Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: Cpdg0tXkBlQycqmpGa1f0YQCm2Knctgj5xFI8ootTD0=
Subject key identifier: 78:E6:61:94:8F:C4:F6:F8:5E:D8:BF:BE:E5:5A:CF:46:AF:0C:23:32
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 0194BCA9A2CA1E61757345FC0A553491DE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: bBJ9/5sXuELcqcnyg8j/dFA8LTPvG6zQ7cckR1ePnjU=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:ca:1e:61:75:73:45:fc:0a:55:34:91:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=78e661948fc4f6f85ed8bfbee55acf46af0c2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:eb:b4:86:27:3a:02:90:23:60:63:49:4a:
b0:c9:f6:27:45:f9:a5:3d:67:fb:59:65:82:6b:df:
64:84:bf:ee:20:92:55:48:ba:1a:ee:41:cc:c4:01:
2c:b3:7b:7b:07:fd:81:1d:be:aa:bf:d7:3f:51:2c:
24:be:3c:3e:bd:e6:49:8c:ff:6c:8e:50:d2:84:19:
20:67:fd:6b:65:8b:f7:8c:7b:0e:7f:6c:e3:92:dd:
3c:51:df:d6:b1:6e:a8:d1:84:d6:82:e0:a1:16:a2:
0e:29:c5:0f:88:dd:d7:78:0a:3c:f1:78:0a:39:0e:
8e:e8:71:92:28:12:b9:96:b5:8c:90:e0:4e:29:0c:
95:ca:cd:d0:bb:dd:9e:64:ab:bc:d7:b4:be:51:57:
d1:4a:0e:09:d4:b2:1d:fd:14:76:91:94:df:49:ed:
f0:52:92:0d:61:3d:5c:07:53:38:84:f5:4b:ef:18:
7e:66:2e:46:b4:90:94:55:79:26:cb:d1:1c:ec:5f:
a2:95:20:72:11:49:24:8d:23:f7:86:1d:15:ab:32:
16:40:47:cf:3e:86:e2:0a:5f:f5:6a:e8:38:2f:4c:
f6:11:78:a0:ac:72:ea:0f:66:3a:b9:73:31:8e:a8:
b6:3c:e3:7c:6a:41:84:cd:ef:71:d3:0e:3b:4b:f5:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:61:94:8F:C4:F6:F8:5E:D8:BF:BE:E5:5A:CF:46:AF:0C:23:32
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c0:83:99:b7:20:d0:f7:f4:22:2a:da:ee:b0:a0:06:f3:06:
76:d4:6c:ad:cc:74:f1:a8:2c:f9:be:c5:03:d2:92:9e:ed:c9:
41:c6:b0:87:c1:09:7f:81:48:fb:2d:1a:42:89:45:b9:7f:c8:
87:24:a3:ab:10:c9:9d:dc:16:c4:b6:31:ac:48:4b:34:f8:20:
9a:b8:72:f2:79:e6:2e:e9:7e:b1:70:49:10:43:24:45:b6:91:
da:aa:68:da:76:0e:b3:18:09:da:e3:4a:8e:3b:92:2c:47:91:
a6:50:73:37:80:72:29:ff:13:13:37:c9:c6:f8:12:13:7b:02:
88:66:c3:ab:c5:8c:d4:04:cb:95:9b:48:b6:a8:36:d2:e9:d8:
20:92:3d:25:a3:0c:f4:0f:06:a3:91:fd:c6:8b:47:d3:33:05:
29:81:d1:b5:e6:35:33:36:02:88:bd:f8:9d:37:74:2d:b1:a8:
21:6e:f3:1d:4e:8e:80:75:1a:91:f8:7a:aa:7f:81:0c:6b:b3:
49:91:c9:bc:60:2a:03:c0:fe:14:a3:cb:e3:13:b6:24:d6:ca:
95:f9:68:a3:03:c9:8d:07:60:ff:29:87:08:53:ba:03:b5:36:
91:ab:f5:ec:cd:ec:a8:dc:a9:6b:f1:24:26:4b:77:04:5a:2b:
8f:aa:c6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaLKHmF1c0X8ClU0kd5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi
MzZlODEwHhcNMjUwMTMxMTQwMDIxWhcNMjUwMjAxMTQwMDIxWjAzMTEwLwYDVQQD
Eyg3OGU2NjE5NDhmYzRmNmY4NWVkOGJmYmVlNTVhY2Y0NmFmMGMyMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rPrtIYnOgKQI2BjSUqwyfYnRfml
PWf7WWWCa99khL/uIJJVSLoa7kHMxAEss3t7B/2BHb6qv9c/USwkvjw+veZJjP9s
jlDShBkgZ/1rZYv3jHsOf2zjkt08Ud/WsW6o0YTWguChFqIOKcUPiN3XeAo88XgK
OQ6O6HGSKBK5lrWMkOBOKQyVys3Qu92eZKu817S+UVfRSg4J1LId/RR2kZTfSe3w
UpINYT1cB1M4hPVL7xh+Zi5GtJCUVXkmy9Ec7F+ilSByEUkkjSP3hh0VqzIWQEfP
PobiCl/1aug4L0z2EXigrHLqD2Y6uXMxjqi2PON8akGEze9x0w47S/XMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjmYZSPxPb4Xti/vuVaz0avDCMyMB8GA1UdIwQY
MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt
NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1
LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8CDmbcg
0Pf0Iira7rCgBvMGdtRsrcx08ags+b7FA9KSnu3JQcawh8EJf4FI+y0aQolFuX/I
hySjqxDJndwWxLYxrEhLNPggmrhy8nnmLul+sXBJEEMkRbaR2qpo2nYOsxgJ2uNK
jjuSLEeRplBzN4ByKf8TEzfJxvgSE3sCiGbDq8WM1ATLlZtItqg20unYIJI9JaMM
9A8Go5H9xotH0zMFKYHRteY1MzYCiL34nTd0LbGoIW7zHU6OgHUakfh6qn+BDGuz
SZHJvGAqA8D+FKPL4xO2JNbKlfloowPJjQdg/ymHCFO6A7U2kav17M3sqNypa/Ek
Jkt3BForj6rGdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:31 2025 by rpki-client