Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb65e-4718-4020-a791-416a0292da50/1/hmZPNKLvZfJdkwF073UjjHRHdLc.mft
File: hmZPNKLvZfJdkwF073UjjHRHdLc.mft (raw, json)
Hash identifier: 2tXYcJPscu1n4QukzNCTqkxFBM/GOCEttAf/OyBDeQo=
Subject key identifier: 61:A4:9A:BD:D7:42:C2:DF:01:5B:E8:69:6A:E6:99:74:18:0A:0C:4B
Authority key identifier: 86:66:4F:34:A2:EF:65:F2:5D:93:01:74:EF:75:23:8C:74:47:74:B7
Certificate issuer: /CN=86664f34a2ef65f25d930174ef75238c744774b7
Certificate serial: 018E3108D9B2D29E506B4EF2EB890F0E18F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmZPNKLvZfJdkwF073UjjHRHdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb65e-4718-4020-a791-416a0292da50/1/hmZPNKLvZfJdkwF073UjjHRHdLc.mft
Manifest number: 08
Signing time: Tue 12 Mar 2024 05:00:47 +0000
Manifest this update: Tue 12 Mar 2024 05:00:47 +0000
Manifest next update: Wed 13 Mar 2024 05:00:47 +0000
Files and hashes: 1: hmZPNKLvZfJdkwF073UjjHRHdLc.crl (hash: IDjAK4PH4wuAUFlwH1TiPY6ZrK6X3Kn7STpzVVAURAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:08:d9:b2:d2:9e:50:6b:4e:f2:eb:89:0f:0e:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86664f34a2ef65f25d930174ef75238c744774b7
Validity
Not Before: Mar 12 05:00:47 2024 GMT
Not After : Mar 13 05:00:47 2024 GMT
Subject: CN=61a49abdd742c2df015be8696ae69974180a0c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:90:03:35:72:ca:66:7c:d2:9f:0c:f7:c7:
d4:80:a5:77:00:66:88:0b:a6:d8:0d:96:89:93:a8:
ed:17:33:01:cd:72:90:4b:15:34:b3:04:11:22:ca:
ed:b1:23:34:99:12:08:ca:f5:fe:a3:f9:cb:1d:b0:
b3:96:18:3b:5f:06:ca:b3:41:d0:86:e0:66:9a:03:
32:a9:5f:7c:40:9f:d3:a1:56:6a:86:a0:0b:28:0a:
95:fe:b2:77:d2:1a:cd:3c:d1:69:3b:74:75:82:7e:
69:a8:5d:4f:53:56:4a:19:5c:6a:31:9f:74:c1:b9:
b3:dd:d5:7e:e1:70:05:46:12:e8:c1:f0:2f:df:50:
30:21:1a:f5:d5:96:66:11:ed:f7:df:54:a8:2c:38:
26:a5:92:05:80:18:95:70:6c:6e:e5:94:e7:61:99:
0a:f2:14:56:11:65:a9:db:67:5b:f3:20:b9:0a:d2:
c9:8d:33:0e:26:89:c4:da:f1:d4:8c:75:34:35:01:
4d:70:b7:e4:a0:20:3b:66:09:5b:89:06:51:78:d9:
f6:62:5e:51:5c:0c:a8:12:5a:af:53:06:4d:fa:1d:
43:71:5f:f9:91:f8:eb:c0:de:b1:46:51:5d:88:fe:
6f:da:c3:c3:69:30:10:bd:ec:48:3e:a4:dc:39:e5:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:9A:BD:D7:42:C2:DF:01:5B:E8:69:6A:E6:99:74:18:0A:0C:4B
X509v3 Authority Key Identifier:
keyid:86:66:4F:34:A2:EF:65:F2:5D:93:01:74:EF:75:23:8C:74:47:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmZPNKLvZfJdkwF073UjjHRHdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb65e-4718-4020-a791-416a0292da50/1/hmZPNKLvZfJdkwF073UjjHRHdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb65e-4718-4020-a791-416a0292da50/1/hmZPNKLvZfJdkwF073UjjHRHdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:0e:3e:12:68:a9:43:38:24:55:5c:3c:43:4a:f1:b8:3c:
24:9d:ea:02:9e:d9:9f:f0:b3:79:3e:f9:07:9b:82:ca:9f:28:
54:e5:3f:2f:1a:71:dc:d6:df:8d:ff:d9:02:30:21:2f:ba:df:
f0:11:4a:61:1f:1d:14:12:ba:63:cb:cb:bf:21:9a:fd:1e:6c:
a6:65:84:3a:4e:af:ce:bf:9f:23:8a:77:14:e2:1a:09:2a:6b:
7a:05:32:5f:7a:1e:de:63:3d:4c:7f:ee:7f:89:1e:40:70:64:
f5:e9:e4:39:e3:62:c4:48:e2:90:fd:93:37:6d:0b:a5:92:bf:
77:a3:f9:5a:1f:1d:a1:05:3c:3d:3a:3a:ea:a0:e3:3b:fe:98:
13:60:fc:f1:12:07:31:48:46:90:90:35:f6:fd:4f:5c:c2:9d:
a9:0a:19:18:76:23:2f:df:cd:43:8a:a7:57:14:85:7e:68:89:
01:e2:1a:0f:a0:ac:89:60:60:cc:5b:0f:6e:50:17:ef:73:88:
be:1e:4d:a5:25:fd:1c:36:91:8f:d7:7f:1a:d7:0e:32:a5:60:
55:aa:df:67:66:f9:b0:c3:a9:94:e6:1d:94:30:be:c2:bc:39:
09:96:ff:5c:7d:6e:0f:1b:bb:fe:8d:20:2b:50:2a:91:9f:1c:
53:0a:63:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4xCNmy0p5Qa07y64kPDhj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjY0ZjM0YTJlZjY1ZjI1ZDkzMDE3NGVmNzUyMzhjNzQ0
Nzc0YjcwHhcNMjQwMzEyMDUwMDQ3WhcNMjQwMzEzMDUwMDQ3WjAzMTEwLwYDVQQD
Eyg2MWE0OWFiZGQ3NDJjMmRmMDE1YmU4Njk2YWU2OTk3NDE4MGEwYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpyQAzVyymZ80p8M98fUgKV3AGaI
C6bYDZaJk6jtFzMBzXKQSxU0swQRIsrtsSM0mRIIyvX+o/nLHbCzlhg7XwbKs0HQ
huBmmgMyqV98QJ/ToVZqhqALKAqV/rJ30hrNPNFpO3R1gn5pqF1PU1ZKGVxqMZ90
wbmz3dV+4XAFRhLowfAv31AwIRr11ZZmEe3331SoLDgmpZIFgBiVcGxu5ZTnYZkK
8hRWEWWp22db8yC5CtLJjTMOJonE2vHUjHU0NQFNcLfkoCA7ZglbiQZReNn2Yl5R
XAyoElqvUwZN+h1DcV/5kfjrwN6xRlFdiP5v2sPDaTAQvexIPqTcOeV1BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGkmr3XQsLfAVvoaWrmmXQYCgxLMB8GA1UdIwQY
MBaAFIZmTzSi72XyXZMBdO91I4x0R3S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1aUE5LTHZaZkpka3dGMDczVWpqSFJIZExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWI2NWUtNDcxOC00MDIwLWE3OTEt
NDE2YTAyOTJkYTUwLzEvaG1aUE5LTHZaZkpka3dGMDczVWpqSFJIZExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWI2NWUtNDcxOC00MDIwLWE3OTEtNDE2YTAyOTJkYTUw
LzEvaG1aUE5LTHZaZkpka3dGMDczVWpqSFJIZExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2IOPhJo
qUM4JFVcPENK8bg8JJ3qAp7Zn/CzeT75B5uCyp8oVOU/Lxpx3Nbfjf/ZAjAhL7rf
8BFKYR8dFBK6Y8vLvyGa/R5spmWEOk6vzr+fI4p3FOIaCSpregUyX3oe3mM9TH/u
f4keQHBk9enkOeNixEjikP2TN20LpZK/d6P5Wh8doQU8PTo66qDjO/6YE2D88RIH
MUhGkJA19v1PXMKdqQoZGHYjL9/NQ4qnVxSFfmiJAeIaD6CsiWBgzFsPblAX73OI
vh5NpSX9HDaRj9d/GtcOMqVgVarfZ2b5sMOplOYdlDC+wrw5CZb/XH1uDxu7/o0g
K1AqkZ8cUwpjVg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:45:57 2025 by rpki-client