Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: LoIw/SUR2E4NW9ikdQx09v8q/Q2bPtnRE0snd5y8uxE=
Subject key identifier: 41:D2:80:75:C8:9D:27:A5:95:34:61:79:69:38:C8:A6:78:80:7B:94
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01962F063C8267C2819BFE0A46ACF1EC04FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1096
Signing time: Sun 13 Apr 2025 12:00:59 +0000
Manifest this update: Sun 13 Apr 2025 12:00:59 +0000
Manifest next update: Mon 14 Apr 2025 12:00:59 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: DUK/3KMP9gozywxMc8uNsQVlohWOoc0auORd3GsKUGc=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:3c:82:67:c2:81:9b:fe:0a:46:ac:f1:ec:04:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Apr 13 12:00:59 2025 GMT
Not After : Apr 14 12:00:59 2025 GMT
Subject: CN=41d28075c89d27a5953461796938c8a678807b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:bb:59:3b:62:c5:30:da:99:25:1c:af:1b:
1b:88:ff:8c:d4:13:89:a4:94:a8:87:a7:72:9f:ab:
06:91:51:29:b7:10:51:bd:59:e8:eb:18:78:37:44:
e8:27:3e:10:73:fe:61:3e:fa:5a:30:03:8f:4f:2a:
ea:81:4d:d2:aa:0d:73:3f:ae:ad:43:5a:34:0e:01:
38:24:3f:6c:23:ed:46:74:99:23:4c:bc:33:78:81:
48:32:eb:c1:47:25:e2:a6:6d:b6:e0:81:c3:e3:86:
5b:d6:0a:04:28:52:22:db:15:66:df:1a:f6:ac:30:
12:25:5a:82:6d:23:cc:ce:f0:a4:fd:28:47:99:48:
d6:ef:fa:4c:9e:6b:6b:52:a2:2a:b4:69:38:4f:12:
a1:1e:45:bb:4d:ac:b5:6e:01:9b:2f:f4:95:30:49:
f9:f3:1a:7e:21:67:3d:27:ab:26:6d:06:75:77:70:
51:cf:3d:6b:19:af:dc:ba:09:cc:e1:6b:63:71:57:
96:76:11:19:d9:ca:0f:15:62:10:c3:3a:db:59:98:
ad:8d:1b:b3:ed:9d:1a:32:c9:a4:63:b6:4f:dc:f8:
67:99:c0:7d:7b:fd:6a:f2:06:21:e2:42:ee:ff:48:
9f:ea:3f:95:22:8f:99:8d:a3:b9:83:2d:40:6f:39:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:80:75:C8:9D:27:A5:95:34:61:79:69:38:C8:A6:78:80:7B:94
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:14:22:7f:37:38:ba:d3:1f:7b:04:f7:f7:90:78:e6:01:fb:
94:8a:80:51:ff:7e:03:61:87:02:11:93:40:d8:e6:06:6c:22:
24:c0:e6:7d:d0:df:1c:f4:11:e8:b2:27:5f:ff:16:80:d6:97:
d3:69:9a:11:72:27:53:4c:43:9e:b5:ef:49:b4:10:cc:40:0a:
3a:72:6f:1b:c6:9b:70:5d:83:39:ce:87:5b:1e:99:55:0e:b0:
bd:4a:ae:e1:3a:47:a5:a3:c9:30:1c:fa:99:ff:7e:8e:cc:6a:
be:38:3d:26:b0:5a:c1:5f:fe:16:cc:53:3b:31:4f:c7:32:ac:
42:f4:b8:da:f4:52:ee:c1:7b:01:fe:c2:83:f8:0b:f1:fd:fd:
4e:da:8a:eb:04:83:0a:cf:95:7a:00:5b:fb:e1:46:ae:a1:1e:
3c:63:76:24:3d:fc:fe:d3:f9:15:81:9d:76:c6:f0:19:a1:ba:
34:70:dd:4b:92:c0:1d:4b:67:a7:14:10:03:0d:cc:6f:f1:6c:
c1:f9:1c:4d:a3:b4:9c:f5:72:a1:8b:df:e4:2b:09:9e:e3:0c:
de:6e:5c:50:0c:6f:b0:8d:7e:56:2a:4f:50:35:f8:3d:0c:80:
24:cd:77:02:2f:5d:3f:7b:ed:0f:51:16:c2:21:e6:b8:a9:c8:
34:a8:56:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBjyCZ8KBm/4KRqzx7AT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm
NmU5MjIwHhcNMjUwNDEzMTIwMDU5WhcNMjUwNDE0MTIwMDU5WjAzMTEwLwYDVQQD
Eyg0MWQyODA3NWM4OWQyN2E1OTUzNDYxNzk2OTM4YzhhNjc4ODA3Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIK7WTtixTDamSUcrxsbiP+M1BOJ
pJSoh6dyn6sGkVEptxBRvVno6xh4N0ToJz4Qc/5hPvpaMAOPTyrqgU3Sqg1zP66t
Q1o0DgE4JD9sI+1GdJkjTLwzeIFIMuvBRyXipm224IHD44Zb1goEKFIi2xVm3xr2
rDASJVqCbSPMzvCk/ShHmUjW7/pMnmtrUqIqtGk4TxKhHkW7Tay1bgGbL/SVMEn5
8xp+IWc9J6smbQZ1d3BRzz1rGa/cugnM4WtjcVeWdhEZ2coPFWIQwzrbWZitjRuz
7Z0aMsmkY7ZP3PhnmcB9e/1q8gYh4kLu/0if6j+VIo+ZjaO5gy1AbzmgyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHSgHXInSellTRheWk4yKZ4gHuUMB8GA1UdIwQY
MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt
ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw
LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBQifzc4
utMfewT395B45gH7lIqAUf9+A2GHAhGTQNjmBmwiJMDmfdDfHPQR6LInX/8WgNaX
02maEXInU0xDnrXvSbQQzEAKOnJvG8abcF2DOc6HWx6ZVQ6wvUqu4TpHpaPJMBz6
mf9+jsxqvjg9JrBawV/+FsxTOzFPxzKsQvS42vRS7sF7Af7Cg/gL8f39TtqK6wSD
Cs+VegBb++FGrqEePGN2JD38/tP5FYGddsbwGaG6NHDdS5LAHUtnpxQQAw3Mb/Fs
wfkcTaO0nPVyoYvf5CsJnuMM3m5cUAxvsI1+VipPUDX4PQyAJM13Ai9dP3vtD1EW
wiHmuKnINKhWRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net