Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
File: h0IrQhcvXKW3uV5HkMXb08YqakI.mft (raw, json)
Hash identifier: cJZRL4H5ttpzoOPdhC8RTk8qld4vP7KV1LJFH7VExGE=
Subject key identifier: 8F:98:EC:28:DE:EB:19:5B:27:43:5E:27:59:62:B6:A7:11:9B:98:E7
Authority key identifier: 87:42:2B:42:17:2F:5C:A5:B7:B9:5E:47:90:C5:DB:D3:C6:2A:6A:42
Certificate issuer: /CN=87422b42172f5ca5b7b95e4790c5dbd3c62a6a42
Certificate serial: 0194B8CD54B5FC33410837876421FA2E1CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0IrQhcvXKW3uV5HkMXb08YqakI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
Manifest number: 0279
Signing time: Thu 30 Jan 2025 20:00:51 +0000
Manifest this update: Thu 30 Jan 2025 20:00:51 +0000
Manifest next update: Fri 31 Jan 2025 20:00:51 +0000
Files and hashes: 1: h0IrQhcvXKW3uV5HkMXb08YqakI.crl (hash: zahmclqM1oNUBoDRg2bVvL84VKNA7tlCtO5Ib1f09AI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b8:cd:54:b5:fc:33:41:08:37:87:64:21:fa:2e:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87422b42172f5ca5b7b95e4790c5dbd3c62a6a42
Validity
Not Before: Jan 30 20:00:51 2025 GMT
Not After : Jan 31 20:00:51 2025 GMT
Subject: CN=8f98ec28deeb195b27435e275962b6a7119b98e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:68:61:d3:0d:ba:5d:8f:d4:11:c5:12:a7:
93:1f:07:85:cc:3e:a7:f7:4a:11:4a:c1:e2:da:d0:
4c:1f:39:f9:43:a7:b5:3f:1d:28:90:53:5c:64:ff:
a4:c2:75:bb:60:0b:13:06:d3:79:cb:7f:49:51:24:
94:a7:13:df:d9:fd:46:6a:14:d7:b3:6a:2e:05:98:
e7:f1:eb:f2:ae:64:70:37:89:21:8e:1c:4c:07:70:
10:d9:1e:e8:3b:9c:a5:ef:22:79:95:01:41:60:9c:
fd:2e:63:59:90:6b:dd:aa:52:ae:ee:a9:08:81:e2:
cf:6e:f1:4e:2d:80:69:6e:f1:97:b5:a3:e0:d6:81:
f6:7a:01:49:c1:0b:32:5c:ce:31:cc:85:68:60:07:
66:00:28:e2:10:d8:45:28:0c:32:e6:62:1f:02:fa:
3c:ea:3c:d2:d5:61:1c:ce:f0:aa:05:68:6b:67:0d:
e4:23:33:54:3e:b8:1a:5b:ad:b9:4f:2f:78:72:c0:
eb:f8:42:3d:d7:03:29:45:3b:03:a9:21:ef:bd:6f:
d7:4e:81:62:e1:6c:1f:aa:13:40:e4:e6:87:1b:bc:
66:f7:da:b2:9c:bb:ef:c8:59:aa:58:ca:9d:bb:73:
dd:30:42:d8:1a:89:66:e9:c6:ba:4f:a6:53:c7:90:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:EC:28:DE:EB:19:5B:27:43:5E:27:59:62:B6:A7:11:9B:98:E7
X509v3 Authority Key Identifier:
keyid:87:42:2B:42:17:2F:5C:A5:B7:B9:5E:47:90:C5:DB:D3:C6:2A:6A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0IrQhcvXKW3uV5HkMXb08YqakI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/965863-9037-4b55-b175-1a1b08f64089/1/h0IrQhcvXKW3uV5HkMXb08YqakI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ca:5e:72:e4:b2:b3:7b:df:44:6a:65:8b:b1:f0:94:68:1b:
3e:37:8c:5c:0e:5d:fa:48:8f:58:3f:cd:98:93:51:d7:12:ec:
79:5b:68:94:4b:fd:63:22:4c:f5:79:26:40:3e:22:e2:f8:22:
77:22:25:4f:6b:e0:0b:58:5c:dd:e2:31:be:a1:52:60:00:a0:
a0:3c:06:86:98:48:cc:24:71:84:2a:ea:90:c8:41:c7:e5:3a:
3f:92:05:01:1b:ce:a2:fb:62:da:6f:d9:2b:75:c6:75:dc:fa:
8b:f5:87:96:e6:d3:44:bb:1c:12:5d:9f:03:83:01:12:d7:c4:
01:ac:22:36:13:fc:92:de:45:a5:15:dd:dc:36:75:ea:5e:45:
2b:85:79:bc:b3:6f:ff:76:53:c9:fc:73:e0:de:6e:be:79:18:
5f:75:6b:0b:c8:30:d1:aa:22:e9:fe:0f:0e:97:ca:34:47:6d:
00:b7:dd:b6:3b:72:e7:9d:40:61:c9:ec:3f:91:c7:f1:6a:70:
1f:6b:fa:ce:54:bc:78:00:3c:33:14:79:16:cc:9d:b1:a1:90:
ce:10:95:96:62:46:52:df:69:04:ed:6e:1d:3e:b6:aa:24:a9:
ab:d7:ea:cc:cd:29:49:c5:6f:dd:9b:e5:a1:33:db:88:5b:91:
9b:ed:9a:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS4zVS1/DNBCDeHZCH6Lhy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NDIyYjQyMTcyZjVjYTViN2I5NWU0NzkwYzVkYmQzYzYy
YTZhNDIwHhcNMjUwMTMwMjAwMDUxWhcNMjUwMTMxMjAwMDUxWjAzMTEwLwYDVQQD
Eyg4Zjk4ZWMyOGRlZWIxOTViMjc0MzVlMjc1OTYyYjZhNzExOWI5OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsExoYdMNul2P1BHFEqeTHweFzD6n
90oRSsHi2tBMHzn5Q6e1Px0okFNcZP+kwnW7YAsTBtN5y39JUSSUpxPf2f1GahTX
s2ouBZjn8evyrmRwN4khjhxMB3AQ2R7oO5yl7yJ5lQFBYJz9LmNZkGvdqlKu7qkI
geLPbvFOLYBpbvGXtaPg1oH2egFJwQsyXM4xzIVoYAdmACjiENhFKAwy5mIfAvo8
6jzS1WEczvCqBWhrZw3kIzNUPrgaW625Ty94csDr+EI91wMpRTsDqSHvvW/XToFi
4WwfqhNA5OaHG7xm99qynLvvyFmqWMqdu3PdMELYGolm6ca6T6ZTx5DYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+Y7Cje6xlbJ0NeJ1litqcRm5jnMB8GA1UdIwQY
MBaAFIdCK0IXL1ylt7leR5DF29PGKmpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBJclFoY3ZYS1czdVY1SGtNWGIwOFlxYWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85NjU4NjMtOTAzNy00YjU1LWIxNzUt
MWExYjA4ZjY0MDg5LzEvaDBJclFoY3ZYS1czdVY1SGtNWGIwOFlxYWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni85NjU4NjMtOTAzNy00YjU1LWIxNzUtMWExYjA4ZjY0MDg5
LzEvaDBJclFoY3ZYS1czdVY1SGtNWGIwOFlxYWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMpecuSy
s3vfRGpli7HwlGgbPjeMXA5d+kiPWD/NmJNR1xLseVtolEv9YyJM9XkmQD4i4vgi
dyIlT2vgC1hc3eIxvqFSYACgoDwGhphIzCRxhCrqkMhBx+U6P5IFARvOovti2m/Z
K3XGddz6i/WHlubTRLscEl2fA4MBEtfEAawiNhP8kt5FpRXd3DZ16l5FK4V5vLNv
/3ZTyfxz4N5uvnkYX3VrC8gw0aoi6f4PDpfKNEdtALfdtjty551AYcnsP5HH8Wpw
H2v6zlS8eAA8MxR5FsydsaGQzhCVlmJGUt9pBO1uHT62qiSpq9fqzM0pScVv3Zvl
oTPbiFuRm+2aGA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:35:37 2025 by rpki-client