Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.mft
File: hUwQJA-FDfwNWVeo1a1OGErbAFc.mft (raw, json)
Hash identifier: eJ2f6tBIaU6ymJGvpWSon9LhHB2+lCsIYcjOviGVpH0=
Subject key identifier: 10:53:E3:B3:B5:CF:F8:AD:4B:3E:44:A1:64:43:1D:BA:00:7E:FE:1D
Authority key identifier: 85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
Certificate issuer: /CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Certificate serial: 019406480DD68AE63F961F2F1E8E8AFE8A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.mft
Manifest number: 13CD
Signing time: Fri 27 Dec 2024 04:02:52 +0000
Manifest this update: Fri 27 Dec 2024 04:02:52 +0000
Manifest next update: Sat 28 Dec 2024 04:02:52 +0000
Files and hashes: 1: YaPBTHjcq8yPSUfqfbgzYv7b_Kc.roa (hash: +cWr9xkD9WoxzDZXfGMket0sOpavJqpFbFO9onW0OKc=)
2: hUwQJA-FDfwNWVeo1a1OGErbAFc.crl (hash: lcLzaM07Ow+7RCQIRLSCtPKpOT+J4nLW5Hp69mV0/5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:48:0d:d6:8a:e6:3f:96:1f:2f:1e:8e:8a:fe:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Validity
Not Before: Dec 27 04:02:52 2024 GMT
Not After : Dec 28 04:02:52 2024 GMT
Subject: CN=1053e3b3b5cff8ad4b3e44a164431dba007efe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:2a:be:e6:19:63:41:ad:fc:4a:9d:d9:aa:
25:70:c7:46:22:18:a8:82:23:8a:b2:ee:28:ad:a5:
9f:bb:a0:91:f6:b4:f6:e4:dd:ff:e0:27:44:44:e0:
99:cd:31:c9:18:0f:06:67:e5:15:cd:f8:c4:32:a5:
2c:29:af:6e:c9:87:6d:82:27:53:96:21:99:19:1f:
25:92:18:a9:03:2c:4d:9c:90:9d:82:94:1c:91:75:
36:1b:42:7c:36:51:33:93:c2:b3:49:13:b0:06:58:
07:ca:6b:9a:75:d3:ee:cf:77:b2:53:52:ec:39:44:
4b:11:ae:7c:c2:f7:b1:83:48:5e:5e:e0:96:f7:6f:
bd:57:80:0c:1e:af:74:70:96:ed:9b:4c:1d:a7:d4:
f6:cb:98:40:b1:fc:8a:8e:d5:af:ec:f2:d0:4a:4e:
b4:d9:c7:60:2b:18:d9:a0:e2:83:c5:0c:07:f4:ca:
af:02:26:0c:ef:7f:ae:4e:f8:ab:d6:ef:fa:cb:b3:
8f:c3:a5:db:a9:08:7b:39:9d:13:7b:5a:e8:d0:1a:
69:63:3e:70:03:58:0c:d6:11:4f:a6:8c:d1:97:93:
8a:20:35:d1:b7:1f:e2:df:ae:af:c8:5a:68:c4:23:
2b:76:2f:f2:85:ec:99:3a:08:2b:ed:06:07:97:25:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:53:E3:B3:B5:CF:F8:AD:4B:3E:44:A1:64:43:1D:BA:00:7E:FE:1D
X509v3 Authority Key Identifier:
keyid:85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:00:ab:00:bc:ce:eb:c3:24:73:29:1f:ed:dd:1b:dd:bf:
da:88:dc:98:c1:71:16:10:5b:83:2a:01:b5:37:24:19:73:da:
4c:62:1b:4b:44:33:e3:86:c3:23:d8:80:4f:74:15:12:f2:ca:
d7:14:22:e8:1b:11:3f:84:0e:b4:c7:e1:bf:70:a2:8d:97:b8:
68:90:e6:8e:f5:e8:a7:f0:b0:79:29:29:22:fc:01:45:5b:ca:
34:08:34:ef:9c:38:a3:e7:51:13:7c:24:64:44:38:10:3a:ea:
d6:db:d0:82:f8:cb:13:b7:11:78:9e:93:7b:1f:49:26:c5:2f:
18:61:02:a9:99:02:07:33:66:c5:a0:c6:64:d4:83:57:18:f4:
65:fe:f7:64:5e:d3:ba:df:6e:33:d1:2e:fb:fe:ce:c1:4c:00:
be:27:f7:f7:60:1e:70:e2:f6:d5:b4:f9:57:6e:66:69:22:30:
fa:69:2f:f5:9f:95:26:df:b4:2d:9f:da:7e:3f:14:78:70:a9:
7e:bc:a7:09:3c:74:31:49:3e:b4:5d:09:ac:d0:7a:02:69:03:
2f:08:27:a5:78:b5:27:36:2a:79:97:2e:91:43:db:48:bf:4a:
12:32:e1:c6:42:98:51:bb:bf:5b:ce:ac:30:f3:93:44:9b:3f:
b2:74:28:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQGSA3WiuY/lh8vHo6K/ooeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMxMDI0MGY4NTBkZmMwZDU5NTdhOGQ1YWQ0ZTE4NGFk
YjAwNTcwHhcNMjQxMjI3MDQwMjUyWhcNMjQxMjI4MDQwMjUyWjAzMTEwLwYDVQQD
EygxMDUzZTNiM2I1Y2ZmOGFkNGIzZTQ0YTE2NDQzMWRiYTAwN2VmZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VwqvuYZY0Gt/Eqd2aolcMdGIhio
giOKsu4oraWfu6CR9rT25N3/4CdEROCZzTHJGA8GZ+UVzfjEMqUsKa9uyYdtgidT
liGZGR8lkhipAyxNnJCdgpQckXU2G0J8NlEzk8KzSROwBlgHymuaddPuz3eyU1Ls
OURLEa58wvexg0heXuCW92+9V4AMHq90cJbtm0wdp9T2y5hAsfyKjtWv7PLQSk60
2cdgKxjZoOKDxQwH9MqvAiYM73+uTvir1u/6y7OPw6XbqQh7OZ0Te1ro0BppYz5w
A1gM1hFPpozRl5OKIDXRtx/i366vyFpoxCMrdi/yheyZOggr7QYHlyWOBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBT47O1z/itSz5EoWRDHboAfv4dMB8GA1UdIwQY
MBaAFIVMECQPhQ38DVlXqNWtThhK2wBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3UUpBLUZEZndOV1ZlbzFhMU9HRXJiQUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81NTJkZDgtY2ViNC00NjE3LTllOWMt
MGY3ZWY0ZTk3NDU4LzEvaFV3UUpBLUZEZndOV1ZlbzFhMU9HRXJiQUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81NTJkZDgtY2ViNC00NjE3LTllOWMtMGY3ZWY0ZTk3NDU4
LzEvaFV3UUpBLUZEZndOV1ZlbzFhMU9HRXJiQUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDYAqwC8
zuvDJHMpH+3dG92/2ojcmMFxFhBbgyoBtTckGXPaTGIbS0Qz44bDI9iAT3QVEvLK
1xQi6BsRP4QOtMfhv3CijZe4aJDmjvXop/CweSkpIvwBRVvKNAg075w4o+dRE3wk
ZEQ4EDrq1tvQgvjLE7cReJ6Tex9JJsUvGGECqZkCBzNmxaDGZNSDVxj0Zf73ZF7T
ut9uM9Eu+/7OwUwAvif392AecOL21bT5V25maSIw+mkv9Z+VJt+0LZ/afj8UeHCp
frynCTx0MUk+tF0JrNB6AmkDLwgnpXi1JzYqeZcukUPbSL9KEjLhxkKYUbu/W86s
MPOTRJs/snQoog==
-----END CERTIFICATE-----
Generated at Thu May 8 05:54:40 2025 by rpki-client