Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: nkYy9GZnpD6gXVhwMCmGXJQqwKAMOKf0aGNKXYMMPnM=
Subject key identifier: 09:EE:6F:7A:F3:B4:65:E3:DD:D9:25:02:EA:12:44:78:85:DD:09:A8
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0194BC04E0287227954498319462955DF6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: hc2Ip1pbdIySZK6YvtyU+HLllBh1H+ZH98M5zAZdFjU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:28:72:27:95:44:98:31:94:62:95:5d:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=09ee6f7af3b465e3ddd92502ea12447885dd09a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:41:b0:7e:86:2e:68:ac:8a:80:8b:c8:5f:
ce:c1:b2:0e:e9:bd:73:bf:7a:f2:1f:98:30:d6:d9:
52:dc:e8:85:c1:df:aa:92:74:81:7f:ff:19:46:d8:
83:ae:97:cd:33:cf:1b:2a:b1:81:a9:53:14:3f:f8:
4e:45:ed:a4:d2:a2:67:d0:79:db:45:a7:d3:50:3d:
40:b9:23:ac:be:9b:24:d2:86:a7:c8:9a:38:0a:ee:
d7:f0:56:0c:bf:20:2e:99:03:cf:33:24:b2:d9:16:
fe:75:ff:3d:64:8d:a0:ab:4a:ca:5c:9e:3f:ee:14:
cc:0c:2c:50:5e:f2:b1:d0:17:aa:ea:ce:28:c1:80:
b6:c6:0a:c1:14:6a:ae:6a:f2:70:46:84:5b:de:e8:
72:ca:e2:40:6e:b2:37:17:a3:13:25:36:c5:8f:fd:
e9:93:d5:45:fa:97:63:7d:28:3b:ca:d9:7d:65:55:
f4:b2:e7:67:af:ac:5b:cd:1d:dc:cd:4c:7e:6f:a4:
e5:38:80:6a:dc:36:8a:ed:26:4d:41:8b:3a:07:88:
48:b0:04:f4:d6:5c:9a:d2:e7:b1:06:87:32:8f:24:
76:bc:b7:10:8f:a9:5c:17:1d:d2:fb:76:b9:be:57:
0b:bf:f0:dc:d0:78:ed:68:7e:99:b0:32:9f:b6:ab:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:6F:7A:F3:B4:65:E3:DD:D9:25:02:EA:12:44:78:85:DD:09:A8
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:41:8c:4c:ea:8c:0a:5a:e5:66:d7:4e:f5:88:38:b7:76:
5a:67:d7:1c:6d:ad:2e:46:d7:12:56:df:74:85:46:80:fc:fb:
99:56:3c:48:85:5d:64:48:71:00:ba:f5:1e:aa:99:b3:21:12:
5d:41:e5:a9:a2:4e:e5:a6:ff:7f:da:cc:07:cc:c8:ec:03:10:
66:ee:53:43:a6:56:e0:24:f6:83:ed:aa:ac:ac:e3:31:27:fb:
de:99:8e:90:73:27:2d:b9:2d:54:e0:de:a7:72:a3:6e:bd:59:
e4:2a:41:99:b4:2f:22:66:e8:1e:73:92:0f:b2:0c:a7:bf:50:
81:b1:7b:d6:98:cf:3b:2e:8b:5d:4e:d9:d3:6d:11:8b:93:92:
2f:8c:1b:54:f0:f2:3f:af:86:91:f5:fa:bc:a7:59:9d:61:87:
92:d5:d9:2c:9e:ad:81:1e:ae:5e:3f:c3:af:8a:52:c0:05:9e:
60:18:05:38:0e:d1:5a:d1:d9:7a:07:27:44:a8:cd:cf:f3:f5:
63:1f:a5:d6:49:3c:11:97:bd:8c:32:34:9a:e5:b5:43:b8:61:
ea:9b:83:b5:ec:71:b4:e5:a9:20:d1:88:1a:4e:6e:49:99:09:
c2:c3:59:21:83:a9:25:45:62:f0:79:be:0d:8d:ad:c1:0f:53:
5f:71:bd:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOAocieVRJgxlGKVXfbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjdjZjFjYTJkZWEzMmZjZDk3MDJkZDI1MTBlYjZiZjJi
Njg2MTAwHhcNMjUwMTMxMTEwMDIzWhcNMjUwMjAxMTEwMDIzWjAzMTEwLwYDVQQD
EygwOWVlNmY3YWYzYjQ2NWUzZGRkOTI1MDJlYTEyNDQ3ODg1ZGQwOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRFBsH6GLmisioCLyF/OwbIO6b1z
v3ryH5gw1tlS3OiFwd+qknSBf/8ZRtiDrpfNM88bKrGBqVMUP/hORe2k0qJn0Hnb
RafTUD1AuSOsvpsk0oanyJo4Cu7X8FYMvyAumQPPMySy2Rb+df89ZI2gq0rKXJ4/
7hTMDCxQXvKx0Beq6s4owYC2xgrBFGquavJwRoRb3uhyyuJAbrI3F6MTJTbFj/3p
k9VF+pdjfSg7ytl9ZVX0sudnr6xbzR3czUx+b6TlOIBq3DaK7SZNQYs6B4hIsAT0
1lya0uexBocyjyR2vLcQj6lcFx3S+3a5vlcLv/Dc0HjtaH6ZsDKftqvLzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnub3rztGXj3dklAuoSRHiF3QmoMB8GA1UdIwQY
MBaAFB9nzxyi3qMvzZcC3SUQ62vytoYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUt
YmFkYmU4NDA5NzdlLzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zY2I0ZDYtZjMyYy00MTMwLWFlMGUtYmFkYmU4NDA5Nzdl
LzEvSDJmUEhLTGVveV9ObHdMZEpSRHJhX0syaGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIdBjEzq
jApa5WbXTvWIOLd2WmfXHG2tLkbXElbfdIVGgPz7mVY8SIVdZEhxALr1HqqZsyES
XUHlqaJO5ab/f9rMB8zI7AMQZu5TQ6ZW4CT2g+2qrKzjMSf73pmOkHMnLbktVODe
p3Kjbr1Z5CpBmbQvImboHnOSD7IMp79QgbF71pjPOy6LXU7Z020Ri5OSL4wbVPDy
P6+GkfX6vKdZnWGHktXZLJ6tgR6uXj/Dr4pSwAWeYBgFOA7RWtHZegcnRKjNz/P1
Yx+l1kk8EZe9jDI0muW1Q7hh6puDtexxtOWpINGIGk5uSZkJwsNZIYOpJUVi8Hm+
DY2twQ9TX3G9Nw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:37 2025 by rpki-client