Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: fU6+RMCAYv2sFj9G+4WX0myMaWSngAMM6A4/VXScptY=
Subject key identifier: E7:D8:27:C8:BF:EC:D9:89:B3:18:3C:DF:73:61:3A:53:93:46:EC:E2
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 0194BBCDF4937F828CE86650C556410ABF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 0D35
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: d6EXxRVqLdK+LPpHm6c+fi8w9pL+t3caSjq0bFnQHE0=)
2: nWIGQEEDzaoVvT_y5hPxRiP1qn8.roa (hash: uGDWeypcq1B/eKXj8B8fn9FgOmQqtHY/Hs+n7XduT00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:93:7f:82:8c:e8:66:50:c5:56:41:0a:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=e7d827c8bfecd989b3183cdf73613a539346ece2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:27:7e:40:2e:77:8f:73:f8:0c:9b:61:b5:
9f:ae:72:12:d8:f5:2c:45:d7:52:0f:c7:4d:1e:54:
29:3a:d9:db:ed:87:24:09:8c:ed:7a:82:ad:db:c7:
f1:2b:c3:b7:f8:86:70:27:4c:eb:6f:11:42:28:d3:
4a:f1:31:fa:dc:da:ee:f1:14:d5:b3:7d:2b:77:0b:
0d:a2:87:4e:d8:e2:3f:2a:81:85:4a:4e:b7:c2:b8:
d6:b9:b6:02:b3:1c:46:c3:29:ab:76:6f:9e:9c:12:
36:b3:04:26:77:95:f7:36:2e:e4:78:0a:d7:2d:9c:
f0:12:d6:8d:4f:27:cc:2d:65:66:3f:13:8b:d6:2e:
04:50:15:5d:e9:b1:1e:9e:30:82:fb:c8:b0:a3:c7:
0e:61:b5:f7:7a:c2:89:75:16:1b:14:57:99:cd:31:
76:40:f5:0a:07:bf:59:1a:8c:14:95:a7:e9:38:4c:
2f:8e:14:ab:b6:60:c0:ec:d1:a5:fd:61:64:d7:18:
6e:f5:e7:a8:66:74:60:8e:84:74:ca:1a:bb:7a:78:
a8:ec:70:bb:2f:9b:d0:f9:45:70:c4:ad:48:12:43:
7c:da:bb:87:e8:d1:2f:cb:04:eb:5b:e8:bd:75:ec:
c0:bf:a0:0a:be:68:33:4d:5f:9c:47:cf:59:72:dc:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:27:C8:BF:EC:D9:89:B3:18:3C:DF:73:61:3A:53:93:46:EC:E2
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:2c:86:4b:81:07:d3:ce:9d:4c:8b:a2:6e:33:a0:22:d9:
35:f0:4e:17:0a:05:b6:0f:b3:3a:b3:d4:7c:ef:88:81:2a:24:
82:2d:0a:b4:21:66:13:e2:c9:e0:95:1b:0c:b3:dd:b2:1d:1f:
5b:8a:95:bf:7b:7d:2c:23:57:64:44:17:73:89:4d:8d:84:cd:
c4:12:9e:1c:cb:52:61:32:5d:7f:39:11:75:7f:c5:a9:35:84:
0b:98:5e:1f:4b:6c:0c:9e:a9:bf:89:bc:6c:46:fd:1a:44:6a:
97:77:e6:89:f8:53:83:bf:82:a9:7a:a7:03:5e:df:b4:d7:ad:
ee:ee:06:43:ee:5c:f3:34:f7:6a:3a:d5:49:e4:09:f3:41:51:
05:9c:cd:ab:a8:ef:e7:6a:be:df:37:dc:16:15:02:6a:d3:2e:
ba:b4:a7:e4:9c:5e:fb:8f:fe:81:6a:2e:79:d6:4a:bb:22:1c:
50:d0:ee:18:92:6d:88:f5:cc:81:ce:31:7e:71:4b:22:78:26:
f5:20:84:00:a1:04:32:dd:c1:5e:11:01:28:06:d0:d3:dc:1e:
84:41:e6:17:0b:ab:d7:ed:23:26:5c:9d:27:16:cc:de:d1:18:
f7:7c:46:87:9d:bd:8a:ba:65:26:7c:d0:ec:fd:a4:00:ac:c3:
61:04:1e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfSTf4KM6GZQxVZBCr87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy
M2U1YmYwHhcNMjUwMTMxMTAwMDI0WhcNMjUwMjAxMTAwMDI0WjAzMTEwLwYDVQQD
EyhlN2Q4MjdjOGJmZWNkOTg5YjMxODNjZGY3MzYxM2E1MzkzNDZlY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQonfkAud49z+AybYbWfrnIS2PUs
RddSD8dNHlQpOtnb7YckCYzteoKt28fxK8O3+IZwJ0zrbxFCKNNK8TH63Nru8RTV
s30rdwsNoodO2OI/KoGFSk63wrjWubYCsxxGwymrdm+enBI2swQmd5X3Ni7keArX
LZzwEtaNTyfMLWVmPxOL1i4EUBVd6bEenjCC+8iwo8cOYbX3esKJdRYbFFeZzTF2
QPUKB79ZGowUlafpOEwvjhSrtmDA7NGl/WFk1xhu9eeoZnRgjoR0yhq7enio7HC7
L5vQ+UVwxK1IEkN82ruH6NEvywTrW+i9dezAv6AKvmgzTV+cR89ZctxC4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfYJ8i/7NmJsxg833NhOlOTRuziMB8GA1UdIwQY
MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct
YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk
LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUMshkuB
B9POnUyLom4zoCLZNfBOFwoFtg+zOrPUfO+IgSokgi0KtCFmE+LJ4JUbDLPdsh0f
W4qVv3t9LCNXZEQXc4lNjYTNxBKeHMtSYTJdfzkRdX/FqTWEC5heH0tsDJ6pv4m8
bEb9GkRql3fmifhTg7+CqXqnA17ftNet7u4GQ+5c8zT3ajrVSeQJ80FRBZzNq6jv
52q+3zfcFhUCatMuurSn5Jxe+4/+gWouedZKuyIcUNDuGJJtiPXMgc4xfnFLIngm
9SCEAKEEMt3BXhEBKAbQ09wehEHmFwur1+0jJlydJxbM3tEY93xGh529irplJnzQ
7P2kAKzDYQQeTw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:25 2025 by rpki-client