Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69b7c4-e423-4bfc-ba4b-8ef709de2d64/1/HPoACq4LHA_NOZiRS7dt_HLoc1g.mft
File: HPoACq4LHA_NOZiRS7dt_HLoc1g.mft (raw, json)
Hash identifier: uudDCncxaNN8YCPusTSnHFqCFWtWFHABKeS1otqTlQA=
Subject key identifier: 96:2E:8B:C2:5E:DC:CB:A7:6C:11:34:7F:E4:C6:98:CA:1F:7F:43:D6
Authority key identifier: 1C:FA:00:0A:AE:0B:1C:0F:CD:39:98:91:4B:B7:6D:FC:72:E8:73:58
Certificate issuer: /CN=1cfa000aae0b1c0fcd3998914bb76dfc72e87358
Certificate serial: 0194BCE0AAF29AC39720A21A5CA30BD0B8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPoACq4LHA_NOZiRS7dt_HLoc1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69b7c4-e423-4bfc-ba4b-8ef709de2d64/1/HPoACq4LHA_NOZiRS7dt_HLoc1g.mft
Manifest number: 0101
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: HPoACq4LHA_NOZiRS7dt_HLoc1g.crl (hash: EpQXAqkV1anFcIHW7VVqJ7AlOaCw9mlH4RXuDri5i8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:f2:9a:c3:97:20:a2:1a:5c:a3:0b:d0:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfa000aae0b1c0fcd3998914bb76dfc72e87358
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=962e8bc25edccba76c11347fe4c698ca1f7f43d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:23:d5:b4:16:4c:55:26:62:d1:8a:20:33:
1f:a4:4c:1e:4f:d7:b2:b3:59:63:3b:eb:55:7f:f0:
e0:23:ae:c5:da:bd:29:b8:71:1e:4a:03:ef:ed:2b:
93:8a:16:af:17:00:bc:10:69:5c:b2:98:cc:eb:bb:
59:ca:42:8c:ac:23:a7:a4:56:a8:f6:ad:f3:91:28:
45:15:82:7a:25:4a:96:ef:fe:7c:22:d4:52:c2:52:
99:5b:9d:2d:de:f5:1b:ae:64:3f:44:85:eb:5c:1a:
6f:f1:8b:b8:5d:f7:67:49:fb:ef:8c:24:4e:5a:9b:
60:3b:af:44:5d:b8:04:99:13:54:71:c9:6f:cb:af:
42:a0:fe:61:b2:61:e7:cf:02:3f:00:50:d1:dd:74:
ef:e9:bc:2e:8a:ba:af:b9:9e:b5:53:f4:81:4b:e3:
3c:55:e8:b8:d6:e4:15:dc:d9:56:04:62:2f:43:74:
ad:96:12:c8:6a:18:3f:ce:7c:5f:b7:79:43:f4:a1:
39:a2:a3:d6:7d:12:f0:a8:e3:37:94:56:5f:d5:cd:
23:53:b9:8e:c6:01:20:08:4d:4c:73:03:a7:69:eb:
a3:6a:b5:a6:bb:23:ea:76:5c:ec:33:b3:8c:df:be:
73:ad:16:e3:99:51:3c:b6:1c:0c:a6:fd:21:1f:41:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:8B:C2:5E:DC:CB:A7:6C:11:34:7F:E4:C6:98:CA:1F:7F:43:D6
X509v3 Authority Key Identifier:
keyid:1C:FA:00:0A:AE:0B:1C:0F:CD:39:98:91:4B:B7:6D:FC:72:E8:73:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPoACq4LHA_NOZiRS7dt_HLoc1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69b7c4-e423-4bfc-ba4b-8ef709de2d64/1/HPoACq4LHA_NOZiRS7dt_HLoc1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69b7c4-e423-4bfc-ba4b-8ef709de2d64/1/HPoACq4LHA_NOZiRS7dt_HLoc1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4d:0c:e4:a1:ef:bd:3f:7a:9d:12:af:c7:aa:29:30:64:b5:
d8:82:4d:b5:b1:26:7f:6a:c4:87:d8:a0:89:5c:0d:15:88:d1:
e7:25:b6:40:0f:42:79:ac:63:00:8a:3b:bb:ec:5c:88:4f:48:
34:b4:82:b9:11:29:9b:04:d0:f1:79:51:d3:d9:d0:fa:62:20:
38:a0:b5:44:2b:7f:ae:fa:aa:28:8d:c0:0c:ca:4f:3a:fd:27:
20:6f:ab:87:05:2a:6e:36:64:a4:78:fd:1e:8f:47:7a:eb:0f:
99:a0:b5:aa:e3:76:87:59:bf:f2:ad:34:ae:c1:92:90:9c:94:
6a:45:ce:f8:b7:01:7c:f4:79:64:82:81:62:ee:c8:ec:a7:bc:
33:02:0e:38:55:51:75:8f:23:60:4a:79:fe:67:1d:ee:d5:82:
62:fd:e5:c7:eb:46:e8:84:f8:85:64:cd:6a:19:dd:6f:3d:4e:
b7:50:dc:3f:f9:8b:72:38:57:9d:c3:13:63:f9:59:a9:f2:f3:
ef:38:89:2e:29:c1:8d:01:06:0a:21:c0:52:7a:0c:be:fd:6e:
a3:7d:82:b7:30:f7:72:65:e7:ac:3b:ad:9d:97:9f:e0:51:ab:
ee:83:2b:b1:84:f6:3b:c8:64:3f:7a:af:c4:b1:26:23:08:5b:
cf:80:2d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KrymsOXIKIaXKML0LjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZmEwMDBhYWUwYjFjMGZjZDM5OTg5MTRiYjc2ZGZjNzJl
ODczNTgwHhcNMjUwMTMxMTUwMDI3WhcNMjUwMjAxMTUwMDI3WjAzMTEwLwYDVQQD
Eyg5NjJlOGJjMjVlZGNjYmE3NmMxMTM0N2ZlNGM2OThjYTFmN2Y0M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zkj1bQWTFUmYtGKIDMfpEweT9ey
s1ljO+tVf/DgI67F2r0puHEeSgPv7SuTihavFwC8EGlcspjM67tZykKMrCOnpFao
9q3zkShFFYJ6JUqW7/58ItRSwlKZW50t3vUbrmQ/RIXrXBpv8Yu4XfdnSfvvjCRO
WptgO69EXbgEmRNUcclvy69CoP5hsmHnzwI/AFDR3XTv6bwuirqvuZ61U/SBS+M8
Vei41uQV3NlWBGIvQ3StlhLIahg/znxft3lD9KE5oqPWfRLwqOM3lFZf1c0jU7mO
xgEgCE1McwOnaeujarWmuyPqdlzsM7OM375zrRbjmVE8thwMpv0hH0EcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYui8Je3MunbBE0f+TGmMoff0PWMB8GA1UdIwQY
MBaAFBz6AAquCxwPzTmYkUu3bfxy6HNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBvQUNxNExIQV9OT1ppUlM3ZHRfSExvYzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82OWI3YzQtZTQyMy00YmZjLWJhNGIt
OGVmNzA5ZGUyZDY0LzEvSFBvQUNxNExIQV9OT1ppUlM3ZHRfSExvYzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82OWI3YzQtZTQyMy00YmZjLWJhNGItOGVmNzA5ZGUyZDY0
LzEvSFBvQUNxNExIQV9OT1ppUlM3ZHRfSExvYzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN00M5KHv
vT96nRKvx6opMGS12IJNtbEmf2rEh9igiVwNFYjR5yW2QA9CeaxjAIo7u+xciE9I
NLSCuREpmwTQ8XlR09nQ+mIgOKC1RCt/rvqqKI3ADMpPOv0nIG+rhwUqbjZkpHj9
Ho9HeusPmaC1quN2h1m/8q00rsGSkJyUakXO+LcBfPR5ZIKBYu7I7Ke8MwIOOFVR
dY8jYEp5/mcd7tWCYv3lx+tG6IT4hWTNahndbz1Ot1DcP/mLcjhXncMTY/lZqfLz
7ziJLinBjQEGCiHAUnoMvv1uo32CtzD3cmXnrDutnZef4FGr7oMrsYT2O8hkP3qv
xLEmIwhbz4AtQw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:51 2025 by rpki-client