Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: cYHIt+H7i7mVT9nDNkAttoJ5uceikOuzLDrbN3A4Aoo=
Subject key identifier: 3A:22:6E:B3:B6:D1:6D:04:1B:80:32:6B:2B:66:61:23:92:EB:27:BD
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 0195E00F5CC2BD93C0C3C4018F6E9D8FF8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 12F7
Signing time: Sat 29 Mar 2025 04:00:57 +0000
Manifest this update: Sat 29 Mar 2025 04:00:57 +0000
Manifest next update: Sun 30 Mar 2025 04:00:57 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: nWPBHmCwd4OvGySdWDvePNUrpZJME4cneWWerVXJKN8=)
2: IfJsnDvBjhqNyvQwy7Sj6pVTE48.roa (hash: 72JQ+BiVOGXtzrf0r97edI+poiwfkKBvn0dEoFn6Vjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:5c:c2:bd:93:c0:c3:c4:01:8f:6e:9d:8f:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Mar 29 04:00:57 2025 GMT
Not After : Mar 30 04:00:57 2025 GMT
Subject: CN=3a226eb3b6d16d041b80326b2b66612392eb27bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:1c:8e:8c:95:26:2f:97:12:94:e2:21:69:
13:14:d6:d5:c2:f1:4a:81:7e:07:37:03:e6:47:b6:
2f:ab:41:39:25:46:16:9e:2f:65:c4:70:37:9d:f7:
ba:3e:95:16:9b:cb:c7:e9:de:2c:c5:6c:fd:40:cc:
61:82:61:7d:e7:3e:ba:df:08:8e:28:c9:bc:78:d7:
e6:58:2b:41:ab:fb:18:75:80:3c:52:81:ec:55:47:
44:89:6b:8c:c4:c7:8a:08:78:01:06:a7:f3:dc:cf:
ea:2a:2e:66:e9:a6:b1:d8:1f:68:de:63:f6:b5:a3:
eb:bf:48:e1:9d:ef:0c:19:e6:d2:6c:4c:f7:66:8c:
7f:7e:ef:dc:6b:55:44:38:a9:29:01:4f:1f:bd:06:
30:73:f5:0d:d3:67:8c:db:52:47:37:3e:c7:6c:b2:
d4:5c:8e:4e:59:86:8a:5d:4c:3d:8e:08:85:82:d4:
79:2b:49:bd:33:dc:be:e8:55:05:8a:d9:60:02:11:
ce:b3:df:69:3d:04:27:f8:e4:51:d6:26:ca:8b:27:
a2:4e:cb:23:cb:43:f5:0b:c0:86:5e:31:28:fd:c7:
3a:77:aa:4c:20:4a:f3:78:e3:0e:8e:97:3d:21:61:
f7:c2:45:39:1a:6a:17:41:aa:45:a9:47:a6:a7:bd:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:22:6E:B3:B6:D1:6D:04:1B:80:32:6B:2B:66:61:23:92:EB:27:BD
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:01:74:bb:1c:52:76:34:9f:69:4a:10:e2:10:c4:df:65:1c:
d6:40:ac:95:1f:68:39:95:9d:63:33:cc:37:e5:24:c2:a8:7a:
38:1a:a9:56:9b:39:b3:2c:b7:9e:b5:f5:07:f3:6f:ea:bc:3d:
9c:35:34:fc:2d:c3:9b:e4:b3:7e:c4:25:d0:cb:72:28:c8:37:
fd:f4:6d:19:fc:8e:2e:7e:40:e2:c4:0d:66:48:38:be:db:36:
1e:94:c5:4f:b9:93:af:06:66:c8:e0:aa:e4:90:d4:83:c4:fa:
7d:87:12:c4:14:d0:d0:9a:b7:60:ef:0d:44:1d:6b:b0:33:c5:
60:9e:c4:a1:90:8d:de:3c:b0:e3:a0:c3:94:e1:13:78:86:9e:
22:24:c2:ac:3e:cd:73:6a:aa:6f:d4:d6:4d:c8:df:05:23:c9:
8f:d7:ed:d3:fd:8b:f8:c4:c5:a1:f0:5f:01:25:3c:7c:d3:df:
e4:bf:cd:9c:e9:12:18:47:7b:f0:05:e5:a8:43:0d:7f:b6:ab:
2c:1e:c0:d5:6e:88:01:2b:30:cd:2a:d3:dd:f5:06:c2:3b:7b:
35:db:25:1f:5e:78:44:86:c6:8b:81:4a:02:a7:9f:79:f4:f3:
e7:97:7e:cd:39:1f:8f:a7:8e:93:25:99:61:5a:ac:b8:0f:f7:
e3:e0:61:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD1zCvZPAw8QBj26dj/jNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3
NjQ4NTkwHhcNMjUwMzI5MDQwMDU3WhcNMjUwMzMwMDQwMDU3WjAzMTEwLwYDVQQD
EygzYTIyNmViM2I2ZDE2ZDA0MWI4MDMyNmIyYjY2NjEyMzkyZWIyN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+gcjoyVJi+XEpTiIWkTFNbVwvFK
gX4HNwPmR7Yvq0E5JUYWni9lxHA3nfe6PpUWm8vH6d4sxWz9QMxhgmF95z663wiO
KMm8eNfmWCtBq/sYdYA8UoHsVUdEiWuMxMeKCHgBBqfz3M/qKi5m6aax2B9o3mP2
taPrv0jhne8MGebSbEz3Zox/fu/ca1VEOKkpAU8fvQYwc/UN02eM21JHNz7HbLLU
XI5OWYaKXUw9jgiFgtR5K0m9M9y+6FUFitlgAhHOs99pPQQn+ORR1ibKiyeiTssj
y0P1C8CGXjEo/cc6d6pMIErzeOMOjpc9IWH3wkU5GmoXQapFqUemp724SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoibrO20W0EG4AyaytmYSOS6ye9MB8GA1UdIwQY
MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut
OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm
LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAF0uxxS
djSfaUoQ4hDE32Uc1kCslR9oOZWdYzPMN+Ukwqh6OBqpVps5syy3nrX1B/Nv6rw9
nDU0/C3Dm+SzfsQl0MtyKMg3/fRtGfyOLn5A4sQNZkg4vts2HpTFT7mTrwZmyOCq
5JDUg8T6fYcSxBTQ0Jq3YO8NRB1rsDPFYJ7EoZCN3jyw46DDlOETeIaeIiTCrD7N
c2qqb9TWTcjfBSPJj9ft0/2L+MTFofBfASU8fNPf5L/NnOkSGEd78AXlqEMNf7ar
LB7A1W6IASswzSrT3fUGwjt7NdslH154RIbGi4FKAqefefTz55d+zTkfj6eOkyWZ
YVqsuA/34+Bheg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:40 2025 by rpki-client