Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
File: HoKN5x3deARXMSjSbuRcA5AcgBM.mft (raw, json)
Hash identifier: muIN9M8brdVsAn6sP2VlO7ujClrmNY2Ca1iy9abic5g=
Subject key identifier: F4:A6:00:AA:21:51:06:DF:31:F4:6D:6E:21:41:54:0F:50:18:92:6A
Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013
Certificate serial: 0194BC3C6933ADB1C47280818494DFF0E9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
Manifest number: EF
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: HoKN5x3deARXMSjSbuRcA5AcgBM.crl (hash: Rcm7/qNTsCug27NeqtC2vf9B4Unc9CDbcJiK21eidIs=)
2: PFjB0suzwepgpRQg4ijZdi1aKI8.roa (hash: YjFJJun3pz3vvGFXjSMeL596davTUmL7ryORKEoBTmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:33:ad:b1:c4:72:80:81:84:94:df:f0:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=f4a600aa215106df31f46d6e2141540f5018926a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:6a:f5:79:4e:1b:ea:27:15:88:da:ca:b8:
96:c2:c2:29:5f:85:31:14:ce:c9:b1:77:a8:ce:da:
5e:ba:88:1f:90:46:9c:81:3f:50:5a:2d:ab:35:0b:
3f:5e:2a:85:08:22:27:f1:58:af:a1:d1:57:42:24:
72:eb:5e:56:7b:c8:de:c6:38:05:de:79:f7:df:ff:
ce:68:04:51:ef:1d:a7:18:ae:9c:00:e0:0a:a6:e5:
d2:32:11:e6:be:c3:85:00:79:a1:00:9c:a1:78:6f:
8c:6a:2e:db:fa:7c:95:1c:da:f2:66:a7:6d:09:e5:
9f:0b:d3:2d:06:33:77:88:41:af:f8:87:9b:90:b5:
88:20:85:58:25:f7:59:f7:27:f7:07:b9:72:66:d9:
f3:27:a8:48:ab:45:90:d8:10:fd:db:13:2c:da:c5:
df:be:d3:0f:0f:64:3f:01:46:f4:10:c6:7a:1c:c8:
ef:a0:0b:51:19:df:88:8a:3d:f5:7b:6d:56:70:6c:
94:32:74:be:d1:98:c8:9e:da:6d:3b:51:d1:3a:79:
6d:18:bb:b1:aa:82:a2:1d:ba:f5:bf:3a:2b:56:ba:
e3:80:5a:e3:e3:7e:33:6d:22:c6:01:86:c2:a2:15:
b3:f9:43:32:f1:17:cc:bd:ac:27:d1:93:94:ab:76:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:00:AA:21:51:06:DF:31:F4:6D:6E:21:41:54:0F:50:18:92:6A
X509v3 Authority Key Identifier:
keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:9a:82:44:36:19:45:51:2c:92:df:79:41:10:cf:d8:88:
c9:d0:9a:5d:9d:4e:76:80:75:86:10:55:7a:58:7d:b5:d2:99:
a0:0a:8f:17:3c:b6:65:7c:53:a9:d2:a4:d8:0c:29:82:83:08:
cb:18:1f:dc:1a:06:74:8d:3f:09:21:27:de:df:c7:03:6d:2b:
1b:c5:87:77:2c:af:34:09:9c:ae:be:37:84:ef:88:40:f4:48:
52:b9:3f:5d:46:67:39:02:17:60:58:81:d8:ff:2a:a0:02:55:
1d:d5:65:90:19:08:6f:37:3f:4b:a5:6c:3e:7a:7b:ac:9b:f6:
35:97:09:92:b7:45:41:df:ad:3d:2b:80:be:c8:a6:64:84:ce:
67:35:14:53:9b:1e:39:65:ba:af:6a:dd:21:4f:af:6d:b5:0d:
72:45:c7:5a:dd:37:20:23:80:07:0d:3a:89:4f:42:61:7c:40:
30:41:85:28:cd:51:cf:88:26:17:bc:1e:e5:29:6b:f8:52:ae:
e7:81:2d:1c:10:fe:af:e5:e3:5e:9e:13:a2:78:77:d5:14:b3:
c4:d8:a9:db:3e:12:fc:9a:3d:6a:5b:be:8a:55:6d:1a:39:1c:
97:26:77:a4:6d:7b:03:7b:d3:54:5d:d7:8a:ab:4a:ea:1e:fd:
cd:0f:87:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGkzrbHEcoCBhJTf8OmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx
YzgwMTMwHhcNMjUwMTMxMTIwMTAzWhcNMjUwMjAxMTIwMTAzWjAzMTEwLwYDVQQD
EyhmNGE2MDBhYTIxNTEwNmRmMzFmNDZkNmUyMTQxNTQwZjUwMTg5MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1z5q9XlOG+onFYjayriWwsIpX4Ux
FM7JsXeoztpeuogfkEacgT9QWi2rNQs/XiqFCCIn8VivodFXQiRy615We8jexjgF
3nn33//OaARR7x2nGK6cAOAKpuXSMhHmvsOFAHmhAJyheG+Mai7b+nyVHNryZqdt
CeWfC9MtBjN3iEGv+IebkLWIIIVYJfdZ9yf3B7lyZtnzJ6hIq0WQ2BD92xMs2sXf
vtMPD2Q/AUb0EMZ6HMjvoAtRGd+Iij31e21WcGyUMnS+0ZjIntptO1HROnltGLux
qoKiHbr1vzorVrrjgFrj434zbSLGAYbCohWz+UMy8RfMvawn0ZOUq3aETQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSmAKohUQbfMfRtbiFBVA9QGJJqMB8GA1UdIwQY
MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct
NzBjOGM3MGUzMmIwLzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw
LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqOagkQ2
GUVRLJLfeUEQz9iIydCaXZ1OdoB1hhBVelh9tdKZoAqPFzy2ZXxTqdKk2AwpgoMI
yxgf3BoGdI0/CSEn3t/HA20rG8WHdyyvNAmcrr43hO+IQPRIUrk/XUZnOQIXYFiB
2P8qoAJVHdVlkBkIbzc/S6VsPnp7rJv2NZcJkrdFQd+tPSuAvsimZITOZzUUU5se
OWW6r2rdIU+vbbUNckXHWt03ICOABw06iU9CYXxAMEGFKM1Rz4gmF7we5Slr+FKu
54EtHBD+r+XjXp4Tonh31RSzxNip2z4S/Jo9alu+ilVtGjkclyZ3pG17A3vTVF3X
iqtK6h79zQ+HuA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:38 2025 by rpki-client