Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: QWzzo/4kCrS+uoCqi1tZKOQYte6GBGYswtdF6xuaSTw=
Subject key identifier: FE:2D:5D:B2:58:23:DD:5D:6A:26:88:C8:D8:B2:3E:F6:58:DA:D6:A8
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0194BD4E94BA6063065B6DDDDF84F61C369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 143C
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: 4q2wgKxe3Ut3ZJyLHnWTpxqykVJrLI6powDCNbDC1ZY=)
2: cotEouiXu762jmOTs5iSN-FA1D4.roa (hash: 0qvS3d3WKvgAOHyFng2HTjNdkL+9obj6Uh7vOgZKXAc=)
3: tD1CUDBjs22F2Vpn4D4yWrWPHZ4.roa (hash: lG5gN7RKN9Uruqz8icVgVV1JmWliEhD6uso7zWpR9k4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:94:ba:60:63:06:5b:6d:dd:df:84:f6:1c:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=fe2d5db25823dd5d6a2688c8d8b23ef658dad6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:32:eb:56:e2:43:d9:ae:44:29:92:32:c2:
82:ab:68:c8:15:f7:dc:83:5e:3f:8b:9b:d9:4d:ec:
4d:82:76:1f:ed:d8:52:64:38:84:a1:30:31:cf:0c:
e8:ae:26:5b:94:c7:19:6d:b5:cd:1a:91:a0:8f:65:
7e:46:e2:b5:10:1f:58:e6:dd:2f:a0:33:f7:e1:ae:
81:12:9e:60:2a:e7:f9:03:2c:a6:4e:c0:80:07:84:
b3:3e:96:43:5f:56:35:67:ed:35:68:ed:42:4d:bb:
bc:52:7a:91:e6:bf:00:45:99:0b:82:fa:7e:87:4a:
3d:52:7f:2f:c6:98:c8:0b:22:e8:e6:a5:88:6f:0a:
22:46:9f:7e:8a:5d:a7:a8:23:0d:21:39:dc:37:1c:
29:48:20:ab:d8:b8:2a:61:88:eb:c6:ee:ff:85:ad:
76:b0:96:81:bf:c7:09:92:fd:29:79:ec:ee:ca:7b:
39:ff:6f:54:25:ec:ef:03:cd:28:b8:b8:61:14:ff:
e8:18:53:a1:b8:bf:9e:87:62:e1:96:13:b6:32:7c:
24:c0:cf:68:40:7b:51:16:08:55:bf:a0:4e:62:8e:
55:2c:c5:95:84:08:c4:99:9f:92:fd:21:1b:81:d8:
62:e6:a0:6e:6f:e0:02:7f:5e:eb:b2:cc:ab:8b:6b:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:5D:B2:58:23:DD:5D:6A:26:88:C8:D8:B2:3E:F6:58:DA:D6:A8
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:56:04:7f:25:15:09:83:ff:d0:ad:02:9f:a4:5a:3a:d2:
5d:d1:65:c4:19:f9:99:ab:cd:f8:ff:21:ae:0e:f4:57:10:db:
7e:b6:db:b1:3d:8d:24:0c:75:15:99:f6:e0:36:46:64:32:2f:
f2:bd:63:db:9e:05:59:19:b9:f8:4a:76:c6:b4:6e:4d:ce:4f:
80:09:de:4e:ad:55:e4:f3:49:3b:3a:f2:b9:ef:7a:c0:13:93:
4d:06:a7:45:32:65:8f:92:fd:f1:99:8e:58:be:c4:36:9f:30:
7e:46:2b:20:0f:72:8c:a6:5d:97:1a:62:b8:cc:3b:2a:6d:00:
c0:25:33:ee:46:e5:04:ff:46:3c:21:57:1e:01:bd:f2:2b:73:
d5:d0:4b:b6:6e:87:8e:9b:53:76:35:0c:2d:f7:7f:7e:56:d6:
74:06:c8:f9:97:0e:05:8f:04:a3:55:02:c5:7d:c0:77:59:36:
98:b2:c2:6a:0d:0d:e0:bc:85:b7:b1:33:b2:dc:09:d7:43:f4:
f8:0d:35:e9:85:4a:6f:c4:ed:ab:0d:7a:07:72:b2:a5:19:7c:
68:ec:c0:dd:70:f2:31:81:25:7c:1e:74:7b:98:4e:cc:17:68:
af:8b:21:07:19:81:a0:99:7e:b5:ad:4f:5e:0e:cd:63:1f:59:
54:89:e8:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpS6YGMGW23d34T2HDadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk
Mjg0ZjAwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
EyhmZTJkNWRiMjU4MjNkZDVkNmEyNjg4YzhkOGIyM2VmNjU4ZGFkNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNcy61biQ9muRCmSMsKCq2jIFffc
g14/i5vZTexNgnYf7dhSZDiEoTAxzwzoriZblMcZbbXNGpGgj2V+RuK1EB9Y5t0v
oDP34a6BEp5gKuf5AyymTsCAB4SzPpZDX1Y1Z+01aO1CTbu8UnqR5r8ARZkLgvp+
h0o9Un8vxpjICyLo5qWIbwoiRp9+il2nqCMNITncNxwpSCCr2LgqYYjrxu7/ha12
sJaBv8cJkv0peezuyns5/29UJezvA80ouLhhFP/oGFOhuL+eh2LhlhO2MnwkwM9o
QHtRFghVv6BOYo5VLMWVhAjEmZ+S/SEbgdhi5qBub+ACf17rssyri2smUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4tXbJYI91daiaIyNiyPvZY2taoMB8GA1UdIwQY
MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt
YjI4ZjA3YjJmNDViLzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi
LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzhWBH8l
FQmD/9CtAp+kWjrSXdFlxBn5mavN+P8hrg70VxDbfrbbsT2NJAx1FZn24DZGZDIv
8r1j254FWRm5+Ep2xrRuTc5PgAneTq1V5PNJOzryue96wBOTTQanRTJlj5L98ZmO
WL7ENp8wfkYrIA9yjKZdlxpiuMw7Km0AwCUz7kblBP9GPCFXHgG98itz1dBLtm6H
jptTdjUMLfd/flbWdAbI+ZcOBY8Eo1UCxX3Ad1k2mLLCag0N4LyFt7EzstwJ10P0
+A016YVKb8Ttqw16B3KypRl8aOzA3XDyMYElfB50e5hOzBdor4shBxmBoJl+ta1P
Xg7NYx9ZVInoqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client