Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: TkE266hiDTlEclLwVsalf7KwFk28wtngDXpd/2UNbno=
Subject key identifier: 53:D2:65:01:74:CD:00:55:F4:86:C3:23:DE:9E:DC:D3:4E:19:07:8F
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 0194BC3C47DB1826EB18F9B7334C3EDB5EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 0ECB
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: FPGVzvfJkTe+WIttbSbBpuF7utjS4SIigqZy9/YUSXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:db:18:26:eb:18:f9:b7:33:4c:3e:db:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=53d2650174cd0055f486c323de9edcd34e19078f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:b6:2e:a2:51:2d:06:6a:64:0b:a3:16:e8:
6e:9e:10:fd:03:4f:3b:a5:b3:19:77:9a:79:a0:1c:
43:b5:9d:d7:e3:3b:ff:85:99:e5:ae:a3:1c:1a:56:
95:1d:9e:b0:4c:eb:bb:32:21:35:ac:d4:35:cd:97:
4e:f5:4b:ad:f8:11:ad:6d:36:c3:51:f3:e8:18:ba:
7c:fa:e3:ef:40:31:db:53:1e:05:05:2c:db:22:6c:
ae:7e:1b:f9:a1:d3:e7:c0:e5:96:79:52:47:97:6b:
14:d5:c5:63:60:c0:68:b6:9d:b4:c6:8a:cc:6a:2b:
45:bd:dc:37:14:25:dc:53:91:8b:72:61:95:dc:38:
5c:c6:cb:12:17:d3:21:d3:da:38:84:81:86:1b:01:
34:d1:77:f6:65:aa:4c:f7:ed:0d:a0:c8:8b:42:75:
25:8e:1a:0c:fa:74:0f:3c:9b:e9:5d:51:04:dc:1e:
ec:9b:66:63:73:d2:a0:05:6c:0e:23:af:e1:09:d0:
7a:d0:62:8c:12:5d:c7:29:90:fc:95:e0:34:f6:10:
03:c2:be:5f:cd:9e:f6:0a:01:a0:77:1a:6a:79:43:
45:22:ea:ae:26:de:ea:f0:3b:fc:4a:d7:ef:9e:e5:
87:4f:ec:76:9b:28:a2:bc:10:f3:34:fa:a9:5d:38:
66:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:65:01:74:CD:00:55:F4:86:C3:23:DE:9E:DC:D3:4E:19:07:8F
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:ed:b9:49:75:64:69:17:4a:ad:83:b4:a6:23:19:38:33:
cf:09:45:46:48:b2:e9:f4:d6:c1:cd:b2:d0:df:9c:28:0e:a7:
3f:8d:03:3c:b5:72:c9:c6:fa:d5:50:35:df:d9:68:6e:5a:d3:
e0:ff:46:c8:a9:16:bf:f8:f3:e0:d8:c7:f9:40:b7:7e:e4:a6:
3f:65:7c:ba:af:78:3c:6c:21:0b:42:df:3a:ff:b6:d4:91:95:
9d:e5:88:a9:7e:fa:a1:56:73:0e:80:93:68:71:8d:1e:20:4c:
72:7c:59:12:7b:ea:b6:56:03:6b:09:b4:98:a7:ed:f5:fc:3c:
06:a3:9e:e8:3f:cc:da:bc:bc:c8:27:c5:cd:9e:88:94:0e:86:
f9:8e:f6:59:f8:b1:b4:55:d9:55:4a:78:01:79:14:ed:8f:ba:
24:53:09:e8:09:7a:a5:c2:88:89:de:f3:ff:01:d6:f4:12:ae:
3d:0e:59:89:56:24:5d:8c:3c:f0:4b:09:81:15:4c:91:ca:f6:
f7:41:23:8d:8b:31:ca:c9:a2:57:93:61:f9:e8:09:53:15:65:
d3:fd:e5:06:6e:84:5b:7d:f1:f0:a8:5c:85:fd:ef:80:07:79:
af:44:e8:4d:76:65:4f:04:05:70:bc:36:2d:fe:cf:21:62:a7:
7a:6a:ad:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEfbGCbrGPm3M0w+216yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4
NTgxNjEwHhcNMjUwMTMxMTIwMDU0WhcNMjUwMjAxMTIwMDU0WjAzMTEwLwYDVQQD
Eyg1M2QyNjUwMTc0Y2QwMDU1ZjQ4NmMzMjNkZTllZGNkMzRlMTkwNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZe2LqJRLQZqZAujFuhunhD9A087
pbMZd5p5oBxDtZ3X4zv/hZnlrqMcGlaVHZ6wTOu7MiE1rNQ1zZdO9Uut+BGtbTbD
UfPoGLp8+uPvQDHbUx4FBSzbImyufhv5odPnwOWWeVJHl2sU1cVjYMBotp20xorM
aitFvdw3FCXcU5GLcmGV3DhcxssSF9Mh09o4hIGGGwE00Xf2ZapM9+0NoMiLQnUl
jhoM+nQPPJvpXVEE3B7sm2Zjc9KgBWwOI6/hCdB60GKMEl3HKZD8leA09hADwr5f
zZ72CgGgdxpqeUNFIuquJt7q8Dv8StfvnuWHT+x2myiivBDzNPqpXThmwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPSZQF0zQBV9IbDI96e3NNOGQePMB8GA1UdIwQY
MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt
NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2
LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkontuUl1
ZGkXSq2DtKYjGTgzzwlFRkiy6fTWwc2y0N+cKA6nP40DPLVyycb61VA139loblrT
4P9GyKkWv/jz4NjH+UC3fuSmP2V8uq94PGwhC0LfOv+21JGVneWIqX76oVZzDoCT
aHGNHiBMcnxZEnvqtlYDawm0mKft9fw8BqOe6D/M2ry8yCfFzZ6IlA6G+Y72Wfix
tFXZVUp4AXkU7Y+6JFMJ6Al6pcKIid7z/wHW9BKuPQ5ZiVYkXYw88EsJgRVMkcr2
90EjjYsxysmiV5Nh+egJUxVl0/3lBm6EW33x8Khchf3vgAd5r0ToTXZlTwQFcLw2
Lf7PIWKnemqtDA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:11 2025 by rpki-client