Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: I79EKJfghYLFOfWEn8ruWQRrgfLCZX298H5py+s/Vs8=
Subject key identifier: 70:7B:EA:95:09:85:19:26:C2:EB:79:5E:AA:33:A0:01:AC:F6:45:C3
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 0194BD4EA57BB17A251A4C095056F6FDCB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: gAc5RofYKMkMLydro2Y1cczvW8o9Q2yDP2qjf4EF/B8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a5:7b:b1:7a:25:1a:4c:09:50:56:f6:fd:cb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=707bea9509851926c2eb795eaa33a001acf645c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:fd:cd:80:bb:28:0e:98:0e:55:77:07:69:
bb:ff:8d:79:60:0b:3d:70:58:1b:ea:45:b3:a9:cc:
ec:bf:2c:94:e7:6c:d2:86:33:3d:ff:ed:a5:ae:68:
6d:c1:13:b1:87:12:4b:b6:84:60:ed:46:ea:70:5b:
f7:99:8d:00:80:0c:92:7a:f9:15:12:ba:54:5c:cf:
90:8d:e4:20:48:8a:fc:d9:fc:5d:69:5a:5a:49:96:
58:2f:fc:14:e2:61:e7:a4:94:50:ff:66:f5:3a:e8:
b1:a2:95:b9:0e:24:7f:9c:f6:f1:53:fa:5b:b8:74:
92:14:4a:d0:33:aa:db:5d:52:ac:94:ca:67:6c:d0:
ed:cd:9d:f5:75:cd:11:8b:2a:75:fb:5b:e2:32:d0:
35:12:b9:04:d4:e4:7c:81:f5:28:8c:6e:c5:f8:9c:
fc:cd:4e:3e:23:b0:05:2f:1a:9a:df:29:8d:53:b1:
37:aa:51:c7:5a:d0:00:b9:8d:b5:9f:d1:6a:36:18:
cb:19:74:af:78:ad:4d:8c:28:66:7c:34:5a:cb:11:
5d:71:64:79:e0:a0:d3:31:e3:91:d3:8f:7e:40:e1:
30:3e:2f:b2:3f:e9:dc:32:f2:e8:43:5e:be:f1:2e:
5e:91:95:8b:45:26:2c:7e:77:f3:34:c1:6a:d1:63:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:EA:95:09:85:19:26:C2:EB:79:5E:AA:33:A0:01:AC:F6:45:C3
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:4a:74:5c:67:90:ef:ad:a4:79:f3:96:cb:1a:89:b7:5a:94:
24:5e:d5:00:96:17:ca:0f:55:08:ba:df:d0:c9:d5:72:2f:fa:
20:a2:0e:37:0f:fa:1a:88:b3:12:3f:ad:1c:64:ae:65:d0:2c:
eb:0d:83:29:e1:63:83:7f:c4:5c:01:c1:e4:c8:0e:9f:84:2e:
69:a6:6b:eb:c9:87:16:0d:c3:62:6b:d9:6a:ec:15:2b:a2:ac:
50:87:7e:4a:e3:29:6f:91:29:f5:90:a8:f7:b9:1f:6f:12:06:
b8:c6:c3:c2:c6:dc:8f:c3:3d:22:39:36:e7:50:5b:1f:95:07:
47:3e:49:d4:dd:3b:3b:54:41:67:5a:a1:da:39:70:29:28:a9:
ad:4f:08:18:88:51:72:e7:d5:22:99:5c:fd:ed:f9:1c:0f:d0:
70:1a:6c:f8:69:e6:39:00:5b:6d:ba:8c:5f:e6:2c:de:73:df:
42:6a:fc:fb:a6:ee:b9:2a:e0:51:f6:ac:cb:e9:bf:15:6a:22:
73:60:49:6a:6c:79:84:dd:b5:11:e9:3b:01:06:3f:45:30:a2:
75:c7:5d:11:c8:c3:b6:23:3c:d9:27:a8:06:d0:49:53:d5:1c:
58:75:b3:f7:3d:e6:82:c4:e7:b8:18:21:83:25:e9:d9:62:b0:
f2:ee:ab:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqV7sXolGkwJUFb2/ct8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MDRlYmY5ZGIxNzEwYTQ3YmFlNDUwOGNkYWY4MTMxZTE2
NzRhNTQwHhcNMjUwMTMxMTcwMDM1WhcNMjUwMjAxMTcwMDM1WjAzMTEwLwYDVQQD
Eyg3MDdiZWE5NTA5ODUxOTI2YzJlYjc5NWVhYTMzYTAwMWFjZjY0NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EP9zYC7KA6YDlV3B2m7/415YAs9
cFgb6kWzqczsvyyU52zShjM9/+2lrmhtwROxhxJLtoRg7UbqcFv3mY0AgAySevkV
ErpUXM+QjeQgSIr82fxdaVpaSZZYL/wU4mHnpJRQ/2b1OuixopW5DiR/nPbxU/pb
uHSSFErQM6rbXVKslMpnbNDtzZ31dc0Riyp1+1viMtA1ErkE1OR8gfUojG7F+Jz8
zU4+I7AFLxqa3ymNU7E3qlHHWtAAuY21n9FqNhjLGXSveK1NjChmfDRayxFdcWR5
4KDTMeOR049+QOEwPi+yP+ncMvLoQ16+8S5ekZWLRSYsfnfzNMFq0WOiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHB76pUJhRkmwut5XqozoAGs9kXDMB8GA1UdIwQY
MBaAFIUE6/nbFxCke65FCM2vgTHhZ0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgt
YTliMWRmNDRjZTJmLzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZWZlMDEtZWM3NC00MGFjLWEyMzgtYTliMWRmNDRjZTJm
LzEvaFFUci1kc1hFS1I3cmtVSXphLUJNZUZuU2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2kp0XGeQ
762kefOWyxqJt1qUJF7VAJYXyg9VCLrf0MnVci/6IKIONw/6GoizEj+tHGSuZdAs
6w2DKeFjg3/EXAHB5MgOn4QuaaZr68mHFg3DYmvZauwVK6KsUId+SuMpb5Ep9ZCo
97kfbxIGuMbDwsbcj8M9Ijk251BbH5UHRz5J1N07O1RBZ1qh2jlwKSiprU8IGIhR
cufVIplc/e35HA/QcBps+GnmOQBbbbqMX+Ys3nPfQmr8+6buuSrgUfasy+m/FWoi
c2BJamx5hN21Eek7AQY/RTCidcddEcjDtiM82SeoBtBJU9UcWHWz9z3mgsTnuBgh
gyXp2WKw8u6riQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:41 2025 by rpki-client