Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/hmSdeF1HoNJjTR2HdgnI1gn0SHE.mft
File: hmSdeF1HoNJjTR2HdgnI1gn0SHE.mft (raw, json)
Hash identifier: rF4GSW8csbjSrtHf0mB7zkb1cqeHrDBMSzSAbqcmKSg=
Subject key identifier: 37:C3:96:28:12:A7:FA:04:81:4C:54:6B:8A:C1:AC:D1:9D:63:C2:2C
Authority key identifier: 86:64:9D:78:5D:47:A0:D2:63:4D:1D:87:76:09:C8:D6:09:F4:48:71
Certificate issuer: /CN=86649d785d47a0d2634d1d877609c8d609f44871
Certificate serial: 018C6BD8A675671D3D8D19FAC53A17EE6361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmSdeF1HoNJjTR2HdgnI1gn0SHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/hmSdeF1HoNJjTR2HdgnI1gn0SHE.mft
Manifest number: 02F4
Signing time: Fri 15 Dec 2023 05:00:09 +0000
Manifest this update: Fri 15 Dec 2023 05:00:09 +0000
Manifest next update: Sat 16 Dec 2023 05:00:09 +0000
Files and hashes: 1: S6_fg0Uprg0HIIzVepfFtLtE8rE.roa (hash: +40PJ27P4H07yCKGeNEVA0iLBLWDu4oSuGarbnPEhuA=)
2: dQdmnxJgETNqghPz26MG4DxCZng.roa (hash: TUggfP51TM46N4aLEREP2foZjc2doxccksA/8clysWs=)
3: hmSdeF1HoNJjTR2HdgnI1gn0SHE.crl (hash: IWWmdBsDJO+p4PzepOtmLZeR2aYvocAymr6qTba71kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6b:d8:a6:75:67:1d:3d:8d:19:fa:c5:3a:17:ee:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86649d785d47a0d2634d1d877609c8d609f44871
Validity
Not Before: Dec 15 05:00:09 2023 GMT
Not After : Dec 16 05:00:09 2023 GMT
Subject: CN=37c3962812a7fa04814c546b8ac1acd19d63c22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:2f:00:7d:3e:b7:cc:07:ea:b5:38:33:e6:
20:57:71:4d:6a:66:f9:1b:f7:45:f0:30:73:02:e3:
d6:d8:2f:5f:2b:08:45:28:4e:7a:69:12:e2:d7:94:
a0:c0:f2:ba:eb:2d:39:65:1c:ea:88:f3:19:cf:53:
e7:79:ee:57:96:86:dd:13:29:36:4d:b0:57:0e:37:
d6:c3:a9:10:a5:64:ef:76:48:76:6d:ba:5a:e1:6a:
28:23:3e:e3:2f:b3:c6:f9:35:12:d2:5b:69:44:61:
b0:9d:58:c0:e5:26:37:61:ba:35:22:a6:22:cc:89:
70:2e:bd:5c:98:72:d7:04:74:90:d7:bd:45:26:20:
51:e0:cf:af:23:19:39:6e:7b:71:62:3d:2a:f2:e2:
44:58:fd:cb:7e:a1:9c:57:ae:83:0f:e3:10:0b:1f:
87:46:7d:16:2c:52:67:e0:87:05:c3:6c:72:f7:9b:
ab:7b:57:e5:f8:b3:a5:9c:1f:7a:37:51:58:e8:26:
12:4f:cc:aa:01:0c:40:fa:a3:a3:fd:42:1f:b5:d3:
fc:b7:1b:80:17:e9:5a:ac:5c:43:1e:af:b8:92:dd:
30:16:1d:b0:33:5b:d0:50:4d:c2:8b:51:fc:ea:22:
22:ed:ba:50:47:2a:ea:f7:87:c1:06:b0:00:f4:a9:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:96:28:12:A7:FA:04:81:4C:54:6B:8A:C1:AC:D1:9D:63:C2:2C
X509v3 Authority Key Identifier:
keyid:86:64:9D:78:5D:47:A0:D2:63:4D:1D:87:76:09:C8:D6:09:F4:48:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmSdeF1HoNJjTR2HdgnI1gn0SHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/hmSdeF1HoNJjTR2HdgnI1gn0SHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89181b-a5ee-4eb7-959d-a6db4ad0153f/1/hmSdeF1HoNJjTR2HdgnI1gn0SHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dc:f3:8e:c3:02:af:42:af:24:6b:38:a1:00:a9:06:60:45:
d4:9f:53:33:a9:49:92:b4:50:35:2f:b9:5a:4c:82:f0:a1:66:
ac:05:19:85:5c:11:58:bb:aa:cf:db:9d:cf:5d:b2:ca:98:9f:
69:5f:e7:09:16:9f:72:63:0d:47:1a:e5:75:40:71:f2:89:92:
0e:21:30:95:a2:bd:c5:a0:70:ba:4a:5a:ec:42:36:72:48:61:
ab:58:e8:91:94:57:4d:ff:6c:17:72:b3:a7:a7:c3:2f:c7:5e:
a2:f6:a8:03:ee:19:f8:1e:2d:7a:19:5a:75:27:7a:73:74:6f:
f3:e3:27:78:d1:c3:f6:75:88:12:e6:de:b4:d7:25:94:f8:3b:
9d:30:36:3e:10:41:a1:65:44:2a:ba:53:8e:3e:9e:52:96:da:
8b:81:17:61:15:6d:90:77:61:a4:b9:ed:68:90:ea:66:a8:0e:
6e:09:f7:4e:23:21:03:e4:28:22:ae:cd:3b:4f:48:2c:7e:49:
0d:ca:d8:32:b0:dc:2c:e2:de:4c:3a:80:be:49:c7:d8:e2:8e:
c9:b5:ea:82:c2:f2:8f:57:15:5b:61:db:b3:32:d5:ae:a5:a0:
4a:83:fd:29:8f:45:a2:ad:87:6c:bb:8e:1b:c9:9d:19:a4:64:
5c:51:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:33:16 2025 by rpki-client