Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: zHW/8gTuA8UeSLU2MNDpYABSyPrZZvLQjozjXny28vk=
Subject key identifier: 68:75:93:14:58:18:E2:3B:A8:1F:9F:9C:9B:74:CF:86:38:46:D3:6C
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 0195E1223E42FEB77619E764DF12408D4A08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 0D4D
Signing time: Sat 29 Mar 2025 09:01:12 +0000
Manifest this update: Sat 29 Mar 2025 09:01:12 +0000
Manifest next update: Sun 30 Mar 2025 09:01:12 +0000
Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 5dPi9BkqSO40qKNtnEphj4IvrxGtnokiuaaIgE44On8=)
2: s1k4VuonWOZZPAV_JNyFAmc3QSo.roa (hash: cR7PeQtOyIJC20HWqCOMhvmrx9KSgQEbtA0y8RtkXyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:3e:42:fe:b7:76:19:e7:64:df:12:40:8d:4a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Mar 29 09:01:12 2025 GMT
Not After : Mar 30 09:01:12 2025 GMT
Subject: CN=687593145818e23ba81f9f9c9b74cf863846d36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:be:7d:70:46:ab:cc:c1:a1:ef:97:d6:42:
33:df:9f:27:23:e7:24:44:e7:97:77:10:2f:b7:1e:
de:67:79:75:9d:79:35:ad:5e:54:20:90:e4:f5:fe:
1d:44:fc:1f:e9:e7:ed:51:00:9b:7e:8b:48:f4:e4:
7c:54:29:eb:79:8a:88:17:1b:77:61:65:c5:b0:16:
4f:2c:e6:c6:4c:db:86:41:f7:8d:f1:a2:56:da:3c:
e1:ee:c3:66:6e:7e:1b:7f:52:a2:d0:9c:03:c0:4a:
96:c5:08:85:fd:0b:4b:17:94:3e:5d:44:27:5f:7f:
d6:6b:1a:c1:a3:2a:99:e8:88:83:5a:69:aa:24:4a:
2b:fa:74:d2:35:9b:6e:46:60:3d:30:77:66:f0:9d:
90:ff:d8:4a:ea:9b:53:20:fa:be:09:1d:ce:60:ed:
c5:58:85:cd:d1:2e:31:97:f2:84:3d:6a:78:9a:81:
32:5b:29:cf:b9:98:9d:39:5a:ca:db:c5:a7:52:ae:
f4:d3:76:d3:18:a9:37:89:4f:8c:a2:d4:65:0c:8b:
a6:34:90:f9:18:d7:92:9f:ef:64:d9:9e:c7:46:dd:
e3:e7:70:65:52:dd:52:81:25:63:d4:54:b6:a2:84:
00:77:30:20:e6:1e:67:56:7b:88:c0:a5:aa:23:06:
f9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:93:14:58:18:E2:3B:A8:1F:9F:9C:9B:74:CF:86:38:46:D3:6C
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:75:db:0b:41:ef:3e:91:b4:94:79:85:b1:a2:f5:30:e5:1c:
95:ec:fd:f7:3d:70:c3:09:ae:a5:12:30:78:69:77:5a:93:94:
e4:a7:d1:1e:2f:e5:90:21:fc:58:1b:ce:fd:bb:50:30:21:5d:
a1:10:8c:af:59:78:65:f0:56:b6:b6:15:ac:52:7d:e5:7b:5b:
7c:be:bb:19:f9:31:7c:ad:d6:af:ce:c4:57:5a:c4:1b:4f:ec:
1f:22:13:aa:b7:80:75:75:5c:73:1c:6f:3a:66:ac:97:ec:f9:
af:ae:17:5c:e6:b7:1f:39:62:bf:7f:e3:a4:d4:56:19:9e:8e:
90:ba:cb:34:e4:d8:59:9e:17:17:79:5d:b3:89:3e:86:59:f5:
14:09:ee:57:aa:04:54:8e:d1:10:0c:e5:45:49:99:5b:64:57:
8e:47:3b:b7:40:5b:0e:23:20:ab:75:d1:1e:91:35:91:42:39:
ec:88:c6:d5:a0:03:f1:fb:b7:21:dc:17:92:ac:82:5c:64:45:
4c:9d:ba:f5:c2:c5:e7:0d:9f:9a:1f:1a:80:b2:97:f6:2a:75:
91:e5:75:42:c0:a4:59:94:cc:61:4e:a2:bd:fb:cd:da:78:ad:
52:c1:45:fd:e6:e9:96:11:5b:ec:ef:d9:5a:e6:4f:94:b9:e1:
95:d5:f8:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIj5C/rd2Gedk3xJAjUoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTc4NmM3NWZjMTY1ODRiMDI3MWZmMjdiOTcxZDcyMzQx
NjYxOGQwHhcNMjUwMzI5MDkwMTEyWhcNMjUwMzMwMDkwMTEyWjAzMTEwLwYDVQQD
Eyg2ODc1OTMxNDU4MThlMjNiYTgxZjlmOWM5Yjc0Y2Y4NjM4NDZkMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrm+fXBGq8zBoe+X1kIz358nI+ck
ROeXdxAvtx7eZ3l1nXk1rV5UIJDk9f4dRPwf6eftUQCbfotI9OR8VCnreYqIFxt3
YWXFsBZPLObGTNuGQfeN8aJW2jzh7sNmbn4bf1Ki0JwDwEqWxQiF/QtLF5Q+XUQn
X3/WaxrBoyqZ6IiDWmmqJEor+nTSNZtuRmA9MHdm8J2Q/9hK6ptTIPq+CR3OYO3F
WIXN0S4xl/KEPWp4moEyWynPuZidOVrK28WnUq7003bTGKk3iU+MotRlDIumNJD5
GNeSn+9k2Z7HRt3j53BlUt1SgSVj1FS2ooQAdzAg5h5nVnuIwKWqIwb5XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGh1kxRYGOI7qB+fnJt0z4Y4RtNsMB8GA1UdIwQY
MBaAFIZXhsdfwWWEsCcf8nuXHXI0FmGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjkt
OGNmOWQ1MGFkZjI5LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xOWE2NDktMDQ0Mi00ZjNkLTljYjktOGNmOWQ1MGFkZjI5
LzEvaGxlR3gxX0JaWVN3SnhfeWU1Y2RjalFXWVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXXbC0Hv
PpG0lHmFsaL1MOUclez99z1wwwmupRIweGl3WpOU5KfRHi/lkCH8WBvO/btQMCFd
oRCMr1l4ZfBWtrYVrFJ95XtbfL67GfkxfK3Wr87EV1rEG0/sHyITqreAdXVccxxv
Omasl+z5r64XXOa3Hzliv3/jpNRWGZ6OkLrLNOTYWZ4XF3lds4k+hln1FAnuV6oE
VI7REAzlRUmZW2RXjkc7t0BbDiMgq3XRHpE1kUI57IjG1aAD8fu3IdwXkqyCXGRF
TJ269cLF5w2fmh8agLKX9ip1keV1QsCkWZTMYU6ivfvN2nitUsFF/ebplhFb7O/Z
WuZPlLnhldX4Pg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:23:04 2025 by rpki-client