Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
File: CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft (raw, json)
Hash identifier: a1kLHpqWToUMLac5LXx8cewN0x8MyjI2xQ4xr5dkzR0=
Subject key identifier: FF:11:A7:A8:D0:44:23:95:EC:17:32:78:EB:92:58:3F:3F:FC:01:B6
Authority key identifier: 08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
Certificate issuer: /CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Certificate serial: 0194BC730BCD23326A407050A2D2D98EF33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
Manifest number: 102E
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl (hash: Rs29irU03ozOX0aWwU9ieVgeTEb3F4MfJuMZtemvW6g=)
2: NSQQr0dchBVb5NqeR8z3x_MXCeI.roa (hash: XPvSVq5h7mPPG5QqR8bg1ZJJPL/y/MfsW5VYh5EY4C8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:cd:23:32:6a:40:70:50:a2:d2:d9:8e:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d1f1f8b41d74f7d866b1e5adfd18afe2027108
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=ff11a7a8d0442395ec173278eb92583f3ffc01b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:a3:09:b1:72:b0:61:fd:e5:73:a5:7c:b9:
4f:a5:f4:5c:06:a7:1d:c6:68:6f:66:7a:d3:03:01:
91:65:b0:8e:e4:92:60:7d:50:1e:eb:56:34:2e:f6:
91:ad:eb:65:2a:6b:2b:eb:71:13:ca:cd:da:5e:0f:
fc:f9:2a:26:d5:ad:a1:b5:b6:63:77:e9:f3:64:a1:
16:c4:22:6c:fb:3a:af:0c:57:07:bf:ad:bd:2b:99:
cf:d2:f4:3e:99:c6:0c:7b:30:47:dd:89:9c:24:f5:
8a:05:f0:7b:06:8f:d4:f0:f5:b4:a2:31:a5:6a:91:
bd:23:7b:58:be:3e:5a:a2:3b:62:fa:94:4c:a2:5f:
1b:3c:21:6f:cc:23:46:d8:98:88:b5:0f:8b:2b:ec:
b4:3b:fa:b4:85:45:11:dc:17:56:e0:e1:4a:d6:20:
bb:49:14:e1:5b:b3:1a:15:d4:a1:8b:c1:76:73:a1:
ca:c2:91:d7:d7:05:33:1f:7f:d5:84:8f:4e:75:f3:
1e:b7:60:d7:1c:20:9f:e2:e9:e1:75:3f:d2:e9:ef:
85:97:41:03:5c:35:4c:a9:8a:ef:c7:ab:0d:ad:03:
72:de:6b:cb:e4:08:76:7f:47:3b:15:19:b1:72:4a:
ae:dc:62:dc:1d:e1:d6:14:63:1c:76:5b:57:98:bd:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:A7:A8:D0:44:23:95:EC:17:32:78:EB:92:58:3F:3F:FC:01:B6
X509v3 Authority Key Identifier:
keyid:08:D1:F1:F8:B4:1D:74:F7:D8:66:B1:E5:AD:FD:18:AF:E2:02:71:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNHx-LQddPfYZrHlrf0Yr-ICcQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/29c015-d747-4fc7-932b-df5cb9f0e3a4/1/CNHx-LQddPfYZrHlrf0Yr-ICcQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:54:a8:7c:25:69:37:05:cf:62:3e:fb:7d:14:6c:40:9f:75:
86:33:52:d3:7b:f7:80:41:18:90:c6:cb:c3:64:da:2a:6f:5c:
2e:bf:26:1b:a1:d8:7a:00:5c:90:0d:86:ff:1f:26:a4:f1:32:
08:86:79:64:5e:55:02:7e:c2:04:4a:2d:69:ee:17:29:4e:60:
f4:84:4f:8e:63:c1:67:86:44:0f:30:e0:b6:dc:d7:18:42:e5:
37:01:a9:d4:c9:a7:a1:ba:f5:5f:c8:59:2a:8a:bf:a4:87:e6:
b4:b2:ed:53:72:b0:5a:3a:30:f2:7d:94:bf:55:91:0f:28:e2:
1b:3f:91:88:5d:a1:93:ae:02:cb:97:96:e5:3e:c0:76:78:36:
aa:f3:cf:4a:bb:6a:6c:3e:42:e1:9f:1e:8f:51:0b:15:6b:f6:
44:3c:0d:28:d9:81:a4:2c:05:59:04:aa:4a:88:89:4b:7b:f5:
8b:81:49:6d:cd:72:86:77:e6:38:cd:68:fd:eb:ce:3c:2c:5b:
6c:9d:ee:f5:69:52:97:73:36:55:fb:03:f9:d2:b9:b5:89:69:
72:f0:e7:9a:37:aa:54:9f:24:23:90:44:3c:6f:27:d6:9c:de:
6a:7b:77:0f:01:a8:32:71:cb:cf:5b:0e:56:7c:3f:2f:8f:c1:
24:c4:99:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwvNIzJqQHBQotLZjvM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDFmMWY4YjQxZDc0ZjdkODY2YjFlNWFkZmQxOGFmZTIw
MjcxMDgwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EyhmZjExYTdhOGQwNDQyMzk1ZWMxNzMyNzhlYjkyNTgzZjNmZmMwMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGWjCbFysGH95XOlfLlPpfRcBqcd
xmhvZnrTAwGRZbCO5JJgfVAe61Y0LvaRretlKmsr63ETys3aXg/8+Som1a2htbZj
d+nzZKEWxCJs+zqvDFcHv629K5nP0vQ+mcYMezBH3YmcJPWKBfB7Bo/U8PW0ojGl
apG9I3tYvj5aojti+pRMol8bPCFvzCNG2JiItQ+LK+y0O/q0hUUR3BdW4OFK1iC7
SRThW7MaFdShi8F2c6HKwpHX1wUzH3/VhI9OdfMet2DXHCCf4unhdT/S6e+Fl0ED
XDVMqYrvx6sNrQNy3mvL5Ah2f0c7FRmxckqu3GLcHeHWFGMcdltXmL3q6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8Rp6jQRCOV7BcyeOuSWD8//AG2MB8GA1UdIwQY
MBaAFAjR8fi0HXT32Gax5a39GK/iAnEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmIt
ZGY1Y2I5ZjBlM2E0LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yOWMwMTUtZDc0Ny00ZmM3LTkzMmItZGY1Y2I5ZjBlM2E0
LzEvQ05IeC1MUWRkUGZZWnJIbHJmMFlyLUlDY1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVSofCVp
NwXPYj77fRRsQJ91hjNS03v3gEEYkMbLw2TaKm9cLr8mG6HYegBckA2G/x8mpPEy
CIZ5ZF5VAn7CBEotae4XKU5g9IRPjmPBZ4ZEDzDgttzXGELlNwGp1Mmnobr1X8hZ
Koq/pIfmtLLtU3KwWjow8n2Uv1WRDyjiGz+RiF2hk64Cy5eW5T7Adng2qvPPSrtq
bD5C4Z8ej1ELFWv2RDwNKNmBpCwFWQSqSoiJS3v1i4FJbc1yhnfmOM1o/evOPCxb
bJ3u9WlSl3M2VfsD+dK5tYlpcvDnmjeqVJ8kI5BEPG8n1pzeant3DwGoMnHLz1sO
Vnw/L4/BJMSZ7A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:11 2025 by rpki-client