Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: LbavT6nJYv18STbMPOxmAKTa2sMY0T/X4DpTpyJP9H8=
Subject key identifier: 48:A0:5B:0D:A1:72:4B:E4:A9:D4:4D:F1:21:83:7C:84:5B:F0:69:88
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 0195E0EB0FCE3FE83A7C3643C70D1D6B399F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1203
Signing time: Sat 29 Mar 2025 08:00:56 +0000
Manifest this update: Sat 29 Mar 2025 08:00:56 +0000
Manifest next update: Sun 30 Mar 2025 08:00:56 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: kFc/GLgnoo3DZ0hm97X6oGcQML3qMqXiy5dN1EkOmjw=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0f:ce:3f:e8:3a:7c:36:43:c7:0d:1d:6b:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Mar 29 08:00:56 2025 GMT
Not After : Mar 30 08:00:56 2025 GMT
Subject: CN=48a05b0da1724be4a9d44df121837c845bf06988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:93:91:57:eb:29:ba:bf:4d:66:d3:7f:d6:
45:d2:4c:d3:5a:90:5b:60:df:16:0f:0a:1a:2c:36:
ef:2b:ac:56:81:37:59:60:cb:04:7f:5c:4d:fb:4b:
8b:eb:bd:a7:7a:b4:95:d6:58:1f:39:09:a7:84:b9:
9a:69:be:85:5f:06:25:ee:a7:49:c5:61:20:96:52:
08:1d:af:f1:db:7d:f7:fc:de:7c:e5:88:ff:8d:e0:
ce:56:66:93:b4:44:55:50:0f:fa:6d:31:28:9a:96:
0e:43:e1:f7:5a:60:b6:69:24:ac:1a:96:7c:0f:c0:
ca:2e:40:63:48:51:be:b2:53:cb:80:e8:5c:a1:c1:
a2:00:34:a4:18:5b:db:f0:6c:75:80:b5:9e:3c:5f:
50:af:bc:26:37:e1:e9:e6:4d:d9:a2:bd:d1:a2:c0:
0a:aa:99:83:6e:12:fc:30:45:65:9d:b7:95:c7:01:
e4:b6:38:42:7b:90:b7:4d:80:e6:25:e6:32:cc:de:
cf:eb:66:fa:08:f6:88:b0:c1:64:0b:c3:3e:2c:32:
06:cf:3c:3e:f1:ec:08:6b:4b:e2:f5:35:be:8a:31:
af:ac:62:f1:79:c8:fb:88:46:d2:c4:b2:ad:85:86:
f9:cb:25:00:49:6e:f0:2d:90:57:1f:18:be:6d:15:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A0:5B:0D:A1:72:4B:E4:A9:D4:4D:F1:21:83:7C:84:5B:F0:69:88
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2b:32:56:d8:81:b0:88:18:14:7c:f4:90:1b:c8:01:8a:2e:
73:12:43:02:a5:3d:d0:ff:80:05:06:10:0a:e8:a5:e8:19:c4:
96:7e:9c:4d:59:19:f8:44:f1:0d:f5:48:ee:2b:04:39:32:de:
d0:d3:57:97:41:7b:af:94:0c:79:37:3b:51:84:24:ad:7f:03:
f8:e5:ec:0d:cd:82:ec:25:0f:b7:f0:83:7e:2f:1a:16:ec:42:
f6:d1:4c:df:1f:dd:cb:7e:93:3e:23:20:d8:a6:c7:67:24:73:
38:88:68:25:c4:90:14:6c:8a:4f:ff:f5:c5:bd:e0:f4:ae:cc:
22:b5:dc:f3:d8:a6:06:86:a9:d2:a9:78:ee:48:44:c0:b5:25:
ad:7f:6a:9c:2e:13:b9:10:60:82:b5:21:4c:cc:7c:fd:5e:26:
c5:6c:a6:bc:8e:55:7e:dd:e6:18:bd:22:56:ce:24:cc:c4:65:
d2:91:b6:1f:63:e8:70:e4:79:6c:36:ac:a6:e0:1b:f1:b9:56:
9e:fe:2d:ce:45:27:a0:a1:84:57:f5:d0:d4:74:4e:1e:b1:98:
84:d9:74:61:67:42:e7:28:56:cb:83:b6:21:0a:27:79:a4:41:
c4:7a:85:e1:1a:c2:15:19:f8:6e:85:6d:51:ea:34:a8:26:8f:
c3:ab:43:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6w/OP+g6fDZDxw0dazmfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3
ZTMzZDQwHhcNMjUwMzI5MDgwMDU2WhcNMjUwMzMwMDgwMDU2WjAzMTEwLwYDVQQD
Eyg0OGEwNWIwZGExNzI0YmU0YTlkNDRkZjEyMTgzN2M4NDViZjA2OTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYuTkVfrKbq/TWbTf9ZF0kzTWpBb
YN8WDwoaLDbvK6xWgTdZYMsEf1xN+0uL672nerSV1lgfOQmnhLmaab6FXwYl7qdJ
xWEgllIIHa/x2333/N585Yj/jeDOVmaTtERVUA/6bTEompYOQ+H3WmC2aSSsGpZ8
D8DKLkBjSFG+slPLgOhcocGiADSkGFvb8Gx1gLWePF9Qr7wmN+Hp5k3Zor3RosAK
qpmDbhL8MEVlnbeVxwHktjhCe5C3TYDmJeYyzN7P62b6CPaIsMFkC8M+LDIGzzw+
8ewIa0vi9TW+ijGvrGLxecj7iEbSxLKthYb5yyUASW7wLZBXHxi+bRXV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEigWw2hckvkqdRN8SGDfIRb8GmIMB8GA1UdIwQY
MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt
ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk
LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZysyVtiB
sIgYFHz0kBvIAYoucxJDAqU90P+ABQYQCuil6BnEln6cTVkZ+ETxDfVI7isEOTLe
0NNXl0F7r5QMeTc7UYQkrX8D+OXsDc2C7CUPt/CDfi8aFuxC9tFM3x/dy36TPiMg
2KbHZyRzOIhoJcSQFGyKT//1xb3g9K7MIrXc89imBoap0ql47khEwLUlrX9qnC4T
uRBggrUhTMx8/V4mxWymvI5Vft3mGL0iVs4kzMRl0pG2H2PocOR5bDaspuAb8blW
nv4tzkUnoKGEV/XQ1HROHrGYhNl0YWdC5yhWy4O2IQoneaRBxHqF4RrCFRn4boVt
Ueo0qCaPw6tDDA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:49 2025 by rpki-client