Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
File: HyWFKHQzHAGkNVXn47crpqgL6F8.mft (raw, json)
Hash identifier: iLDFTprbS8HNIuOrcCF/A0eC6zqCcthjCpdZlf7Mn24=
Subject key identifier: EC:73:80:EB:9B:EB:A5:FF:A3:55:8C:70:73:BC:F2:64:1C:53:33:C4
Authority key identifier: 1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
Certificate issuer: /CN=1f25852874331c01a43555e7e3b72ba6a80be85f
Certificate serial: 018D6265E2295170DE25B4C2CCE5A94A771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyWFKHQzHAGkNVXn47crpqgL6F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
Manifest number: 084E
Signing time: Thu 01 Feb 2024 02:01:00 +0000
Manifest this update: Thu 01 Feb 2024 02:01:00 +0000
Manifest next update: Fri 02 Feb 2024 02:01:00 +0000
Files and hashes: 1: 4R9-YIOtROM59N_DLyva_ZtuWpk.roa (hash: xlZmjZiAWjpSTsCbbZS57KHRLG9lDo3jyXRb9vCA/oU=)
2: HyWFKHQzHAGkNVXn47crpqgL6F8.crl (hash: OeGZx/VMRFDIQxgQm9dytABLsv7zt7Zsa/uGZLdue1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:65:e2:29:51:70:de:25:b4:c2:cc:e5:a9:4a:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f25852874331c01a43555e7e3b72ba6a80be85f
Validity
Not Before: Feb 1 02:01:00 2024 GMT
Not After : Feb 2 02:01:00 2024 GMT
Subject: CN=ec7380eb9beba5ffa3558c7073bcf2641c5333c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:6d:24:dd:4c:70:38:e3:b3:f0:8b:4d:9a:
14:71:7f:aa:c7:18:59:25:88:b5:bd:8e:6e:0d:19:
c6:e4:aa:5f:be:a0:47:c0:56:bb:5c:c7:df:3e:4e:
5f:9e:bd:88:d4:df:08:80:59:cf:b4:16:1e:b3:4c:
22:60:4b:6b:a0:cb:56:2e:8a:86:41:73:f1:bb:d8:
9c:d5:98:2d:b3:b2:5a:98:80:e9:1e:f2:97:b1:af:
9e:25:13:68:60:20:0c:27:9c:a0:78:9f:6b:ac:c3:
16:ba:0b:a8:e5:3d:4b:92:c3:5f:c9:bc:c1:05:b8:
d6:06:6c:4a:a4:27:04:c5:c6:88:84:0a:ad:8e:af:
df:86:27:55:9c:99:f5:9b:e6:3d:74:36:56:94:ee:
53:f6:1e:a8:55:63:83:e7:d8:a7:36:e3:02:b5:b9:
ee:43:44:55:56:f5:4e:38:bc:55:5c:80:0c:7e:b2:
bc:34:85:94:09:eb:b6:5e:1b:66:8b:5a:ba:de:9b:
23:83:97:23:87:f5:6d:ef:35:ed:da:f0:93:79:77:
5e:3a:a3:78:e3:d0:9e:0f:0f:e9:53:cc:42:86:3a:
d1:e2:fe:c9:be:40:a7:1e:14:33:7b:3f:71:63:83:
8c:05:9d:6e:f4:a3:99:49:db:aa:a7:66:58:3f:72:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:73:80:EB:9B:EB:A5:FF:A3:55:8C:70:73:BC:F2:64:1C:53:33:C4
X509v3 Authority Key Identifier:
keyid:1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyWFKHQzHAGkNVXn47crpqgL6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:3b:2d:8e:20:06:50:88:01:cd:4f:82:a3:06:90:49:35:
f7:a8:56:59:a0:c3:01:93:e0:b2:24:fa:32:c4:59:80:fa:ce:
91:74:ca:e1:ce:a3:d3:6a:fe:8f:d3:c8:b1:c9:49:05:71:d5:
a0:da:5a:ee:e5:2e:fb:dc:9f:c1:a0:56:c2:bf:93:ae:3b:e4:
1a:51:e3:0c:1e:60:64:bb:81:88:8c:12:31:42:76:c5:e1:05:
99:ca:a2:b4:f1:20:61:f8:b1:fc:af:13:92:86:12:92:42:51:
55:34:7a:5c:9f:a3:35:09:0a:52:bc:f3:91:e4:a2:e8:41:6b:
4d:4b:4d:76:91:b6:46:32:f2:a5:d6:f1:45:6d:31:fe:fb:04:
73:80:50:7f:0a:87:6a:24:bc:23:a6:99:6d:f9:83:23:75:f8:
8f:97:53:0a:bb:99:59:e3:01:fd:5a:10:d8:03:39:83:c5:a0:
13:38:64:32:1a:f0:9c:8d:4d:ac:d5:c2:78:8a:7a:a7:0b:cb:
2b:e1:67:ac:49:24:5b:4e:4c:dd:d1:da:58:0b:e9:4f:18:2b:
19:b6:a6:6f:1a:55:6e:88:66:1f:20:5e:ec:65:2d:90:b0:5d:
ae:52:cc:f4:20:11:ad:33:67:b4:d3:99:05:0f:ff:90:08:39:
b8:cc:2f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1iZeIpUXDeJbTCzOWpSncdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMjU4NTI4NzQzMzFjMDFhNDM1NTVlN2UzYjcyYmE2YTgw
YmU4NWYwHhcNMjQwMjAxMDIwMTAwWhcNMjQwMjAyMDIwMTAwWjAzMTEwLwYDVQQD
EyhlYzczODBlYjliZWJhNWZmYTM1NThjNzA3M2JjZjI2NDFjNTMzM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56RtJN1McDjjs/CLTZoUcX+qxxhZ
JYi1vY5uDRnG5KpfvqBHwFa7XMffPk5fnr2I1N8IgFnPtBYes0wiYEtroMtWLoqG
QXPxu9ic1Zgts7JamIDpHvKXsa+eJRNoYCAMJ5ygeJ9rrMMWuguo5T1LksNfybzB
BbjWBmxKpCcExcaIhAqtjq/fhidVnJn1m+Y9dDZWlO5T9h6oVWOD59inNuMCtbnu
Q0RVVvVOOLxVXIAMfrK8NIWUCeu2Xhtmi1q63psjg5cjh/Vt7zXt2vCTeXdeOqN4
49CeDw/pU8xChjrR4v7JvkCnHhQzez9xY4OMBZ1u9KOZSduqp2ZYP3JYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxzgOub66X/o1WMcHO88mQcUzPEMB8GA1UdIwQY
MBaAFB8lhSh0MxwBpDVV5+O3K6aoC+hfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHlXRktIUXpIQUdrTlZYbjQ3Y3JwcWdMNkY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84NGFjOWItMDg3MC00YzNmLWFmNWMt
NjM3Y2JhZDY0ZTAzLzEvSHlXRktIUXpIQUdrTlZYbjQ3Y3JwcWdMNkY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84NGFjOWItMDg3MC00YzNmLWFmNWMtNjM3Y2JhZDY0ZTAz
LzEvSHlXRktIUXpIQUdrTlZYbjQ3Y3JwcWdMNkY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz47LY4g
BlCIAc1PgqMGkEk196hWWaDDAZPgsiT6MsRZgPrOkXTK4c6j02r+j9PIsclJBXHV
oNpa7uUu+9yfwaBWwr+TrjvkGlHjDB5gZLuBiIwSMUJ2xeEFmcqitPEgYfix/K8T
koYSkkJRVTR6XJ+jNQkKUrzzkeSi6EFrTUtNdpG2RjLypdbxRW0x/vsEc4BQfwqH
aiS8I6aZbfmDI3X4j5dTCruZWeMB/VoQ2AM5g8WgEzhkMhrwnI1NrNXCeIp6pwvL
K+FnrEkkW05M3dHaWAvpTxgrGbambxpVbohmHyBe7GUtkLBdrlLM9CARrTNntNOZ
BQ//kAg5uMwv4A==
-----END CERTIFICATE-----
Generated at Thu Feb 1 13:29:07 2024 by rpki-client on console-fra.rpki-client.org