Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json)
Hash identifier: YjhfWsBY4X2wjWeAAF/z7SHyAS3Ir1Ky5gJpcAxhTlw=
Subject key identifier: 45:26:17:3F:A4:AC:74:42:F7:12:24:8A:AB:02:40:B7:FB:85:EC:74
Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Certificate serial: 0195E158F0DF516AA36109DD6EC9AC9B6268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
Manifest number: 0587
Signing time: Sat 29 Mar 2025 10:00:57 +0000
Manifest this update: Sat 29 Mar 2025 10:00:57 +0000
Manifest next update: Sun 30 Mar 2025 10:00:57 +0000
Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=)
2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: MrsRshHnh4Nyx+7cly/LIsTCHLwQLu8KEmIHicKfUCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:58:f0:df:51:6a:a3:61:09:dd:6e:c9:ac:9b:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4
Validity
Not Before: Mar 29 10:00:57 2025 GMT
Not After : Mar 30 10:00:57 2025 GMT
Subject: CN=4526173fa4ac7442f712248aab0240b7fb85ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:9a:bb:04:8a:f8:72:b1:cd:8e:2b:7e:36:
2f:72:62:60:a0:6a:4b:7d:a4:67:16:a5:88:ca:ab:
6a:d8:7c:df:a9:78:4a:76:7c:df:a2:26:26:e8:f0:
1f:92:dc:72:ea:95:6c:9f:4f:75:b1:e2:f4:91:6a:
5f:54:0a:02:95:78:b1:9b:ab:d0:f5:58:06:d0:6e:
bb:3c:e7:b9:a0:db:76:c7:56:20:61:a8:66:5c:35:
f2:2e:01:23:68:ee:c2:f0:b1:bb:96:10:1b:f8:0a:
b2:d3:d5:2e:a4:d9:ae:b7:b1:94:9f:43:76:60:83:
c5:4c:31:83:6c:0b:50:b3:49:c9:60:18:12:4f:d3:
e0:1b:74:0a:43:4a:2d:f4:64:1a:07:be:7d:c1:5b:
7a:8e:87:0f:e3:3a:d9:a4:14:5b:16:4b:5f:0b:05:
e8:c2:6f:e3:40:e4:bf:7c:8d:69:23:40:b5:b0:29:
ca:67:b9:62:c6:d7:88:dc:4e:0c:4d:54:ec:b9:5f:
46:1b:4a:a6:31:a5:c2:ed:d0:c1:0b:85:6f:28:a1:
18:97:d4:47:94:43:3a:89:ae:99:c9:bb:7c:89:a9:
3c:64:42:72:bd:6f:c7:11:1a:c6:84:c5:7e:a6:29:
ca:6a:b2:41:1e:71:af:11:be:8a:fc:93:91:61:89:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:17:3F:A4:AC:74:42:F7:12:24:8A:AB:02:40:B7:FB:85:EC:74
X509v3 Authority Key Identifier:
keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:e6:19:c1:03:a2:17:eb:00:66:0a:b3:99:dc:cc:e6:3f:
30:f8:ea:29:da:e6:b2:4a:9c:20:cf:3f:05:24:fb:0d:a5:5a:
0e:e6:cc:f1:92:b9:95:92:20:e7:7f:f6:eb:da:97:2e:c8:a1:
2a:47:95:28:da:b5:e0:06:7b:3a:37:27:66:4d:1d:66:82:b6:
ff:3b:f2:16:56:65:6b:e6:a4:b5:9e:cd:48:a1:94:91:7c:a7:
65:63:0a:4b:18:a9:3d:b4:16:e0:0c:6b:78:9b:51:37:e4:7b:
3b:91:d4:75:33:e6:91:2a:29:70:67:e6:81:b3:ff:54:a8:3f:
7e:d8:60:a0:7f:b7:7a:84:36:18:d5:9f:da:28:f2:d7:57:d0:
e0:d1:b5:25:29:b0:e4:7f:3f:fb:03:c7:97:4e:a3:a4:2c:04:
8a:13:9b:ef:46:39:f0:e0:f6:41:ed:7e:63:37:07:9e:26:8e:
8f:11:fe:c7:43:74:21:9b:a5:73:51:84:6b:42:c2:dd:25:ab:
cb:f2:19:ea:05:77:89:8f:0d:d3:cb:ca:d7:4f:38:b7:83:65:
bb:74:85:61:aa:ee:0e:56:a6:b8:c0:80:52:7c:b6:4e:3e:38:
53:2a:e0:18:d6:ea:ae:cf:b3:1a:b8:39:c6:25:f4:54:87:5e:
37:24:b1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWPDfUWqjYQndbsmsm2JoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ODVlMDVkODA1OTJjNmNmMTEzMjBlYjUwMjljYWMwNGE0
ZDliYjQwHhcNMjUwMzI5MTAwMDU3WhcNMjUwMzMwMTAwMDU3WjAzMTEwLwYDVQQD
Eyg0NTI2MTczZmE0YWM3NDQyZjcxMjI0OGFhYjAyNDBiN2ZiODVlYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpWauwSK+HKxzY4rfjYvcmJgoGpL
faRnFqWIyqtq2HzfqXhKdnzfoiYm6PAfktxy6pVsn091seL0kWpfVAoClXixm6vQ
9VgG0G67POe5oNt2x1YgYahmXDXyLgEjaO7C8LG7lhAb+Aqy09UupNmut7GUn0N2
YIPFTDGDbAtQs0nJYBgST9PgG3QKQ0ot9GQaB759wVt6jocP4zrZpBRbFktfCwXo
wm/jQOS/fI1pI0C1sCnKZ7lixteI3E4MTVTsuV9GG0qmMaXC7dDBC4VvKKEYl9RH
lEM6ia6Zybt8iak8ZEJyvW/HERrGhMV+pinKarJBHnGvEb6K/JORYYmPTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUmFz+krHRC9xIkiqsCQLf7hex0MB8GA1UdIwQY
MBaAFIaF4F2AWSxs8RMg61ApysBKTZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAt
NjhlZjI0Y2Y1ZWY5LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAtNjhlZjI0Y2Y1ZWY5
LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3/mGcED
ohfrAGYKs5nczOY/MPjqKdrmskqcIM8/BST7DaVaDubM8ZK5lZIg53/269qXLsih
KkeVKNq14AZ7OjcnZk0dZoK2/zvyFlZla+aktZ7NSKGUkXynZWMKSxipPbQW4Axr
eJtRN+R7O5HUdTPmkSopcGfmgbP/VKg/fthgoH+3eoQ2GNWf2ijy11fQ4NG1JSmw
5H8/+wPHl06jpCwEihOb70Y58OD2Qe1+YzcHniaOjxH+x0N0IZulc1GEa0LC3SWr
y/IZ6gV3iY8N08vK1084t4Nlu3SFYaruDlamuMCAUny2Tj44UyrgGNbqrs+zGrg5
xiX0VIdeNySxMg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:28 2025 by rpki-client