Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: ocaDzQcZaDvQ8QhM4ZmaXt4ST1skZOA0IQnoZS7JiEo=
Subject key identifier: 3F:B4:D2:85:84:FB:E7:74:76:8E:D8:43:E4:41:A3:86:03:54:75:2A
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0194BBCEB65CA02925A19579D7D98E43AC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: YoLUfIrUtcv+ob6UmCzuyOhfYfgKMBRYJTlPRXV9I9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:5c:a0:29:25:a1:95:79:d7:d9:8e:43:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=3fb4d28584fbe774768ed843e441a3860354752a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:18:c6:18:4e:f1:55:49:b8:95:24:0c:30:
0a:20:88:55:c7:73:dd:d1:39:f5:0c:e8:c2:15:b6:
51:51:36:26:4f:b5:af:ad:31:08:be:24:6a:22:b8:
38:4d:ac:40:e0:46:f7:a5:d0:09:15:ee:da:8e:85:
39:69:8b:e8:9d:e0:14:3d:3c:35:7d:b5:87:a7:4a:
d7:65:a0:51:79:f8:9e:63:44:fc:c8:6f:1a:e2:95:
1d:5c:fd:7a:c2:af:c0:59:37:11:a0:ee:40:d8:0f:
22:e7:f1:2c:2e:10:a7:78:2b:e6:ca:60:de:df:e5:
a9:ec:45:02:0b:1d:ab:bd:35:cd:fa:7b:bc:e3:4c:
6c:ad:84:01:4f:a5:0e:12:95:e3:f8:64:73:5f:84:
fc:88:ce:4b:69:62:0f:34:9f:f8:3f:71:8c:54:6c:
64:a2:85:fb:a9:f5:0d:1d:04:5a:46:69:b9:37:47:
32:41:88:ca:af:9c:da:bf:4d:d7:b1:26:7d:16:2f:
ec:0b:b5:4b:1c:47:44:d9:8e:75:ab:3c:d9:a8:70:
9d:a9:fe:30:db:5c:a8:10:d0:b9:cc:ca:0c:ec:b4:
c3:0c:76:bd:72:c1:db:c6:60:9e:32:d0:d3:50:b5:
f4:64:bb:e8:97:16:c1:a7:08:6c:a8:33:81:33:79:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B4:D2:85:84:FB:E7:74:76:8E:D8:43:E4:41:A3:86:03:54:75:2A
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1e:a9:6a:d6:8c:d6:b0:bd:6e:c9:81:6c:a8:03:f5:a0:61:
d8:4f:0a:f7:28:73:da:bf:09:cd:be:74:d3:05:12:e9:ac:41:
74:18:4d:5d:8e:08:fc:e0:f4:0e:7f:e2:80:f2:52:1e:66:c8:
5d:09:c9:2e:18:05:28:7f:4c:35:7f:17:ed:8f:70:94:d7:3a:
1f:61:49:09:eb:a8:81:29:ee:16:bf:e1:f6:26:81:84:45:00:
b8:47:d6:9a:11:8c:4a:7c:91:bb:69:ec:43:ca:59:91:cb:a9:
ee:f4:de:8a:f6:ad:27:dd:a8:4e:59:0b:60:88:2e:05:fc:ba:
5f:db:b4:c2:87:b0:87:bd:83:bc:55:f7:8b:a5:e2:5a:b6:af:
7a:fa:e5:7f:81:3b:10:b1:b9:23:a8:71:fe:f0:89:84:1b:5d:
84:cc:0a:12:79:b1:d0:57:32:0e:c7:bd:91:64:b2:2b:66:3a:
d0:8b:eb:79:90:91:63:13:ca:b3:3d:04:ec:2b:c0:93:46:69:
e0:8e:c7:e3:5d:60:59:ef:1f:23:5e:e8:85:67:83:a1:4d:59:
83:bd:b6:b9:26:bc:8e:d5:b8:0d:9c:e7:e2:98:e8:4a:3d:91:
b0:b8:7d:5c:79:25:8d:6b:44:dd:b3:72:e7:4f:b2:91:a4:64:
2d:9c:66:cb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS7zrZcoCkloZV519mOQ6x3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2
N2ZlOTkwHhcNMjUwMTMxMTAwMTEzWhcNMjUwMjAxMTAwMTEzWjAzMTEwLwYDVQQD
EygzZmI0ZDI4NTg0ZmJlNzc0NzY4ZWQ4NDNlNDQxYTM4NjAzNTQ3NTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaYYxhhO8VVJuJUkDDAKIIhVx3Pd
0Tn1DOjCFbZRUTYmT7WvrTEIviRqIrg4TaxA4Eb3pdAJFe7ajoU5aYvoneAUPTw1
fbWHp0rXZaBRefieY0T8yG8a4pUdXP16wq/AWTcRoO5A2A8i5/EsLhCneCvmymDe
3+Wp7EUCCx2rvTXN+nu840xsrYQBT6UOEpXj+GRzX4T8iM5LaWIPNJ/4P3GMVGxk
ooX7qfUNHQRaRmm5N0cyQYjKr5zav03XsSZ9Fi/sC7VLHEdE2Y51qzzZqHCdqf4w
21yoENC5zMoM7LTDDHa9csHbxmCeMtDTULX0ZLvolxbBpwhsqDOBM3m31wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD+00oWE++d0do7YQ+RBo4YDVHUqMB8GA1UdIwQY
MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi
LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz
YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVB6p
ataM1rC9bsmBbKgD9aBh2E8K9yhz2r8Jzb500wUS6axBdBhNXY4I/OD0Dn/igPJS
HmbIXQnJLhgFKH9MNX8X7Y9wlNc6H2FJCeuogSnuFr/h9iaBhEUAuEfWmhGMSnyR
u2nsQ8pZkcup7vTeivatJ92oTlkLYIguBfy6X9u0woewh72DvFX3i6XiWravevrl
f4E7ELG5I6hx/vCJhBtdhMwKEnmx0FcyDse9kWSyK2Y60IvreZCRYxPKsz0E7CvA
k0Zp4I7H411gWe8fI17ohWeDoU1Zg722uSa8jtW4DZzn4pjoSj2RsLh9XHkljWtE
3bNy50+ykaRkLZxmyw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:31 2025 by rpki-client