
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: tiB/zCYHIkYyoZhBzREeviiq9jHXqCpm1uWfS0HMt7c=
Subject key identifier: 75:9D:08:D2:76:3B:0B:50:52:71:E9:27:7C:D8:7B:8B:37:5E:A5:4B
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 0194BD4EB4DF64F052B904DFACEBB2C30C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: hDQ0375vKfWz8TawOoOWybbrB9EVPk1HGNFa82X2VX0=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:df:64:f0:52:b9:04:df:ac:eb:b2:c3:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=759d08d2763b0b505271e9277cd87b8b375ea54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:44:c0:c6:5f:74:eb:69:c0:4a:ab:00:e6:
fc:6d:a0:df:e2:55:77:cc:d5:ec:9e:d3:ac:1b:c3:
3f:42:53:a1:42:dc:6d:52:16:fa:85:41:6a:82:a9:
7f:7b:cd:ab:6b:55:50:99:3c:47:21:82:34:17:cf:
96:fe:20:66:3a:9b:6a:ce:50:23:eb:9b:b7:32:d6:
28:72:33:ff:e1:fa:fa:98:ef:0d:37:72:c5:0b:9b:
d6:42:93:33:16:2b:1b:5c:6b:1e:0d:e3:37:b6:b0:
2f:8f:5c:46:95:78:4a:57:42:ce:47:d6:74:c6:7c:
87:c0:87:e0:d6:d3:f4:bf:d2:92:35:9f:e8:80:ae:
47:65:fc:ea:f4:42:b5:5e:46:4e:72:91:dd:d7:d2:
1a:f2:c7:7d:44:2d:f8:18:10:14:38:51:33:f5:10:
2e:79:4a:8f:cb:09:45:ee:c0:18:3e:9a:41:05:d5:
b7:6b:7b:64:b6:a1:78:44:2c:e5:63:c0:e5:5d:50:
f6:2b:13:98:44:75:ed:51:a5:d0:92:39:8b:35:35:
fb:22:d4:b7:45:7d:af:33:27:41:3f:ec:2c:3b:63:
e8:81:9e:a6:49:84:2a:f5:5b:2b:53:dd:8b:6a:ae:
89:98:af:23:aa:70:ca:f1:8e:b5:05:28:7e:22:c2:
5a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:08:D2:76:3B:0B:50:52:71:E9:27:7C:D8:7B:8B:37:5E:A5:4B
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:70:44:d5:e0:1d:bc:6c:7c:5d:ae:41:c4:fe:80:68:af:
82:35:b4:0d:5b:6c:5f:9c:b7:6b:f0:40:cd:11:40:99:7d:16:
21:08:73:73:5d:94:5d:28:aa:4f:27:69:5b:7f:df:a6:c1:38:
44:a0:85:db:66:c1:61:59:34:c1:6a:93:0a:62:30:96:b0:e7:
c9:aa:d0:e1:a6:e8:75:36:7e:60:c4:66:81:2c:59:34:41:ee:
d5:92:f0:9e:eb:ee:96:6d:0b:54:6f:9f:c7:c7:eb:73:ef:bd:
fa:63:de:62:b8:b2:9a:f7:1f:f8:06:a6:10:2c:ce:22:ef:12:
52:23:d5:23:38:cd:2e:45:1c:47:33:5e:b3:6f:8f:1e:1d:fe:
ac:0b:53:40:ad:36:4e:99:64:ac:2e:f2:e6:b5:4b:50:b4:5f:
7a:3b:78:c3:28:cf:42:e6:0b:20:0b:c7:aa:48:ae:f6:b6:a1:
84:61:4b:45:45:3c:0a:44:32:aa:f1:a6:8e:d1:8a:d2:e5:d0:
0e:92:3a:2a:a5:b7:79:59:96:f9:94:b5:04:48:c1:e6:44:c2:
a4:03:52:2e:87:70:cf:21:2e:9f:2e:77:03:02:17:1f:14:72:
26:e5:21:c0:0d:21:25:df:47:e3:b6:15:b5:86:6f:dc:84:9d:
88:bb:c9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrTfZPBSuQTfrOuywwyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw
ODJlOGEwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg3NTlkMDhkMjc2M2IwYjUwNTI3MWU5Mjc3Y2Q4N2I4YjM3NWVhNTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdEwMZfdOtpwEqrAOb8baDf4lV3
zNXsntOsG8M/QlOhQtxtUhb6hUFqgql/e82ra1VQmTxHIYI0F8+W/iBmOptqzlAj
65u3MtYocjP/4fr6mO8NN3LFC5vWQpMzFisbXGseDeM3trAvj1xGlXhKV0LOR9Z0
xnyHwIfg1tP0v9KSNZ/ogK5HZfzq9EK1XkZOcpHd19Ia8sd9RC34GBAUOFEz9RAu
eUqPywlF7sAYPppBBdW3a3tktqF4RCzlY8DlXVD2KxOYRHXtUaXQkjmLNTX7ItS3
RX2vMydBP+wsO2PogZ6mSYQq9VsrU92Laq6JmK8jqnDK8Y61BSh+IsJa+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWdCNJ2OwtQUnHpJ3zYe4s3XqVLMB8GA1UdIwQY
MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt
NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3
LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPhwRNXg
HbxsfF2uQcT+gGivgjW0DVtsX5y3a/BAzRFAmX0WIQhzc12UXSiqTydpW3/fpsE4
RKCF22bBYVk0wWqTCmIwlrDnyarQ4abodTZ+YMRmgSxZNEHu1ZLwnuvulm0LVG+f
x8frc++9+mPeYriymvcf+AamECzOIu8SUiPVIzjNLkUcRzNes2+PHh3+rAtTQK02
TplkrC7y5rVLULRfejt4wyjPQuYLIAvHqkiu9rahhGFLRUU8CkQyqvGmjtGK0uXQ
DpI6KqW3eVmW+ZS1BEjB5kTCpANSLodwzyEuny53AwIXHxRyJuUhwA0hJd9H47YV
tYZv3ISdiLvJcw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:07 2025 by rpki-client