Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: 7ViP/W2ZKm9pD4nZhHbwxNh5F5NXt6cht4DCjB/opPg=
Subject key identifier: 5D:C8:25:5A:B5:3F:98:E5:8F:F9:F4:62:98:50:D9:4A:3C:05:EA:37
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 0194BC72DC3704B0976144CC1162A31160BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 1260
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: d8LbM8de7q+NuukQMoHro31QD1D4MZBun0tO1zlO710=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:37:04:b0:97:61:44:cc:11:62:a3:11:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=5dc8255ab53f98e58ff9f4629850d94a3c05ea37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:ee:3b:48:ce:9f:e6:af:71:a5:81:94:5c:
54:43:29:45:43:03:dc:95:16:dd:82:16:e4:ec:f1:
7e:c6:04:be:0d:30:ec:3b:70:51:1a:6a:f9:4f:99:
9b:6e:11:8e:a7:18:e0:9d:cb:6e:f7:40:c0:22:b1:
59:07:c7:0c:bf:f4:c4:a4:c0:7e:eb:e4:d8:02:6f:
17:0c:ea:96:5e:ea:f0:48:f6:3b:77:ce:79:63:6a:
e0:cb:2f:39:d0:da:01:5e:db:72:48:42:3c:e6:f7:
a9:48:6f:5c:43:80:04:df:28:00:f3:f0:5b:dc:e2:
03:2e:e9:30:2f:aa:66:b4:29:47:71:e1:9b:be:81:
4f:5c:86:6a:be:9a:8f:6a:be:ae:58:a1:4b:cd:66:
31:39:9c:71:d7:ee:22:83:00:1d:70:05:5c:0a:07:
6b:70:b6:5a:e7:fd:50:ea:cc:22:ae:1c:f4:09:f6:
1b:25:14:e5:04:08:d0:f0:b2:21:89:28:64:18:ff:
62:22:2d:d8:ed:6d:d0:dc:9b:ec:e3:63:fb:8f:6b:
f5:ea:e6:2b:f1:4b:bf:50:39:1a:cf:4b:d7:ba:e6:
e0:80:18:a6:86:70:b8:fc:b2:ac:0e:f7:34:ac:dc:
b9:f0:b3:8a:c0:4f:c4:96:e9:38:10:2e:a1:5d:76:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:25:5A:B5:3F:98:E5:8F:F9:F4:62:98:50:D9:4A:3C:05:EA:37
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:39:f0:67:4e:05:80:fb:85:d3:c2:86:e2:a3:c9:56:93:57:
0e:19:66:6b:db:3d:3d:c4:89:7f:e1:73:2b:0d:4b:bc:11:f4:
06:c7:5e:db:8b:a4:ab:25:db:0a:f7:64:48:7c:b8:17:52:b6:
10:c3:79:58:f4:92:8c:bd:c0:93:4e:72:15:fa:22:86:43:ed:
df:bf:10:0e:a5:3d:52:b5:9d:e7:91:cb:42:0d:3a:ee:be:3c:
06:95:50:3a:e8:59:1a:1e:53:03:e8:e1:b3:c5:8f:49:bc:74:
14:d8:9c:ad:9f:f4:c6:a9:83:47:e3:81:dc:bd:e8:e7:54:a5:
0a:14:b3:86:c6:0d:07:37:52:d5:35:50:65:b9:2a:a0:33:d2:
1c:9b:67:f1:b2:11:fc:d3:d1:b7:05:fd:14:6d:22:a2:e6:2d:
17:1d:54:e5:7e:65:4c:62:5b:f8:00:52:2a:56:81:b8:bd:e5:
ab:16:76:ed:a9:64:da:66:ad:b5:85:bb:ab:fb:6e:eb:1c:87:
0c:7e:12:d2:3f:01:37:ae:00:2f:59:fd:3e:12:44:0a:2c:a0:
2f:a1:13:f6:8a:d1:59:d5:f7:52:d7:e3:3e:c5:b6:66:5d:42:
3e:c0:89:98:50:87:d4:30:22:15:9c:1d:35:bc:41:84:24:5d:
07:d6:87:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctw3BLCXYUTMEWKjEWC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3
NjQ4NTkwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
Eyg1ZGM4MjU1YWI1M2Y5OGU1OGZmOWY0NjI5ODUwZDk0YTNjMDVlYTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ljuO0jOn+avcaWBlFxUQylFQwPc
lRbdghbk7PF+xgS+DTDsO3BRGmr5T5mbbhGOpxjgnctu90DAIrFZB8cMv/TEpMB+
6+TYAm8XDOqWXurwSPY7d855Y2rgyy850NoBXttySEI85vepSG9cQ4AE3ygA8/Bb
3OIDLukwL6pmtClHceGbvoFPXIZqvpqPar6uWKFLzWYxOZxx1+4igwAdcAVcCgdr
cLZa5/1Q6swirhz0CfYbJRTlBAjQ8LIhiShkGP9iIi3Y7W3Q3Jvs42P7j2v16uYr
8Uu/UDkaz0vXuubggBimhnC4/LKsDvc0rNy58LOKwE/Eluk4EC6hXXZPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3IJVq1P5jlj/n0YphQ2Uo8Beo3MB8GA1UdIwQY
MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut
OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm
LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDnwZ04F
gPuF08KG4qPJVpNXDhlma9s9PcSJf+FzKw1LvBH0Bsde24ukqyXbCvdkSHy4F1K2
EMN5WPSSjL3Ak05yFfoihkPt378QDqU9UrWd55HLQg067r48BpVQOuhZGh5TA+jh
s8WPSbx0FNicrZ/0xqmDR+OB3L3o51SlChSzhsYNBzdS1TVQZbkqoDPSHJtn8bIR
/NPRtwX9FG0iouYtFx1U5X5lTGJb+ABSKlaBuL3lqxZ27alk2mattYW7q/tu6xyH
DH4S0j8BN64AL1n9PhJECiygL6ET9orRWdX3UtfjPsW2Zl1CPsCJmFCH1DAiFZwd
NbxBhCRdB9aHtg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:46 2025 by rpki-client