Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: wwHCyqsdy//wf5MF8L8rwY2cPId5ZJqU21fATsZs0Uw=
Subject key identifier: 47:48:D0:52:27:B8:B8:B0:68:E3:96:BE:87:15:13:6F:80:B2:8E:B3
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 0194BBCE2E679993CB0CAB5C901111FA7506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 0D6F
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: xt/xLOpXmh9FMUtHwMpROMgCN3M53/Ug5OCG1rtiXR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:67:99:93:cb:0c:ab:5c:90:11:11:fa:75:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=4748d05227b8b8b068e396be8715136f80b28eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:bb:04:bf:4e:d9:09:92:5a:fc:40:53:d1:
fc:ce:b3:29:3b:fd:99:50:76:fe:1a:a0:f1:e0:fa:
06:87:e8:f4:1c:05:fa:e3:bf:7b:33:e4:83:85:7d:
4a:b2:6e:bc:b0:1f:bc:8e:7e:7b:a0:6b:76:32:dd:
31:88:97:5d:f6:d8:8a:ac:cf:9a:18:8c:de:c8:ad:
31:bb:9c:42:b5:fa:2d:f3:e9:d3:ff:23:8f:bf:7e:
6e:b0:68:db:1b:83:fd:c4:e3:db:db:41:bf:ac:d0:
87:fd:e5:a3:e7:20:70:b0:20:dc:63:3e:5b:2b:d0:
1e:0a:6c:0b:6c:75:2c:20:04:18:03:4d:c5:3e:48:
83:30:c0:8f:68:94:3f:11:60:bb:17:2a:df:96:c1:
d7:94:2f:e2:d7:95:d6:c5:ed:2b:c6:8b:6f:df:49:
9e:43:ac:ac:a8:96:d4:cd:24:91:12:ca:27:35:77:
4b:09:9f:3d:8b:a8:e0:92:d4:e9:6a:fe:95:fa:3d:
8c:75:34:d3:94:eb:39:5e:45:eb:5f:97:fa:16:32:
e0:d4:53:e0:19:97:9a:ec:53:92:56:b6:e9:2e:8c:
53:aa:30:fa:f7:93:d9:90:24:0f:5e:f4:94:c4:6b:
f6:be:4a:e6:69:22:86:7a:04:03:0c:72:6c:d7:2d:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:D0:52:27:B8:B8:B0:68:E3:96:BE:87:15:13:6F:80:B2:8E:B3
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:1d:19:96:e3:19:79:a4:00:46:5c:12:c5:b3:bf:08:d5:21:
92:98:e3:2e:49:43:b2:5b:b9:97:76:60:4d:eb:b3:bf:67:5d:
6d:df:dd:da:ac:c5:5c:73:db:d6:ba:ad:c0:d0:2b:96:87:c4:
1f:92:cc:60:4e:ff:78:23:cf:81:a2:fa:61:c6:7a:ef:68:b1:
33:6d:88:c2:9f:5c:9e:dc:b7:ee:fe:d8:6f:d2:d3:56:7c:af:
e9:e4:e9:88:34:07:06:c6:97:02:0d:a6:e2:71:b0:1b:58:21:
d7:14:b7:87:a8:f8:7b:c6:51:b5:3c:2a:03:c2:b7:15:50:63:
8a:53:56:16:27:3d:1e:9c:60:a4:2f:21:23:98:cb:b1:48:25:
aa:37:19:e8:36:a2:de:81:1b:a6:27:66:e9:22:86:ab:64:c3:
86:4b:50:26:32:1f:64:b5:76:d6:c7:25:6e:40:4f:c1:a4:71:
da:0f:d9:2c:9e:60:0e:d6:e1:41:d2:b1:57:a1:3e:a2:d5:22:
ce:29:be:ec:be:ab:b6:9c:b2:1f:e5:01:60:a0:1f:1c:83:8e:
4d:ab:00:49:26:9d:8b:a6:b3:e5:26:7e:e1:08:1b:79:55:6f:
9d:fb:f2:a4:33:30:54:8d:65:a1:73:e9:3e:59:fe:12:a8:b3:
8a:fc:61:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zi5nmZPLDKtckBER+nUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm
OGJhZGEwHhcNMjUwMTMxMTAwMDM5WhcNMjUwMjAxMTAwMDM5WjAzMTEwLwYDVQQD
Eyg0NzQ4ZDA1MjI3YjhiOGIwNjhlMzk2YmU4NzE1MTM2ZjgwYjI4ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpO7BL9O2QmSWvxAU9H8zrMpO/2Z
UHb+GqDx4PoGh+j0HAX64797M+SDhX1Ksm68sB+8jn57oGt2Mt0xiJdd9tiKrM+a
GIzeyK0xu5xCtfot8+nT/yOPv35usGjbG4P9xOPb20G/rNCH/eWj5yBwsCDcYz5b
K9AeCmwLbHUsIAQYA03FPkiDMMCPaJQ/EWC7FyrflsHXlC/i15XWxe0rxotv30me
Q6ysqJbUzSSREsonNXdLCZ89i6jgktTpav6V+j2MdTTTlOs5XkXrX5f6FjLg1FPg
GZea7FOSVrbpLoxTqjD695PZkCQPXvSUxGv2vkrmaSKGegQDDHJs1y12xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdI0FInuLiwaOOWvocVE2+Aso6zMB8GA1UdIwQY
MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt
MjBiZjI3NWZkMGU3LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEtMjBiZjI3NWZkMGU3
LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzh0ZluMZ
eaQARlwSxbO/CNUhkpjjLklDslu5l3ZgTeuzv2ddbd/d2qzFXHPb1rqtwNArlofE
H5LMYE7/eCPPgaL6YcZ672ixM22Iwp9cnty37v7Yb9LTVnyv6eTpiDQHBsaXAg2m
4nGwG1gh1xS3h6j4e8ZRtTwqA8K3FVBjilNWFic9HpxgpC8hI5jLsUglqjcZ6Dai
3oEbpidm6SKGq2TDhktQJjIfZLV21sclbkBPwaRx2g/ZLJ5gDtbhQdKxV6E+otUi
zim+7L6rtpyyH+UBYKAfHIOOTasASSadi6az5SZ+4QgbeVVvnfvypDMwVI1loXPp
Pln+EqizivxhpA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:04 2025 by rpki-client