Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.mft
File: Hd6FHVO-ybGff3zuTXphsqiu9CA.mft (raw, json)
Hash identifier: RLrBfaHb5pOApePfBEcjNPGppmIPAP+cOf7AUXulop0=
Subject key identifier: EE:9E:55:D9:84:E2:C0:10:AD:04:9A:F7:6C:2A:8C:D0:FD:93:5C:07
Authority key identifier: 1D:DE:85:1D:53:BE:C9:B1:9F:7F:7C:EE:4D:7A:61:B2:A8:AE:F4:20
Certificate issuer: /CN=1dde851d53bec9b19f7f7cee4d7a61b2a8aef420
Certificate serial: 01936C355069695BF6C20FD2C4236447C901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd6FHVO-ybGff3zuTXphsqiu9CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.mft
Manifest number: 048C
Signing time: Wed 27 Nov 2024 06:00:53 +0000
Manifest this update: Wed 27 Nov 2024 06:00:53 +0000
Manifest next update: Thu 28 Nov 2024 06:00:53 +0000
Files and hashes: 1: Hd6FHVO-ybGff3zuTXphsqiu9CA.crl (hash: 21TIRZI+l4CN98Rdn8T97J7KBveX7LlIJl7omk2vAMM=)
2: UfhYK52CrZvNEw-3-NJSlAnPBvA.roa (hash: 61PN/SOyqbrQkt4OjbbAQb4CJukyxolJxQSA9E2eJ9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:35:50:69:69:5b:f6:c2:0f:d2:c4:23:64:47:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde851d53bec9b19f7f7cee4d7a61b2a8aef420
Validity
Not Before: Nov 27 06:00:53 2024 GMT
Not After : Nov 28 06:00:53 2024 GMT
Subject: CN=ee9e55d984e2c010ad049af76c2a8cd0fd935c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:50:c7:80:86:44:8d:23:54:da:dd:a3:e5:
27:b7:45:5c:da:0d:58:1c:bb:ad:f6:4c:e4:71:05:
55:f1:28:64:57:04:97:fd:eb:7f:ea:10:cb:fa:24:
88:90:04:92:21:1e:a3:3b:96:ac:38:7d:77:84:35:
7a:2a:a4:8f:c6:7a:a8:de:47:e2:38:2f:1f:bc:ca:
1a:86:fc:9c:2f:8e:4a:fe:27:74:82:aa:93:0c:a6:
64:32:b3:8d:49:00:19:5c:c9:6e:1e:f8:89:4c:6f:
99:b5:ca:d5:1b:56:2a:4e:ec:02:da:e7:f1:05:b7:
3f:fd:db:19:7f:0e:9b:a0:ea:7f:7a:4b:f6:0e:48:
2d:e6:09:83:fb:d3:fd:e0:e5:4a:f2:b7:1c:47:45:
32:01:81:7a:b6:3a:9e:6e:03:54:24:58:b0:83:66:
ac:83:16:a0:87:fc:ca:76:0c:35:ef:02:0e:96:92:
bc:a4:eb:9f:97:31:90:e1:b2:4c:ee:6f:1f:66:89:
d4:5c:02:76:df:d0:c9:32:ec:9c:a6:bf:cf:7c:c2:
52:44:ce:f3:fe:bf:e5:f3:f6:eb:ad:17:c7:14:b3:
4a:73:0f:0a:8c:4c:10:b8:a4:71:05:12:e6:18:24:
59:cd:b9:b1:f1:ff:6d:1f:bb:bb:21:00:57:b6:83:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9E:55:D9:84:E2:C0:10:AD:04:9A:F7:6C:2A:8C:D0:FD:93:5C:07
X509v3 Authority Key Identifier:
keyid:1D:DE:85:1D:53:BE:C9:B1:9F:7F:7C:EE:4D:7A:61:B2:A8:AE:F4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd6FHVO-ybGff3zuTXphsqiu9CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5531eb-dc9a-42ad-a5d6-43718f422b1f/1/Hd6FHVO-ybGff3zuTXphsqiu9CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:d6:68:f3:b1:02:1d:05:81:41:7b:09:7f:fa:72:ca:dd:
36:02:cd:37:f2:42:6a:4b:f5:f9:3d:3f:6c:92:98:ea:fe:20:
be:9e:98:7c:b4:b2:49:86:6e:4f:b4:d8:94:0b:4d:d4:11:0e:
9a:86:7f:be:c9:4c:7c:b5:03:5b:f2:35:26:32:9c:d5:f6:eb:
f1:c6:a1:98:bf:45:3a:f9:2a:b0:ac:9e:5a:d1:85:89:d5:ce:
48:5e:4e:c4:b6:cd:1c:94:d1:ce:9c:bb:41:f7:77:f4:94:4c:
8c:3a:a3:9f:cb:3c:1c:cf:d7:ad:79:e9:af:7d:e7:8a:6a:62:
43:58:76:ce:70:ef:05:21:c4:f1:42:04:ca:b8:51:2f:5f:38:
ad:03:3f:28:95:35:3d:b1:1b:a9:6d:d6:e4:3c:92:12:0f:59:
e3:44:e5:df:41:fc:d2:e4:46:1c:1b:fe:ca:f4:23:32:4e:90:
58:b2:a7:60:8f:84:87:3c:64:3f:b7:20:88:ce:91:1c:29:f9:
75:cd:cf:58:51:3a:5e:08:de:2d:f7:c8:36:8e:24:cd:08:ef:
2c:47:ad:17:e9:f9:74:0f:01:1a:31:9f:e9:50:39:fa:48:cc:
a7:22:73:22:c2:c1:b4:9b:87:48:e2:76:12:ff:25:ce:ba:6e:
c3:74:54:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNsNVBpaVv2wg/SxCNkR8kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU4NTFkNTNiZWM5YjE5ZjdmN2NlZTRkN2E2MWIyYThh
ZWY0MjAwHhcNMjQxMTI3MDYwMDUzWhcNMjQxMTI4MDYwMDUzWjAzMTEwLwYDVQQD
EyhlZTllNTVkOTg0ZTJjMDEwYWQwNDlhZjc2YzJhOGNkMGZkOTM1YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxpQx4CGRI0jVNrdo+Unt0Vc2g1Y
HLut9kzkcQVV8ShkVwSX/et/6hDL+iSIkASSIR6jO5asOH13hDV6KqSPxnqo3kfi
OC8fvMoahvycL45K/id0gqqTDKZkMrONSQAZXMluHviJTG+ZtcrVG1YqTuwC2ufx
Bbc//dsZfw6boOp/ekv2Dkgt5gmD+9P94OVK8rccR0UyAYF6tjqebgNUJFiwg2as
gxagh/zKdgw17wIOlpK8pOuflzGQ4bJM7m8fZonUXAJ239DJMuycpr/PfMJSRM7z
/r/l8/brrRfHFLNKcw8KjEwQuKRxBRLmGCRZzbmx8f9tH7u7IQBXtoM10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6eVdmE4sAQrQSa92wqjND9k1wHMB8GA1UdIwQY
MBaAFB3ehR1Tvsmxn3987k16YbKorvQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ2RkhWTy15YkdmZjN6dVRYcGhzcWl1OUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81NTMxZWItZGM5YS00MmFkLWE1ZDYt
NDM3MThmNDIyYjFmLzEvSGQ2RkhWTy15YkdmZjN6dVRYcGhzcWl1OUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81NTMxZWItZGM5YS00MmFkLWE1ZDYtNDM3MThmNDIyYjFm
LzEvSGQ2RkhWTy15YkdmZjN6dVRYcGhzcWl1OUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrjWaPOx
Ah0FgUF7CX/6csrdNgLNN/JCakv1+T0/bJKY6v4gvp6YfLSySYZuT7TYlAtN1BEO
moZ/vslMfLUDW/I1JjKc1fbr8cahmL9FOvkqsKyeWtGFidXOSF5OxLbNHJTRzpy7
Qfd39JRMjDqjn8s8HM/XrXnpr33nimpiQ1h2znDvBSHE8UIEyrhRL184rQM/KJU1
PbEbqW3W5DySEg9Z40Tl30H80uRGHBv+yvQjMk6QWLKnYI+EhzxkP7cgiM6RHCn5
dc3PWFE6XgjeLffINo4kzQjvLEetF+n5dA8BGjGf6VA5+kjMpyJzIsLBtJuHSOJ2
Ev8lzrpuw3RUxw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:32:02 2025 by rpki-client