Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: Nd0VgKYtvaF64wPLisXHNEgwQyE2Ps4RHkIksDyBnDM=
Subject key identifier: E7:85:45:27:B4:76:20:1A:5A:54:B5:87:D9:E1:A9:6E:8B:52:A8:55
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 0194BC3BD6CBFA440A1C72328034D628C474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0961
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: lRPB1bPpRDLrlGzkcCetLDkvLgLLDI8cIOvX/zD3TwQ=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d6:cb:fa:44:0a:1c:72:32:80:34:d6:28:c4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=e7854527b476201a5a54b587d9e1a96e8b52a855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:bf:de:d1:3b:94:f5:d0:38:39:a4:01:1a:
9c:a5:b9:28:b7:d7:a7:24:e4:fd:19:ed:fc:a1:54:
c2:8f:d5:ed:c1:69:a4:26:64:73:66:fa:4a:83:11:
f4:d0:51:c2:7a:65:eb:f8:0e:8f:0f:f9:67:22:61:
dc:92:76:07:89:19:86:d2:4f:fc:c4:74:53:a4:89:
76:a0:fb:b4:15:b0:a8:e7:4d:5f:c0:3a:f6:62:3f:
f1:0d:36:49:7a:a0:61:83:20:68:02:2f:3e:38:f1:
c9:e9:53:6e:c5:f8:8a:66:3a:b3:21:d9:ef:aa:ee:
10:aa:32:6c:39:73:e8:b4:b6:a8:3a:56:57:e2:ee:
a1:9b:28:19:fe:ac:94:65:c4:06:af:51:10:84:21:
c3:1e:68:ab:76:b9:0a:77:16:f2:97:d4:95:98:73:
63:8e:11:f7:ee:95:56:a7:ea:f2:d4:27:5e:15:88:
e3:08:94:50:2b:22:c0:a3:b9:73:dd:85:38:42:bf:
ab:85:85:ed:1e:b3:d4:ea:05:9c:5d:c0:4f:8d:44:
01:04:85:03:75:19:3a:63:b4:49:7e:02:e1:77:3c:
28:f3:0a:0d:d1:c7:cd:12:b4:97:de:d3:c3:b6:d3:
e8:ef:c7:55:b5:15:ca:ff:c0:33:a9:b2:1c:be:7b:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:45:27:B4:76:20:1A:5A:54:B5:87:D9:E1:A9:6E:8B:52:A8:55
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:20:36:9f:57:9d:e3:a2:83:ed:cd:ba:8b:6b:c7:b0:df:a4:
1a:97:a1:38:71:6f:d8:80:02:81:67:a1:8d:56:fd:79:51:8f:
51:54:d3:d8:e9:44:ae:0d:03:3f:a2:9e:fc:ab:12:d7:1b:42:
be:a5:0c:e3:9a:b9:7e:4f:16:77:07:36:0c:a5:48:16:2c:af:
43:67:64:18:bf:06:7c:b6:05:65:bd:48:16:a1:95:69:12:25:
5c:8f:c8:4a:8e:cb:08:42:ba:77:1d:72:d1:e3:3f:5c:1a:0e:
d1:5b:8d:7e:a4:22:7d:e9:bd:50:5e:62:33:96:d7:4d:8e:99:
33:85:fd:7d:f1:f9:ba:a2:27:55:d8:98:8d:a4:75:aa:0b:9c:
67:32:5e:11:42:f1:6c:7f:6f:40:74:b5:46:62:ad:63:eb:8d:
01:1d:96:c2:24:91:e9:e1:03:8a:3e:dd:e7:c7:5f:03:be:5f:
a8:a1:37:87:c0:62:94:d8:a1:8d:36:5a:62:d4:79:b6:37:8c:
27:b8:9e:b3:df:bf:24:ce:a2:4a:79:4d:95:09:68:9a:43:9d:
4b:be:3e:aa:bb:25:ec:9e:b7:dd:d9:97:00:f5:1e:a4:c3:e8:
32:9e:58:cd:39:71:ee:83:d1:3c:b8:21:fc:09:d4:d2:8a:3b:
54:a1:6a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9bL+kQKHHIygDTWKMR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTFmNTlhOTY3OTcyNzFlMWZkNjY3M2E5YzUzNDI1N2Rh
ODhlNmIwHhcNMjUwMTMxMTIwMDI1WhcNMjUwMjAxMTIwMDI1WjAzMTEwLwYDVQQD
EyhlNzg1NDUyN2I0NzYyMDFhNWE1NGI1ODdkOWUxYTk2ZThiNTJhODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbe/3tE7lPXQODmkARqcpbkot9en
JOT9Ge38oVTCj9XtwWmkJmRzZvpKgxH00FHCemXr+A6PD/lnImHcknYHiRmG0k/8
xHRTpIl2oPu0FbCo501fwDr2Yj/xDTZJeqBhgyBoAi8+OPHJ6VNuxfiKZjqzIdnv
qu4QqjJsOXPotLaoOlZX4u6hmygZ/qyUZcQGr1EQhCHDHmirdrkKdxbyl9SVmHNj
jhH37pVWp+ry1CdeFYjjCJRQKyLAo7lz3YU4Qr+rhYXtHrPU6gWcXcBPjUQBBIUD
dRk6Y7RJfgLhdzwo8woN0cfNErSX3tPDttPo78dVtRXK/8AzqbIcvnuL0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeFRSe0diAaWlS1h9nhqW6LUqhVMB8GA1UdIwQY
MBaAFB6h9ZqWeXJx4f1mc6nFNCV9qI5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAt
N2M0YWZiODhlMmYyLzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmI1MDgtMWZhZC00Mjk5LTg3MjAtN2M0YWZiODhlMmYy
LzEvSHFIMW1wWjVjbkhoX1daenFjVTBKWDJvam1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSA2n1ed
46KD7c26i2vHsN+kGpehOHFv2IACgWehjVb9eVGPUVTT2OlErg0DP6Ke/KsS1xtC
vqUM45q5fk8Wdwc2DKVIFiyvQ2dkGL8GfLYFZb1IFqGVaRIlXI/ISo7LCEK6dx1y
0eM/XBoO0VuNfqQifem9UF5iM5bXTY6ZM4X9ffH5uqInVdiYjaR1qgucZzJeEULx
bH9vQHS1RmKtY+uNAR2WwiSR6eEDij7d58dfA75fqKE3h8BilNihjTZaYtR5tjeM
J7ies9+/JM6iSnlNlQlomkOdS74+qrsl7J633dmXAPUepMPoMp5YzTlx7oPRPLgh
/AnU0oo7VKFqZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:09 2025 by rpki-client