Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json)
Hash identifier: 3SEsfsOZufagS+6cbC0vN7iDKn8g4QdZYqq6IaTNzAc=
Subject key identifier: C6:84:CD:5D:3E:5E:66:2F:AC:A7:5C:5C:3F:4B:59:9B:1F:C2:4C:10
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 0194BC731DAE7E9417FBE4BBF8A6D15AA2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
Manifest number: 103E
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (hash: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=)
2: C3HTCbEiFvzbXFueKvGWF_mRXw4.roa (hash: a7uTffEZAuXL+Q8exXoucA2Yn/pHXDuF10YegywE6X0=)
3: EqxVNlycylxq6ufI9ng2ltdK1KM.roa (hash: b+kpuQsONfGhMD7qgwxZkbzW/4IKkzNE5v/myC4W0qY=)
4: QdYIwbhgXZFZDGrsD1bCfWnJfNM.roa (hash: GAa3KktDwm+TlBojUO7F6LnOQMJ0zxC/VLgeFCn23pI=)
5: V1rb0y6iu1TTOsIZQYPUPITNZdc.roa (hash: 4TLj9uQX2T55ymBodPD3FK/tTeE67Ngmw9g4awglSqU=)
6: WXjFZoiCISI_yspL4FcEm9bdfcI.roa (hash: APAQXnGGyhr90KbRpNB9tcoe69UsmM5mt7YeoOtXtYQ=)
7: Yjrt4HsK8wh6pJI81KOUWlnSEwg.roa (hash: XmuwPChIn1UvgMab/4oMWsQTN7bkJ51y5zUd1xVolH0=)
8: cO2-NOuH2RV4sPciOdoA32su67Q.roa (hash: 9jc3V+7f0q1/c2NMI1faaA1MEEx9FCl4Vp7wxvOlyNU=)
9: euovkC8FzqkWizkBlJiIPuOidbU.roa (hash: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=)
10: gdNItxWNsM4KiGU05OylhksApCc.roa (hash: WiPvUqderzx9CicZMrqZIDKRBrczrFFx57GnwN1V0lI=)
11: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: y2+nLPuvzmuUp3xpCTpuqZBHe+gfhTdWWGm3RF0ONr4=)
12: oMpZucICfk-8ZesIjg26RzH9z8Q.roa (hash: avfjdtl0mm9+afn2EBtC58m5oIaLp8/rBFhWdaYQq6o=)
13: otRKiszydCDY9q531U0lvSFQ9-k.roa (hash: gnSGvbqgxtkHbNOFTt+ktv6F2FJ/txG4ExqUjGRj8J0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:ae:7e:94:17:fb:e4:bb:f8:a6:d1:5a:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=c684cd5d3e5e662faca75c5c3f4b599b1fc24c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:1c:19:95:0f:dd:58:a8:f7:c0:7a:22:bc:
b4:1d:79:51:5e:64:59:58:28:68:e8:34:14:96:e9:
af:58:ed:cc:a0:e3:a0:41:9d:fc:c0:c4:42:f5:e3:
f5:73:1f:0a:98:85:97:f7:52:b0:1b:52:3b:7f:eb:
9a:c2:c4:0e:b2:51:32:ce:a1:09:f8:95:c5:1c:d9:
53:3a:f4:58:05:37:17:c9:b6:4d:15:db:43:e2:3c:
49:e5:da:97:83:fc:dc:d9:a8:cd:73:29:7e:01:8c:
49:7a:2f:91:c5:dd:f5:f1:bc:36:f8:25:c9:5f:d6:
6a:0c:07:b2:9c:5b:13:7b:1a:20:f9:d8:0f:1b:a6:
dd:de:71:3c:f2:68:73:e6:fb:f7:60:b5:73:5d:90:
31:95:fc:78:c5:8e:31:79:8e:6c:55:75:9a:5b:6e:
3e:bb:92:08:0c:79:21:17:39:2f:ca:3c:ae:31:bc:
9b:e8:8e:88:e6:b0:34:3f:b1:01:39:d5:31:cc:1e:
d3:43:05:a0:e1:2b:3d:40:83:bf:eb:3a:55:af:32:
c0:eb:57:85:ce:8b:d2:6c:43:bc:c6:4c:dd:c2:21:
20:b7:1a:ca:59:82:96:b7:e8:ac:91:6e:af:15:39:
92:6c:1d:77:e0:ae:38:23:eb:0b:8f:9e:d2:6c:4e:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:84:CD:5D:3E:5E:66:2F:AC:A7:5C:5C:3F:4B:59:9B:1F:C2:4C:10
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b9:57:d6:61:c7:11:c2:c2:a8:a2:43:a4:df:68:3b:90:42:
66:f7:8b:25:a0:07:48:74:a1:34:e1:5f:50:50:47:a1:20:89:
ae:62:bf:b5:98:58:1a:a4:eb:9c:e5:42:8e:21:08:ec:d5:73:
d7:57:a3:cf:1b:b5:ce:f4:df:d8:a5:9f:aa:23:4e:2d:d8:6f:
ef:06:06:a4:83:1c:1f:8a:d6:72:35:96:10:0f:32:7b:8a:c4:
a4:8b:15:78:0f:df:04:d2:43:ff:ca:65:f1:c6:84:b0:66:36:
76:ac:e9:30:2e:76:20:0c:91:9d:0d:7d:f7:6d:4b:3b:d5:fd:
f7:3a:2d:5b:bb:28:6f:82:e5:1a:be:d6:11:bb:1c:55:73:ca:
c4:3f:ca:79:f9:45:fb:ff:67:00:f2:f3:3e:dc:57:f6:00:e0:
09:49:c7:c3:d1:7b:4e:0f:2d:4e:13:ec:ae:b6:c2:2a:7b:65:
03:24:4b:78:4c:30:bd:45:e8:10:5b:35:5d:e3:4f:38:a9:49:
eb:25:3b:ef:c3:88:ae:aa:67:2d:07:ac:9b:05:2e:76:06:8a:
ef:11:45:cd:3e:b1:84:2b:27:1d:33:ab:73:43:00:90:2d:76:
04:5e:a1:b7:16:d6:6b:ff:4b:fe:04:b3:2a:17:76:9f:4b:1a:
04:59:d0:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cx2ufpQX++S7+KbRWqKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi
MmUyY2QwHhcNMjUwMTMxMTMwMDQ4WhcNMjUwMjAxMTMwMDQ4WjAzMTEwLwYDVQQD
EyhjNjg0Y2Q1ZDNlNWU2NjJmYWNhNzVjNWMzZjRiNTk5YjFmYzI0YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C4cGZUP3Vio98B6Iry0HXlRXmRZ
WCho6DQUlumvWO3MoOOgQZ38wMRC9eP1cx8KmIWX91KwG1I7f+uawsQOslEyzqEJ
+JXFHNlTOvRYBTcXybZNFdtD4jxJ5dqXg/zc2ajNcyl+AYxJei+Rxd318bw2+CXJ
X9ZqDAeynFsTexog+dgPG6bd3nE88mhz5vv3YLVzXZAxlfx4xY4xeY5sVXWaW24+
u5IIDHkhFzkvyjyuMbyb6I6I5rA0P7EBOdUxzB7TQwWg4Ss9QIO/6zpVrzLA61eF
zovSbEO8xkzdwiEgtxrKWYKWt+iskW6vFTmSbB134K44I+sLj57SbE5Y8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaEzV0+XmYvrKdcXD9LWZsfwkwQMB8GA1UdIwQY
MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt
ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi
LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgblX1mHH
EcLCqKJDpN9oO5BCZveLJaAHSHShNOFfUFBHoSCJrmK/tZhYGqTrnOVCjiEI7NVz
11ejzxu1zvTf2KWfqiNOLdhv7wYGpIMcH4rWcjWWEA8ye4rEpIsVeA/fBNJD/8pl
8caEsGY2dqzpMC52IAyRnQ19921LO9X99zotW7sob4LlGr7WEbscVXPKxD/KeflF
+/9nAPLzPtxX9gDgCUnHw9F7Tg8tThPsrrbCKntlAyRLeEwwvUXoEFs1XeNPOKlJ
6yU778OIrqpnLQesmwUudgaK7xFFzT6xhCsnHTOrc0MAkC12BF6htxbWa/9L/gSz
Khd2n0saBFnQrQ==
-----END CERTIFICATE-----
Generated at Thu May 1 10:40:42 2025 by rpki-client