs5d8SAiDgJJ80gbtRA/QpRVc
AdyGhxC8upHRagHydDMsPMc5DApsN7tx20XVzTMa1E9grvQwtltCG3ErSzkjhu2w
+eaCPYzzuVbfHlhEJnSoGCVYMvmaJGMOKH7KJCtIFKqNsc4tmoros+drtfHWIwNm
zI+CgHTcAzTbGZsANy02lDqP/A5Ag8AijEVC3tjI2uS+GJ0lahQOZY8JLO6x9yRa
XWmnmQ7E/+q4zDLa0Y+Ocr5x2doPpnAPwyPLe8UCD1q/D2cPMlG9n3HnCAAtYozI
Vt2yL8LQe6twfw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:16 2025 by rpki-client