Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json)
Hash identifier: HrnLxRKHm/z8NBwvz7xjG4q3uYQB9z28N4ytjTnkwe4=
Subject key identifier: 24:3D:E7:4A:48:0A:7E:6D:97:5F:29:59:69:26:04:16:67:66:A8:01
Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Certificate serial: 0194BC72C1FD69B17908503E4106BFAD5739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
Manifest number: 0FF8
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=)
2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: QxMNZny7X8R4wZLHf6R7sqMPAPJjlA7UX3eDJ+Xle1k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:fd:69:b1:79:08:50:3e:41:06:bf:ad:57:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=243de74a480a7e6d975f2959692604166766a801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9c:7a:8f:ce:61:3f:7c:20:ff:3b:22:ce:b4:
db:dc:62:c1:86:4f:47:02:b8:15:ae:e5:e7:f9:66:
de:0a:c9:bb:75:36:c0:e5:76:7f:a2:8d:98:eb:db:
7f:93:22:81:4f:5f:dc:69:bf:0d:ad:85:7f:a2:e9:
06:c4:d0:94:81:6e:f8:25:90:f1:5a:ed:1d:98:72:
01:65:ad:ea:02:ee:92:2a:95:01:e5:51:b8:f9:e6:
e7:fe:a8:0b:df:92:8b:64:7d:81:c8:80:55:34:be:
8a:d9:72:80:d4:02:32:56:50:61:df:63:34:76:ad:
fb:b1:c9:95:15:a8:4e:df:0a:6d:60:d0:5e:63:53:
04:33:91:63:ce:ff:b5:c8:8c:4b:da:1c:97:24:c1:
72:bf:ce:c2:17:02:4a:5f:ae:32:4f:0c:7d:f1:4b:
79:e4:39:7c:ab:b2:9f:50:d2:8b:74:38:bf:63:dc:
5b:5e:53:c3:eb:b8:36:4d:1f:d9:e6:b2:33:22:11:
bb:42:5f:6a:f8:4d:29:97:e0:f6:8c:1d:8e:b1:c8:
f5:09:87:3e:1b:32:e8:43:8d:b6:37:4d:e2:30:fb:
86:1d:35:ad:7f:39:a9:ec:d2:5d:71:b7:d2:5c:06:
05:5a:a8:fa:02:8d:45:d1:30:2b:6d:2d:e4:a9:39:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3D:E7:4A:48:0A:7E:6D:97:5F:29:59:69:26:04:16:67:66:A8:01
X509v3 Authority Key Identifier:
keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:82:2d:ba:1c:35:0a:4a:ef:e5:92:7d:cb:87:d4:06:0a:
b0:6e:9c:df:4d:60:68:b3:5e:0b:2a:cf:23:88:11:97:38:6e:
d5:4c:82:92:37:da:82:18:13:4d:0d:f0:f4:df:7d:f4:41:75:
79:02:79:3c:c7:23:b0:35:5e:d1:2d:c0:bd:e3:53:21:92:c6:
31:c9:07:6d:a7:81:82:4a:48:d7:5e:ee:3c:b7:72:71:0b:b7:
58:fa:29:83:46:7b:24:54:74:ca:58:8f:67:7e:97:f2:97:e8:
37:7f:eb:02:c0:2c:6c:14:48:db:a6:c7:a0:d0:e4:30:47:27:
74:13:8c:b7:06:e0:a7:44:9c:61:8b:29:69:45:ab:60:e5:39:
de:df:de:d7:dd:a4:80:bb:88:47:f4:c4:63:f0:9c:cc:7c:a4:
de:ec:84:ab:cb:dd:5c:50:90:52:7c:e8:c8:49:37:9f:c2:6b:
4d:1a:57:23:9b:55:90:22:7e:3d:e8:2c:65:1b:23:6f:5f:a3:
9e:88:56:a2:6f:9e:b3:1b:c8:76:81:27:ae:05:f2:29:ab:66:
5c:b3:8d:d2:e7:bc:e4:21:62:c3:c0:bb:d1:b3:f3:87:cf:e2:
ee:6b:c5:ee:1a:ad:5a:3c:a2:4e:de:87:d9:5e:65:61:a5:90:
f3:90:a9:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csH9abF5CFA+QQa/rVc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl
MGFjYzAwHhcNMjUwMTMxMTMwMDI0WhcNMjUwMjAxMTMwMDI0WjAzMTEwLwYDVQQD
EygyNDNkZTc0YTQ4MGE3ZTZkOTc1ZjI5NTk2OTI2MDQxNjY3NjZhODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJx6j85hP3wg/zsizrTb3GLBhk9H
ArgVruXn+WbeCsm7dTbA5XZ/oo2Y69t/kyKBT1/cab8NrYV/oukGxNCUgW74JZDx
Wu0dmHIBZa3qAu6SKpUB5VG4+ebn/qgL35KLZH2ByIBVNL6K2XKA1AIyVlBh32M0
dq37scmVFahO3wptYNBeY1MEM5Fjzv+1yIxL2hyXJMFyv87CFwJKX64yTwx98Ut5
5Dl8q7KfUNKLdDi/Y9xbXlPD67g2TR/Z5rIzIhG7Ql9q+E0pl+D2jB2Oscj1CYc+
GzLoQ422N03iMPuGHTWtfzmp7NJdcbfSXAYFWqj6Ao1F0TArbS3kqTmgbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ950pICn5tl18pWWkmBBZnZqgBMB8GA1UdIwQY
MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt
Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4
LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNSCLboc
NQpK7+WSfcuH1AYKsG6c301gaLNeCyrPI4gRlzhu1UyCkjfaghgTTQ3w9N999EF1
eQJ5PMcjsDVe0S3AveNTIZLGMckHbaeBgkpI117uPLdycQu3WPopg0Z7JFR0yliP
Z36X8pfoN3/rAsAsbBRI26bHoNDkMEcndBOMtwbgp0ScYYspaUWrYOU53t/e192k
gLuIR/TEY/CczHyk3uyEq8vdXFCQUnzoyEk3n8JrTRpXI5tVkCJ+PegsZRsjb1+j
nohWom+esxvIdoEnrgXyKatmXLON0ue85CFiw8C70bPzh8/i7mvF7hqtWjyiTt6H
2V5lYaWQ85CpfQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:24 2025 by rpki-client