Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json)
Hash identifier: ElryGX9gXfWByAjdqKinDvDhi67egGhKtV+5+yjFK7Q=
Subject key identifier: 7B:E9:98:18:E0:00:A0:BA:4A:E5:0F:E3:47:AA:D2:BD:72:F7:DF:0B
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 0194BC04E7B4A6C6A360FA70A08946066B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
Manifest number: 0510
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=)
2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: qsQ607u0i0PXkFXUk0jEcwK3I5wCDijjhKgoHu3KM6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:b4:a6:c6:a3:60:fa:70:a0:89:46:06:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=7be99818e000a0ba4ae50fe347aad2bd72f7df0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:53:5b:09:d5:23:86:37:47:94:05:cc:9a:
d9:46:6d:8c:53:a8:87:80:44:8b:52:c2:91:1a:a6:
04:62:de:d5:91:fc:82:71:22:ee:4c:cf:9a:ab:25:
31:8b:ab:b9:56:01:c5:f6:2c:51:a7:b4:0a:e5:65:
fd:7c:13:8f:37:da:20:86:63:31:82:28:8b:54:ec:
42:df:60:bc:8f:20:d8:a8:dc:d8:a3:d9:00:4c:8c:
37:80:33:b7:40:fa:c4:1a:4b:8f:1d:5e:d8:66:73:
b2:f7:16:62:41:7d:26:ee:97:bb:9e:91:fe:a6:54:
49:18:e5:f7:ae:55:87:11:c7:71:2f:9a:41:4f:20:
6a:8e:d9:21:dc:96:f1:e4:a9:c8:d3:8d:5f:3e:3f:
ce:98:47:81:fd:8d:f1:01:1a:c2:bc:30:33:d8:6c:
a7:bc:28:1f:c4:4e:b5:04:c5:62:e5:11:31:7b:72:
93:9b:a6:d4:e8:ea:5c:dd:b2:16:b6:33:3e:74:55:
ce:50:e0:6f:1a:28:16:02:5d:95:91:62:2f:ef:5d:
94:24:16:aa:8e:aa:fb:d3:3c:a3:7e:b0:c7:9e:7f:
92:3e:fc:43:9d:71:f2:5c:43:0d:03:c8:20:d2:30:
01:cb:de:ca:2c:e5:d6:3e:07:99:b4:b6:a6:f0:fa:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E9:98:18:E0:00:A0:BA:4A:E5:0F:E3:47:AA:D2:BD:72:F7:DF:0B
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:7b:5c:48:85:88:8b:9b:b4:5a:6b:b4:24:7a:f4:e0:69:
a5:35:54:07:f9:b1:94:d6:7b:26:79:b8:50:75:37:bf:e2:e8:
19:f5:e3:6d:e9:1d:9a:ff:41:34:de:be:06:62:c1:96:6f:9a:
2d:57:50:dc:eb:b9:a8:b5:7b:75:12:dc:85:17:a8:54:a4:e4:
0a:3b:37:05:51:be:69:62:90:20:13:e8:74:5d:3d:90:26:81:
d8:05:58:ad:69:86:a6:0e:26:e0:49:ed:fa:88:6d:ce:b3:fc:
c5:c9:24:ef:ad:46:56:b8:c6:90:64:a6:26:bc:32:8b:4a:aa:
7f:e4:c3:30:7c:d7:9c:82:15:ad:88:62:25:42:9b:b1:98:c4:
d8:56:77:d4:27:1c:d9:4e:12:51:cd:c1:ac:34:e8:5b:68:20:
1e:a2:78:90:69:b1:30:d1:44:fb:c7:ca:a8:c7:8a:f1:7f:c3:
17:18:0e:89:f7:f0:3c:b2:a5:f6:13:75:a6:88:9a:c3:b7:c3:
54:d4:e8:4d:69:62:25:af:c8:85:e1:88:d0:99:52:57:d5:9b:
67:e6:c3:1f:00:af:22:6d:7b:07:7b:76:87:66:75:24:4d:b1:
63:c3:38:45:58:ed:a9:5c:42:4d:ad:33:5c:0c:94:81:48:0e:
12:33:1b:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOe0psajYPpwoIlGBms4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl
ZTExZTMwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
Eyg3YmU5OTgxOGUwMDBhMGJhNGFlNTBmZTM0N2FhZDJiZDcyZjdkZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5RTWwnVI4Y3R5QFzJrZRm2MU6iH
gESLUsKRGqYEYt7VkfyCcSLuTM+aqyUxi6u5VgHF9ixRp7QK5WX9fBOPN9oghmMx
giiLVOxC32C8jyDYqNzYo9kATIw3gDO3QPrEGkuPHV7YZnOy9xZiQX0m7pe7npH+
plRJGOX3rlWHEcdxL5pBTyBqjtkh3Jbx5KnI041fPj/OmEeB/Y3xARrCvDAz2Gyn
vCgfxE61BMVi5RExe3KTm6bU6Opc3bIWtjM+dFXOUOBvGigWAl2VkWIv712UJBaq
jqr70zyjfrDHnn+SPvxDnXHyXEMNA8gg0jABy97KLOXWPgeZtLam8PrmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvpmBjgAKC6SuUP40eq0r1y998LMB8GA1UdIwQY
MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt
ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1
LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEp7XEiF
iIubtFprtCR69OBppTVUB/mxlNZ7Jnm4UHU3v+LoGfXjbekdmv9BNN6+BmLBlm+a
LVdQ3Ou5qLV7dRLchReoVKTkCjs3BVG+aWKQIBPodF09kCaB2AVYrWmGpg4m4Ent
+ohtzrP8xckk761GVrjGkGSmJrwyi0qqf+TDMHzXnIIVrYhiJUKbsZjE2FZ31Ccc
2U4SUc3BrDToW2ggHqJ4kGmxMNFE+8fKqMeK8X/DFxgOiffwPLKl9hN1poiaw7fD
VNToTWliJa/IheGI0JlSV9WbZ+bDHwCvIm17B3t2h2Z1JE2xY8M4RVjtqVxCTa0z
XAyUgUgOEjMbWw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:58 2025 by rpki-client