Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
File: ihSfdtOUQVHwreTeeDHT1Cy26N8.mft (raw, json)
Hash identifier: 5sqsbJ4em913A7rZC6GHCqGhYTC44d2IBtdv7yH3WPM=
Subject key identifier: ED:8C:62:3A:00:09:22:F6:DF:DC:AC:BF:FC:6C:28:80:6B:19:40:35
Authority key identifier: 8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF
Certificate issuer: /CN=8a149f76d3944151f0ade4de7831d3d42cb6e8df
Certificate serial: 018D9C1E0BBF9164427E938E43D53F214DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihSfdtOUQVHwreTeeDHT1Cy26N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
Manifest number: 086C
Signing time: Mon 12 Feb 2024 07:00:31 +0000
Manifest this update: Mon 12 Feb 2024 07:00:31 +0000
Manifest next update: Tue 13 Feb 2024 07:00:31 +0000
Files and hashes: 1: DvPO_8Qn3_vMKvAvnRsqhhaxSnU.roa (hash: 4BhsaS52wV1kOM+NkaivMtSQ7sfF7YLoC8dGjYe9BNc=)
2: ihSfdtOUQVHwreTeeDHT1Cy26N8.crl (hash: k1fdXPRJYXOIpyG63syXS9Bn7+G8xY0FxhimWNivCbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:1e:0b:bf:91:64:42:7e:93:8e:43:d5:3f:21:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a149f76d3944151f0ade4de7831d3d42cb6e8df
Validity
Not Before: Feb 12 07:00:31 2024 GMT
Not After : Feb 13 07:00:31 2024 GMT
Subject: CN=ed8c623a000922f6dfdcacbffc6c28806b194035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:7f:c2:d8:ad:12:d9:4f:45:fc:97:64:51:
c9:ed:c9:94:dd:92:32:40:c1:77:27:e2:5d:8a:86:
98:e4:12:94:8b:a1:a4:8a:73:7e:47:3c:a7:19:54:
ce:8a:e2:16:e2:de:48:00:68:bf:92:42:19:8a:99:
4b:84:22:d9:cf:af:9f:9c:54:e3:be:c0:4f:a1:6d:
af:71:3a:58:d5:65:db:ee:64:ef:92:7c:14:d0:93:
df:12:56:dd:cc:b4:44:89:8d:37:ef:a3:40:b5:50:
ce:74:86:c3:f9:55:fe:4e:2c:f7:17:1a:b6:ef:b4:
35:68:7a:63:9e:6b:cf:f7:e0:a6:df:26:64:c6:88:
7e:bb:4a:6c:77:30:06:84:9d:c4:64:2d:ef:9e:96:
5f:d3:e1:19:b1:5f:34:74:3d:cb:a0:52:50:2d:6b:
82:59:1f:5e:0b:3f:10:90:87:63:0f:87:4a:ef:15:
df:e3:2d:64:7e:90:cb:61:1d:c3:f4:6e:d6:45:41:
a1:df:07:59:3a:7d:8d:7d:f2:8c:51:10:04:ef:b5:
10:4c:f8:77:9f:8e:44:4d:e4:51:b8:37:e4:1d:cb:
dd:b2:82:39:09:36:ec:40:9f:3c:23:bf:13:45:d8:
a1:61:37:2e:ed:ff:37:97:9a:5b:ea:0d:9c:ce:cb:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:62:3A:00:09:22:F6:DF:DC:AC:BF:FC:6C:28:80:6B:19:40:35
X509v3 Authority Key Identifier:
keyid:8A:14:9F:76:D3:94:41:51:F0:AD:E4:DE:78:31:D3:D4:2C:B6:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihSfdtOUQVHwreTeeDHT1Cy26N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9c358e-ff82-4a52-bdc4-bfd27e866aef/1/ihSfdtOUQVHwreTeeDHT1Cy26N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:fa:2d:b9:1e:7a:41:bc:a4:68:ab:da:ed:6c:9f:b2:b7:
51:4b:10:bb:9d:65:86:57:2e:22:a3:1f:ff:99:de:b4:de:c7:
a8:39:d3:15:93:28:a0:f8:1f:bd:e0:85:4c:57:5d:7f:1e:86:
b0:6a:27:d1:8c:73:25:4a:3d:5d:9a:74:d3:95:84:9e:6c:80:
e1:4f:9b:13:4f:77:db:be:a8:46:b9:af:66:8e:58:ee:9d:03:
9a:15:32:44:e1:ac:4b:9a:1b:71:28:84:8f:8a:8e:e9:32:9b:
e9:66:8a:c5:a5:77:d3:7f:c1:af:19:48:f5:53:72:88:ee:db:
eb:e0:6c:58:bb:9e:c8:cd:85:a3:34:1f:0e:bf:de:46:ab:81:
ae:70:34:44:b5:f5:8c:c6:05:8a:16:c3:19:49:96:12:a0:59:
e5:71:22:e7:39:22:dc:78:f5:f3:9e:43:1d:f5:9b:3e:d1:81:
73:e9:b2:e9:f3:1e:98:d6:26:32:f3:87:64:58:a7:c0:9a:58:
ae:cb:41:8a:b7:bf:b9:b1:ec:a2:e1:c6:6e:8f:7b:73:80:47:
a6:e1:f1:d3:89:67:2d:74:ae:2b:bf:23:3a:1d:a0:b0:bc:84:
bd:91:f9:81:50:2b:73:e4:67:64:0e:f2:07:98:e7:c6:79:13:
ac:43:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:29:23 2025 by rpki-client