
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
File: HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft (raw, json)
Hash identifier: W0rmQihRoCZ7OC0QnxBxdkFs9kC5oTms5dvu7ETFJd8=
Subject key identifier: AB:E7:E3:43:D7:D4:8F:30:2E:D5:D3:E1:2C:C3:F7:98:78:82:31:62
Authority key identifier: 1C:D1:98:7F:1B:87:1E:2D:5C:BE:6B:69:75:AA:EC:BE:73:AC:57:54
Certificate issuer: /CN=1cd1987f1b871e2d5cbe6b6975aaecbe73ac5754
Certificate serial: 0195A20CFB2E79C4383994DCAF7CD58F5254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNGYfxuHHi1cvmtpdarsvnOsV1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
Manifest number: 012A
Signing time: Mon 17 Mar 2025 03:01:54 +0000
Manifest this update: Mon 17 Mar 2025 03:01:54 +0000
Manifest next update: Tue 18 Mar 2025 03:01:54 +0000
Files and hashes: 1: HNGYfxuHHi1cvmtpdarsvnOsV1Q.crl (hash: WejiQ22zqxk0Nk3u+X+exsyWqRvEe4zf2cmjK7cuOwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:0c:fb:2e:79:c4:38:39:94:dc:af:7c:d5:8f:52:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd1987f1b871e2d5cbe6b6975aaecbe73ac5754
Validity
Not Before: Mar 17 03:01:54 2025 GMT
Not After : Mar 18 03:01:54 2025 GMT
Subject: CN=abe7e343d7d48f302ed5d3e12cc3f79878823162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:97:cb:86:54:3e:8c:3b:7b:33:0b:59:6d:
f6:d8:7f:72:41:f9:b6:13:2a:76:a6:d9:b3:5d:61:
12:b0:ba:47:8a:fc:95:4b:81:9d:d6:67:56:3a:6e:
49:6d:b1:46:ab:60:7c:d5:29:fa:a8:35:12:48:25:
ac:6f:92:48:44:61:56:f4:95:10:c3:47:bc:d9:51:
a2:7e:81:39:28:46:45:52:dc:4b:16:e2:55:e0:bd:
73:e3:bd:c5:1e:4a:80:d7:e8:c0:7b:16:ea:fb:24:
ed:bd:24:ae:d9:df:9e:2a:b3:c3:13:fc:7c:6e:f7:
01:10:c7:53:27:af:89:d4:ef:ed:fa:2e:d8:00:6c:
94:26:a5:4b:0b:f4:ed:42:0f:4f:a7:07:35:d1:43:
ff:d2:dc:8b:08:fd:06:51:ea:bb:c7:23:5f:57:82:
13:12:0e:f9:b6:ae:ed:90:91:a1:51:71:c0:d0:96:
a3:49:4b:74:ab:20:7d:92:93:0c:32:a5:49:e5:ae:
40:1f:e7:3c:e1:8c:6e:87:45:f0:69:03:a6:94:da:
8e:f8:4e:35:ff:94:6c:a6:ce:5e:4f:31:ed:70:17:
83:3f:8c:bd:bc:25:21:34:09:63:e1:06:52:f1:9b:
c4:2c:68:e6:e0:2c:fc:73:d1:67:07:92:d6:09:8a:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:E3:43:D7:D4:8F:30:2E:D5:D3:E1:2C:C3:F7:98:78:82:31:62
X509v3 Authority Key Identifier:
keyid:1C:D1:98:7F:1B:87:1E:2D:5C:BE:6B:69:75:AA:EC:BE:73:AC:57:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNGYfxuHHi1cvmtpdarsvnOsV1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6825f4-a5d6-4839-9f42-11f1bee21375/1/HNGYfxuHHi1cvmtpdarsvnOsV1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:05:c5:a0:08:9d:c7:53:cd:98:23:5f:e9:01:0b:dc:0d:c9:
2e:cc:1b:ad:d9:38:ff:3d:b7:81:a3:eb:21:9b:6a:6d:83:9e:
06:cb:57:34:29:89:56:b2:3a:2e:2d:a6:ac:ff:e6:22:9e:76:
38:e6:3d:f6:25:be:e7:63:0d:c3:c6:34:c6:79:72:0e:53:bc:
2c:b6:fd:b1:67:6f:fa:ed:93:ce:85:5f:85:06:39:30:80:a2:
2e:b9:b7:2f:fa:60:65:c2:5d:7b:cf:53:bf:11:65:89:91:8a:
e1:3f:62:38:b8:7a:57:a3:84:16:cc:cc:63:8a:59:c8:3a:17:
46:d4:f9:76:d3:64:5e:ef:bc:f9:cd:7b:f4:75:1c:d3:30:23:
5d:d1:d0:ec:c8:36:4e:e4:53:30:cc:79:d6:76:19:9b:b3:83:
0b:8f:23:bb:c7:ae:5c:95:1a:ac:08:51:39:84:72:45:b0:e1:
42:6e:c6:6f:49:2a:27:d8:e8:4c:22:ab:c5:21:ea:f4:26:42:
13:b6:d3:c5:83:b9:cf:b7:be:76:76:88:6a:b1:18:bd:ed:89:
75:55:a1:e0:72:b6:3c:1f:96:a3:54:14:ae:e2:0b:27:77:86:
86:0e:66:a8:44:a2:94:53:6c:35:2b:e9:06:83:d2:ce:5b:83:
1c:1d:69:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWiDPsuecQ4OZTcr3zVj1JUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDE5ODdmMWI4NzFlMmQ1Y2JlNmI2OTc1YWFlY2JlNzNh
YzU3NTQwHhcNMjUwMzE3MDMwMTU0WhcNMjUwMzE4MDMwMTU0WjAzMTEwLwYDVQQD
EyhhYmU3ZTM0M2Q3ZDQ4ZjMwMmVkNWQzZTEyY2MzZjc5ODc4ODIzMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgKXy4ZUPow7ezMLWW322H9yQfm2
Eyp2ptmzXWESsLpHivyVS4Gd1mdWOm5JbbFGq2B81Sn6qDUSSCWsb5JIRGFW9JUQ
w0e82VGifoE5KEZFUtxLFuJV4L1z473FHkqA1+jAexbq+yTtvSSu2d+eKrPDE/x8
bvcBEMdTJ6+J1O/t+i7YAGyUJqVLC/TtQg9Ppwc10UP/0tyLCP0GUeq7xyNfV4IT
Eg75tq7tkJGhUXHA0JajSUt0qyB9kpMMMqVJ5a5AH+c84Yxuh0XwaQOmlNqO+E41
/5Rsps5eTzHtcBeDP4y9vCUhNAlj4QZS8ZvELGjm4Cz8c9FnB5LWCYobFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvn40PX1I8wLtXT4SzD95h4gjFiMB8GA1UdIwQY
MBaAFBzRmH8bhx4tXL5raXWq7L5zrFdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5HWWZ4dUhIaTFjdm10cGRhcnN2bk9zVjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC82ODI1ZjQtYTVkNi00ODM5LTlmNDIt
MTFmMWJlZTIxMzc1LzEvSE5HWWZ4dUhIaTFjdm10cGRhcnN2bk9zVjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC82ODI1ZjQtYTVkNi00ODM5LTlmNDItMTFmMWJlZTIxMzc1
LzEvSE5HWWZ4dUhIaTFjdm10cGRhcnN2bk9zVjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwXFoAid
x1PNmCNf6QEL3A3JLswbrdk4/z23gaPrIZtqbYOeBstXNCmJVrI6Li2mrP/mIp52
OOY99iW+52MNw8Y0xnlyDlO8LLb9sWdv+u2TzoVfhQY5MICiLrm3L/pgZcJde89T
vxFliZGK4T9iOLh6V6OEFszMY4pZyDoXRtT5dtNkXu+8+c179HUc0zAjXdHQ7Mg2
TuRTMMx51nYZm7ODC48ju8euXJUarAhROYRyRbDhQm7Gb0kqJ9joTCKrxSHq9CZC
E7bTxYO5z7e+dnaIarEYve2JdVWh4HK2PB+Wo1QUruILJ3eGhg5mqESilFNsNSvp
BoPSzluDHB1pJg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:53 2025 by rpki-client