Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
File: hX9MEi5PjGAfIcXIaHFtRgidheE.mft (raw, json)
Hash identifier: hK4m4WPM6xY5xrEJ8Yn8DFkBFg41e2eVxkfzKb5hPrk=
Subject key identifier: E4:60:F4:86:A3:69:15:1E:20:E1:6E:5E:AD:B9:CB:36:04:31:0F:39
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 0194BCE0B3822B5548E04A30D416B5D3AD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
Manifest number: 08F2
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: hX9MEi5PjGAfIcXIaHFtRgidheE.crl (hash: aMOCstZNC9xqV/pc5dcq0VEWlhRkVx2doTFLek46DXY=)
2: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (hash: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:82:2b:55:48:e0:4a:30:d4:16:b5:d3:ad:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=e460f486a369151e20e16e5eadb9cb3604310f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:34:8d:09:4d:5a:26:62:22:cb:e2:fd:c0:
77:b3:d7:a2:7b:5c:16:62:b8:04:d6:1e:c9:16:69:
63:c6:79:f5:e8:47:52:d2:2b:70:80:af:79:f8:4f:
cb:05:e0:23:a3:a8:03:b8:d9:d6:8f:fe:e4:46:7a:
51:3a:ce:aa:d9:78:0e:11:ee:67:28:8f:70:04:35:
67:3c:38:35:ab:30:d2:ab:b6:88:f2:a4:fe:7f:42:
91:0e:0b:52:78:63:5f:77:f9:e8:6e:0b:34:0c:01:
14:50:ef:41:a7:85:85:e5:4d:04:f1:3e:f2:e5:54:
bd:fa:57:99:84:70:4b:3a:1d:36:93:82:a0:1c:e4:
7e:e7:96:8a:93:8a:05:f9:bc:41:63:5d:e6:b7:17:
c1:c7:a6:0c:a6:5f:ec:19:47:12:c0:3e:cb:4a:cb:
af:82:3d:8f:b3:cc:36:e1:83:87:e9:2b:a7:9a:07:
1e:51:9d:a7:92:86:38:71:fe:90:ca:41:30:93:eb:
cd:61:3f:5b:70:78:ab:70:0e:e4:54:b2:69:79:4b:
1d:18:07:b7:d9:9f:c0:1c:10:76:19:e5:f1:1d:e3:
ce:cf:2e:2e:bc:09:0c:c0:08:5d:2d:55:68:ab:16:
b3:39:46:d4:03:04:b5:b6:28:02:a4:e9:78:63:11:
72:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:60:F4:86:A3:69:15:1E:20:E1:6E:5E:AD:B9:CB:36:04:31:0F:39
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:58:4f:d4:a7:60:21:9f:a5:73:b3:fc:47:df:c9:d6:37:
d3:e3:c9:c9:37:e2:99:54:33:36:79:e5:34:ed:a0:e8:66:39:
ed:46:f8:53:ff:d5:7e:31:9b:89:e8:bb:e5:c3:7d:08:10:aa:
8b:5b:08:ed:77:52:f0:de:60:2e:95:07:62:6f:c9:d1:0d:7d:
c4:ed:83:3c:7c:db:22:d4:4a:24:52:b3:22:52:63:bc:d8:8c:
b6:71:5d:4b:8a:83:a9:f7:77:b0:ab:5e:a3:59:54:37:6f:e1:
6e:45:3e:e0:64:00:cd:2b:b9:f8:ff:cb:21:07:2d:1c:1f:48:
31:3d:5d:3f:2e:47:65:b6:6a:73:38:e0:75:c9:da:e9:a3:97:
9d:ac:c1:3b:c9:70:ca:46:e6:62:7b:5b:e4:ad:dd:8a:81:dc:
9a:f8:1a:f5:1c:34:4c:cf:5a:55:d2:7f:38:9f:29:52:3c:b9:
c2:10:ef:e5:52:3b:7b:93:db:88:3b:d6:dc:61:8d:d4:bf:d7:
73:52:3a:c1:df:37:c7:bb:68:a4:33:c7:36:ad:fb:82:cb:9f:
9b:09:37:7a:db:68:b6:c3:22:a0:7b:66:33:32:97:78:b4:57:
2d:06:fb:3e:5a:ef:a2:ff:0a:8a:8a:bf:39:42:6e:51:ae:40:
ec:31:d8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LOCK1VI4Eow1Ba10607MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1N2Y0YzEyMmU0ZjhjNjAxZjIxYzVjODY4NzE2ZDQ2MDg5
ZDg1ZTEwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
EyhlNDYwZjQ4NmEzNjkxNTFlMjBlMTZlNWVhZGI5Y2IzNjA0MzEwZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFE0jQlNWiZiIsvi/cB3s9eie1wW
YrgE1h7JFmljxnn16EdS0itwgK95+E/LBeAjo6gDuNnWj/7kRnpROs6q2XgOEe5n
KI9wBDVnPDg1qzDSq7aI8qT+f0KRDgtSeGNfd/nobgs0DAEUUO9Bp4WF5U0E8T7y
5VS9+leZhHBLOh02k4KgHOR+55aKk4oF+bxBY13mtxfBx6YMpl/sGUcSwD7LSsuv
gj2Ps8w24YOH6SunmgceUZ2nkoY4cf6QykEwk+vNYT9bcHircA7kVLJpeUsdGAe3
2Z/AHBB2GeXxHePOzy4uvAkMwAhdLVVoqxazOUbUAwS1tigCpOl4YxFybwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORg9IajaRUeIOFuXq25yzYEMQ85MB8GA1UdIwQY
MBaAFIV/TBIuT4xgHyHFyGhxbUYInYXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYt
ZGE1Y2IwZmIxOWU3LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NjE5MzktYWM4ZS00ZDEyLWIxMmYtZGE1Y2IwZmIxOWU3
LzEvaFg5TUVpNVBqR0FmSWNYSWFIRnRSZ2lkaGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFlYT9Sn
YCGfpXOz/EffydY30+PJyTfimVQzNnnlNO2g6GY57Ub4U//VfjGbiei75cN9CBCq
i1sI7XdS8N5gLpUHYm/J0Q19xO2DPHzbItRKJFKzIlJjvNiMtnFdS4qDqfd3sKte
o1lUN2/hbkU+4GQAzSu5+P/LIQctHB9IMT1dPy5HZbZqczjgdcna6aOXnazBO8lw
ykbmYntb5K3dioHcmvga9Rw0TM9aVdJ/OJ8pUjy5whDv5VI7e5PbiDvW3GGN1L/X
c1I6wd83x7topDPHNq37gsufmwk3ettotsMioHtmMzKXeLRXLQb7Plrvov8Kioq/
OUJuUa5A7DHYew==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client