Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: 4rPrKT9Ta5b0dVkWVUIQ5fdpYrQLFhaQzJ/Bu27HC+M=
Subject key identifier: 89:D2:C6:EB:4A:42:40:2D:17:B3:DB:73:C1:43:36:7C:6E:8F:B2:60
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 0194BD17C87BE6486B8EFB90DB5EA6CE5365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 1275
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: 6p+YclXqb2tUgcqzjzPn+zjTaWlXx6jMlrCXU8iyEeM=)
2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c8:7b:e6:48:6b:8e:fb:90:db:5e:a6:ce:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=89d2c6eb4a42402d17b3db73c143367c6e8fb260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:81:8d:87:34:b2:27:6f:0a:27:65:92:e0:
1a:cf:f4:86:58:6d:c0:27:b1:d9:18:b6:c5:a8:86:
11:6c:99:e0:46:a9:3d:63:bc:1b:ed:7a:34:f3:52:
97:6c:25:c7:7d:97:55:52:0f:f3:33:fc:cf:44:83:
95:4e:4a:43:1f:ca:51:7e:57:15:b3:b7:f2:7d:f3:
aa:ba:b6:dc:c8:29:d3:67:3f:8f:e4:e8:37:c2:f3:
6a:ca:98:9e:a0:6b:8d:0f:fe:ed:cc:ec:61:f7:67:
65:f3:75:95:65:c1:f1:6c:c6:73:74:fe:43:ed:3f:
40:71:dd:d0:8f:5a:27:a1:11:c0:9f:22:a6:4e:6f:
eb:5d:bd:d4:4f:5d:a6:f2:f4:bb:f7:79:23:e7:a6:
b1:96:a8:9b:36:bd:8c:05:16:1e:f4:69:76:4f:c2:
51:6d:ba:b6:42:53:51:f8:cf:c2:e1:49:25:89:86:
84:02:fa:81:13:28:95:f9:51:a1:59:e9:35:63:1e:
14:11:3f:8f:c0:51:c8:31:4f:dc:46:0d:a7:f1:94:
bf:87:f4:db:f0:c2:7d:e2:ba:59:c6:86:bb:fa:7d:
cc:07:96:f7:9a:5d:12:e5:6a:8e:46:af:e3:1f:95:
8a:83:4b:66:a3:6d:da:23:70:59:d0:7d:26:8d:d9:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D2:C6:EB:4A:42:40:2D:17:B3:DB:73:C1:43:36:7C:6E:8F:B2:60
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7f:c4:46:ef:0a:fc:ea:f9:c8:44:98:07:c5:e8:fe:63:59:
78:05:38:88:2a:9d:c6:9f:52:32:3c:c4:9c:9d:cd:0f:ee:f8:
6c:93:2d:34:af:f0:9c:f5:b8:ed:55:fa:46:fd:12:00:19:ee:
c5:91:a9:fc:94:87:6c:b1:6e:ea:40:0a:49:16:98:f1:e1:bc:
f3:01:74:c9:99:27:c4:25:21:cb:8c:11:f2:9b:ee:bb:66:7e:
35:2a:0f:15:b4:df:6e:0f:23:39:1d:41:0e:67:7c:86:e0:8a:
fa:cb:68:95:11:6e:ec:85:98:13:1d:ca:b0:23:7f:ca:2c:77:
af:c0:7a:23:5b:b3:c2:a0:48:d8:b2:9c:ec:3d:97:d7:3f:df:
e6:7b:33:e3:3f:d9:a8:db:be:d7:68:2a:57:19:1b:1a:dc:29:
8d:42:25:ba:f0:40:cc:90:7b:b3:cc:f4:e9:c1:4c:ae:f5:b4:
b0:27:b6:bb:07:ce:78:48:52:56:60:2f:e3:23:83:90:d6:fc:
9a:ad:78:f9:b3:b5:52:01:b0:8a:5f:fb:b3:d5:53:71:e0:5a:
9d:60:89:11:ee:a1:81:de:9f:2d:a7:35:a0:f6:67:d4:75:8c:
f6:bf:ca:e1:1c:8e:5b:a1:46:c7:76:a3:87:12:47:34:4b:97:
9b:65:cf:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8h75khrjvuQ216mzlNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDMwZmMwOWE3MTNiMjQ5YWNhYTc2Nzg5MTFlOGQxZTMy
MzNhZmQwHhcNMjUwMTMxMTYwMDM5WhcNMjUwMjAxMTYwMDM5WjAzMTEwLwYDVQQD
Eyg4OWQyYzZlYjRhNDI0MDJkMTdiM2RiNzNjMTQzMzY3YzZlOGZiMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW2BjYc0sidvCidlkuAaz/SGWG3A
J7HZGLbFqIYRbJngRqk9Y7wb7Xo081KXbCXHfZdVUg/zM/zPRIOVTkpDH8pRflcV
s7fyffOqurbcyCnTZz+P5Og3wvNqypieoGuND/7tzOxh92dl83WVZcHxbMZzdP5D
7T9Acd3Qj1onoRHAnyKmTm/rXb3UT12m8vS793kj56axlqibNr2MBRYe9Gl2T8JR
bbq2QlNR+M/C4UkliYaEAvqBEyiV+VGhWek1Yx4UET+PwFHIMU/cRg2n8ZS/h/Tb
8MJ94rpZxoa7+n3MB5b3ml0S5WqORq/jH5WKg0tmo23aI3BZ0H0mjdkRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInSxutKQkAtF7Pbc8FDNnxuj7JgMB8GA1UdIwQY
MBaAFB9DD8CacTskmsqnZ4kR6NHjIzr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQt
YmUzOTE3YzVlMmY3LzEvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yNjc2MWUtN2M2Zi00ODhlLWEyMWQtYmUzOTE3YzVlMmY3
LzEvSDBNUHdKcHhPeVNheXFkbmlSSG8wZU1qT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPX/ERu8K
/Or5yESYB8Xo/mNZeAU4iCqdxp9SMjzEnJ3ND+74bJMtNK/wnPW47VX6Rv0SABnu
xZGp/JSHbLFu6kAKSRaY8eG88wF0yZknxCUhy4wR8pvuu2Z+NSoPFbTfbg8jOR1B
Dmd8huCK+stolRFu7IWYEx3KsCN/yix3r8B6I1uzwqBI2LKc7D2X1z/f5nsz4z/Z
qNu+12gqVxkbGtwpjUIluvBAzJB7s8z06cFMrvW0sCe2uwfOeEhSVmAv4yODkNb8
mq14+bO1UgGwil/7s9VTceBanWCJEe6hgd6fLac1oPZn1HWM9r/K4RyOW6FGx3aj
hxJHNEuXm2XPDw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:50 2025 by rpki-client