Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: d2UC5v0dah6qIL/w9htP7ZE/S3dVp1Z0v8f7KO5yyXU=
Subject key identifier: 07:52:7D:30:A6:86:1B:0F:EE:E3:AC:7E:89:D9:F6:1F:7D:AF:68:26
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 0195E046E2738B97B5FAE93F852C19071C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 1156
Signing time: Sat 29 Mar 2025 05:01:36 +0000
Manifest this update: Sat 29 Mar 2025 05:01:36 +0000
Manifest next update: Sun 30 Mar 2025 05:01:36 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 9GTG2RTL9CO4OGj2VZEvfOeWzaqPam1uYQF04Zm5x+Y=)
2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:e2:73:8b:97:b5:fa:e9:3f:85:2c:19:07:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Mar 29 05:01:36 2025 GMT
Not After : Mar 30 05:01:36 2025 GMT
Subject: CN=07527d30a6861b0feee3ac7e89d9f61f7daf6826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:94:a7:6c:df:9d:00:ed:a5:da:27:a6:c2:
30:99:bc:a5:54:d9:36:d1:ff:7c:23:45:d2:3b:9b:
26:a3:88:c3:ca:00:9a:da:aa:49:ce:a0:f7:da:b2:
37:ef:57:09:1b:eb:df:12:16:66:28:8f:72:2c:bc:
91:4c:5c:69:01:c2:3a:b5:b6:27:f7:e3:4e:d2:93:
f0:eb:bf:1b:8d:8c:81:d1:59:e4:b3:7a:93:68:99:
6a:35:52:35:4c:9f:5f:cc:87:4b:ad:c6:53:f8:82:
c3:cc:ed:af:88:8b:8d:63:40:70:b2:aa:58:c7:e6:
ab:77:68:5b:f8:45:d1:a0:a3:fd:69:7a:57:cf:50:
0a:9d:f9:2f:b7:da:e3:64:29:85:1e:cd:75:58:3d:
18:9c:fa:06:f7:c7:2a:ab:5d:14:3d:12:b2:09:c9:
fb:2a:09:57:88:16:db:82:55:a6:7a:19:5d:a6:55:
c0:7b:31:33:e8:56:05:a3:e2:93:c5:91:e8:bd:8c:
db:ad:1e:b1:fb:6d:0f:ff:78:09:c3:1a:84:64:53:
57:97:10:81:33:0e:aa:5c:c9:29:5c:20:8e:2a:c4:
dd:0c:a7:fc:f6:f2:e9:49:c9:f9:9a:b1:51:aa:e9:
36:bb:b1:12:8d:74:64:47:6a:83:27:cd:5e:03:b6:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:7D:30:A6:86:1B:0F:EE:E3:AC:7E:89:D9:F6:1F:7D:AF:68:26
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:97:1a:21:32:e4:00:1c:46:72:05:c3:9c:b1:3e:80:ae:2f:
61:b7:ef:c6:0a:4d:b8:d7:11:b7:a3:5d:30:bd:39:50:cd:64:
18:2f:67:8c:27:3e:94:b9:b5:64:da:c6:66:94:7e:62:fc:09:
d3:9b:e2:7d:21:02:aa:ee:79:82:ca:e6:4c:f1:2d:dd:1f:df:
06:14:64:e6:5c:9f:fb:9e:e0:0a:cd:e5:37:40:7e:2f:6b:56:
c8:98:1a:ea:d9:7e:8e:79:0b:6e:67:a9:25:86:a7:64:5e:c6:
cb:da:7f:16:14:f0:a9:7c:68:d5:39:fa:4b:b1:2f:2f:80:8b:
43:4a:c9:09:8c:6b:05:18:bc:40:af:fa:de:46:ec:93:bc:44:
29:da:0e:d0:0f:a7:6c:a2:c4:0b:f5:59:00:bf:9e:ca:e2:12:
94:ce:bf:33:99:e9:92:94:d9:95:f0:9f:45:c8:73:4b:ac:bf:
84:62:fa:0c:e3:25:02:bb:f6:11:c8:26:13:67:8f:0c:14:33:
f5:cc:8e:dd:1b:4e:d9:60:6e:46:51:3b:1f:ca:0e:d8:8d:35:
ba:b6:25:f0:f2:06:96:76:79:5f:4d:2d:5d:27:f8:11:7b:ba:
e4:a9:77:0c:8e:4e:67:b5:e0:38:4a:35:5b:9b:5b:a0:1d:20:
dd:4a:4b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRuJzi5e1+uk/hSwZBxyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0
OTk0MGYwHhcNMjUwMzI5MDUwMTM2WhcNMjUwMzMwMDUwMTM2WjAzMTEwLwYDVQQD
EygwNzUyN2QzMGE2ODYxYjBmZWVlM2FjN2U4OWQ5ZjYxZjdkYWY2ODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF2Up2zfnQDtpdonpsIwmbylVNk2
0f98I0XSO5smo4jDygCa2qpJzqD32rI371cJG+vfEhZmKI9yLLyRTFxpAcI6tbYn
9+NO0pPw678bjYyB0Vnks3qTaJlqNVI1TJ9fzIdLrcZT+ILDzO2viIuNY0BwsqpY
x+ard2hb+EXRoKP9aXpXz1AKnfkvt9rjZCmFHs11WD0YnPoG98cqq10UPRKyCcn7
KglXiBbbglWmehldplXAezEz6FYFo+KTxZHovYzbrR6x+20P/3gJwxqEZFNXlxCB
Mw6qXMkpXCCOKsTdDKf89vLpScn5mrFRquk2u7ESjXRkR2qDJ81eA7ZQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdSfTCmhhsP7uOsfonZ9h99r2gmMB8GA1UdIwQY
MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt
MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh
LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJcaITLk
ABxGcgXDnLE+gK4vYbfvxgpNuNcRt6NdML05UM1kGC9njCc+lLm1ZNrGZpR+YvwJ
05vifSECqu55gsrmTPEt3R/fBhRk5lyf+57gCs3lN0B+L2tWyJga6tl+jnkLbmep
JYanZF7Gy9p/FhTwqXxo1Tn6S7EvL4CLQ0rJCYxrBRi8QK/63kbsk7xEKdoO0A+n
bKLEC/VZAL+eyuISlM6/M5npkpTZlfCfRchzS6y/hGL6DOMlArv2EcgmE2ePDBQz
9cyO3RtO2WBuRlE7H8oO2I01urYl8PIGlnZ5X00tXSf4EXu65Kl3DI5OZ7XgOEo1
W5tboB0g3UpLfA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:36:30 2025 by rpki-client