Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.mft
File: HymGjoSH3LS8cgUWP1a5QAmDZE8.mft (raw, json)
Hash identifier: XkSzzWelx/wAcXpsXa/exaBGCLjbOxygJoa/GlYtPOY=
Subject key identifier: 11:9D:3A:EC:37:37:71:8D:B9:42:C5:4F:B6:15:36:3C:1D:51:E4:01
Authority key identifier: 1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
Certificate issuer: /CN=1f29868e8487dcb4bc7205163f56b9400983644f
Certificate serial: 018E30640FBDE9B17C38F1D7FE70F938F866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.mft
Manifest number: 0EF8
Signing time: Tue 12 Mar 2024 02:00:47 +0000
Manifest this update: Tue 12 Mar 2024 02:00:47 +0000
Manifest next update: Wed 13 Mar 2024 02:00:47 +0000
Files and hashes: 1: HymGjoSH3LS8cgUWP1a5QAmDZE8.crl (hash: ajYe4VaW+J9jGYawcSm8BK/3xVyGv9eK4eMybpPlt0Y=)
2: rHwwS4p3mDe3k3RlKoN7KRAD-ks.roa (hash: +R+/s9k1dxMa5aWYDfQt1b8L7raxUAJF/O4yxOfKP3M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:64:0f:bd:e9:b1:7c:38:f1:d7:fe:70:f9:38:f8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29868e8487dcb4bc7205163f56b9400983644f
Validity
Not Before: Mar 12 02:00:47 2024 GMT
Not After : Mar 13 02:00:47 2024 GMT
Subject: CN=119d3aec3737718db942c54fb615363c1d51e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:63:8b:89:9d:38:5f:89:87:07:f8:77:6e:
5e:a4:bc:14:40:93:22:d4:ec:59:f1:58:e6:b9:44:
72:c2:a8:59:5b:e1:14:a1:bc:81:e3:24:cf:03:a7:
ad:31:38:4b:7e:65:bb:ad:fa:5f:a8:3b:22:fe:1a:
7a:78:8c:d1:97:23:c2:4f:4d:4f:2a:39:ce:fd:cd:
96:f3:9e:18:91:31:af:89:45:7b:77:91:40:df:6b:
a6:2b:26:8c:09:3f:2c:a5:3c:d6:32:ac:bd:1d:ce:
82:b7:a2:0a:9c:22:19:ca:cb:bb:20:e1:af:82:5d:
2a:ef:22:a3:cf:76:6f:3b:b4:8c:6b:dc:a2:d3:00:
9b:a0:34:01:b7:51:06:51:87:5e:56:5d:4f:a6:d7:
1c:3a:af:47:fd:5c:f2:fc:37:a8:d7:af:bd:dc:ca:
89:09:38:35:81:e9:09:85:89:3f:9b:1e:e5:8a:dc:
58:9c:02:77:5e:74:01:72:5a:d8:7c:c4:36:b8:60:
2a:0d:49:f1:f7:29:66:69:4c:51:55:26:49:34:c2:
4e:60:1a:49:e3:46:52:4c:48:1e:bc:45:19:9f:6b:
5d:1c:8d:b3:09:b5:7c:82:3c:53:7f:3c:97:13:6e:
ef:7d:1d:5e:b7:c1:d8:0a:3c:1a:01:02:25:19:42:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:3A:EC:37:37:71:8D:B9:42:C5:4F:B6:15:36:3C:1D:51:E4:01
X509v3 Authority Key Identifier:
keyid:1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:c7:60:dc:80:df:c5:11:29:60:df:7e:79:03:2d:5d:cd:
6f:26:57:73:50:70:aa:11:4b:d8:60:7e:bd:c1:52:60:3e:2c:
72:e1:e6:0b:ba:98:01:a0:d6:8b:73:f1:dd:dc:42:b0:1d:a7:
d7:8f:7b:c8:5e:c0:3c:d3:3d:68:e4:18:71:a5:86:61:4d:1f:
c4:0c:eb:af:80:d0:08:55:f5:ba:db:48:cc:1b:bd:b8:2d:a0:
bc:9e:c8:7b:7d:a6:19:5e:f5:56:08:f7:55:3d:e1:e7:21:23:
ea:44:9b:f1:3c:61:c9:90:9f:cc:2a:78:c1:4d:d3:22:a3:d8:
24:80:b3:e7:ca:bf:3f:0b:60:31:97:f1:1b:1d:6a:0c:a2:6c:
6f:17:1a:e1:22:39:3a:14:90:0f:8a:b4:a4:9a:62:02:e5:eb:
3b:1d:3a:fb:90:4d:55:48:bb:b6:ee:d1:df:d3:93:89:fb:8c:
6e:49:20:ee:a5:89:62:82:62:58:f9:be:70:db:13:a8:6e:32:
bd:42:93:05:af:10:ef:d5:10:b6:94:97:2b:46:c9:af:80:81:
6e:96:d1:c9:ff:b7:3f:29:9f:bf:93:fa:4c:e4:18:3b:b4:e1:
0b:cf:56:d9:9c:cf:6b:0d:9a:a1:08:10:01:6d:db:d2:44:e8:
1c:90:37:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4wZA+96bF8OPHX/nD5OPhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjk4NjhlODQ4N2RjYjRiYzcyMDUxNjNmNTZiOTQwMDk4
MzY0NGYwHhcNMjQwMzEyMDIwMDQ3WhcNMjQwMzEzMDIwMDQ3WjAzMTEwLwYDVQQD
EygxMTlkM2FlYzM3Mzc3MThkYjk0MmM1NGZiNjE1MzYzYzFkNTFlNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WFji4mdOF+Jhwf4d25epLwUQJMi
1OxZ8VjmuURywqhZW+EUobyB4yTPA6etMThLfmW7rfpfqDsi/hp6eIzRlyPCT01P
KjnO/c2W854YkTGviUV7d5FA32umKyaMCT8spTzWMqy9Hc6Ct6IKnCIZysu7IOGv
gl0q7yKjz3ZvO7SMa9yi0wCboDQBt1EGUYdeVl1PptccOq9H/Vzy/Deo16+93MqJ
CTg1gekJhYk/mx7litxYnAJ3XnQBclrYfMQ2uGAqDUnx9ylmaUxRVSZJNMJOYBpJ
40ZSTEgevEUZn2tdHI2zCbV8gjxTfzyXE27vfR1et8HYCjwaAQIlGULgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGdOuw3N3GNuULFT7YVNjwdUeQBMB8GA1UdIwQY
MBaAFB8pho6Eh9y0vHIFFj9WuUAJg2RPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltR2pvU0gzTFM4Y2dVV1AxYTVRQW1EWkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yYWI2YTQtZjBiNC00MGIwLWEyNzYt
NjAwMGZjYzVkYjM2LzEvSHltR2pvU0gzTFM4Y2dVV1AxYTVRQW1EWkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yYWI2YTQtZjBiNC00MGIwLWEyNzYtNjAwMGZjYzVkYjM2
LzEvSHltR2pvU0gzTFM4Y2dVV1AxYTVRQW1EWkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKTHYNyA
38URKWDffnkDLV3NbyZXc1BwqhFL2GB+vcFSYD4scuHmC7qYAaDWi3Px3dxCsB2n
1497yF7APNM9aOQYcaWGYU0fxAzrr4DQCFX1uttIzBu9uC2gvJ7Ie32mGV71Vgj3
VT3h5yEj6kSb8TxhyZCfzCp4wU3TIqPYJICz58q/PwtgMZfxGx1qDKJsbxca4SI5
OhSQD4q0pJpiAuXrOx06+5BNVUi7tu7R39OTifuMbkkg7qWJYoJiWPm+cNsTqG4y
vUKTBa8Q79UQtpSXK0bJr4CBbpbRyf+3Pymfv5P6TOQYO7ThC89W2ZzPaw2aoQgQ
AW3b0kToHJA3Tg==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:52 2025 by rpki-client