Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/huI__HiVElCNkKo9NSA0VVayCAw.mft
File: huI__HiVElCNkKo9NSA0VVayCAw.mft (raw, json)
Hash identifier: 135JrFeKXf0y1VIjksn3bPYUs7YNfgojani0zRGoHyM=
Subject key identifier: 27:F9:F7:4B:19:DB:81:E4:0C:E8:34:AA:AA:F2:30:9F:E8:7F:C9:CB
Authority key identifier: 86:E2:3F:FC:78:95:12:50:8D:90:AA:3D:35:20:34:55:56:B2:08:0C
Certificate issuer: /CN=86e23ffc789512508d90aa3d3520345556b2080c
Certificate serial: 018E8337D6FB3368B1A3E152FF6D89E59C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huI__HiVElCNkKo9NSA0VVayCAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/huI__HiVElCNkKo9NSA0VVayCAw.mft
Manifest number: 07D2
Signing time: Thu 28 Mar 2024 04:00:58 +0000
Manifest this update: Thu 28 Mar 2024 04:00:58 +0000
Manifest next update: Fri 29 Mar 2024 04:00:58 +0000
Files and hashes: 1: I9IIPwm0T9Xjyf3QPKYPk73bM6c.roa (hash: d9tjKuVP8WxsOzrQtow+Tvi5NehKEWxxxH8F7V+5dHc=)
2: huI__HiVElCNkKo9NSA0VVayCAw.crl (hash: oIko6bkPo7b6CktFi2aq9a1avQJx8slCBoQ9NhmBIrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:37:d6:fb:33:68:b1:a3:e1:52:ff:6d:89:e5:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e23ffc789512508d90aa3d3520345556b2080c
Validity
Not Before: Mar 28 04:00:58 2024 GMT
Not After : Mar 29 04:00:58 2024 GMT
Subject: CN=27f9f74b19db81e40ce834aaaaf2309fe87fc9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:a5:72:e4:08:93:4c:88:8d:98:4e:47:fb:
91:98:24:18:e7:d3:09:c2:a1:d9:08:50:69:37:19:
68:e7:e0:59:db:58:69:e5:7e:01:b8:b0:73:7a:ad:
84:22:40:1d:43:e8:f5:02:d4:2a:b4:01:91:53:e9:
fd:2b:22:4b:b5:95:56:a2:11:3a:cb:28:82:b6:b3:
8b:67:71:fb:94:14:79:c6:e7:72:98:d6:f6:e9:17:
b2:72:45:38:fd:9d:ec:46:d1:59:06:ae:8f:ce:ba:
1f:37:43:a4:fb:e7:e7:da:a5:c5:1b:e9:42:2e:43:
bb:37:51:09:17:ac:8f:37:ac:62:4c:38:37:4b:5a:
c7:c5:36:5c:d3:f0:a8:41:68:1b:cd:31:b0:36:73:
8c:56:d1:b1:1d:40:de:4e:38:11:16:6e:22:fb:ac:
1e:e2:e2:be:ba:36:5a:09:4a:28:ae:f2:76:fd:0d:
21:05:ed:fe:66:aa:70:19:88:1d:ba:db:9d:59:11:
cc:f5:5e:06:99:2d:73:4e:2f:d6:ab:22:3e:9d:57:
ba:07:43:29:5a:93:ec:d0:cd:82:4a:59:8b:f8:97:
3c:96:5e:d7:c1:10:cd:bf:7d:97:21:bf:e4:a6:60:
c7:b6:28:a4:17:64:a6:69:bb:0b:22:bf:61:fb:af:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:F7:4B:19:DB:81:E4:0C:E8:34:AA:AA:F2:30:9F:E8:7F:C9:CB
X509v3 Authority Key Identifier:
keyid:86:E2:3F:FC:78:95:12:50:8D:90:AA:3D:35:20:34:55:56:B2:08:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huI__HiVElCNkKo9NSA0VVayCAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/huI__HiVElCNkKo9NSA0VVayCAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/huI__HiVElCNkKo9NSA0VVayCAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bc:fd:d8:89:20:fc:d3:bc:fc:a9:aa:6b:65:64:c6:92:06:
32:a1:1a:eb:58:cb:b3:d3:2c:4e:c2:76:66:4d:2f:a9:a6:ef:
f7:28:07:88:f5:79:7a:6d:d5:e7:11:92:69:b9:2d:1d:a6:80:
37:43:f2:ce:e4:71:d7:a9:e4:cd:56:0d:40:5b:b4:5c:94:a2:
00:17:73:9d:73:26:21:bf:5b:db:ff:1d:d1:7c:b9:a6:16:7d:
f2:b7:b7:10:23:a6:78:d6:1c:5d:ec:5e:68:ba:f8:8b:9c:0d:
6f:02:89:d7:84:67:e8:20:10:1d:0a:00:7f:3b:00:68:35:a4:
3d:7a:1a:73:7d:5d:e3:31:33:c0:43:fa:35:d4:aa:f7:e0:18:
aa:f4:b9:0b:98:39:2d:44:30:ba:4e:dd:f7:86:e6:e4:9d:14:
16:e3:3c:b3:83:e8:ae:c6:82:2b:30:64:80:c0:a6:61:3f:c7:
df:e2:37:50:56:d5:49:e8:99:2b:20:51:75:17:eb:76:a2:43:
e7:a8:42:9e:9e:07:f0:63:41:f8:68:34:29:84:ab:ee:6b:6f:
da:70:df:35:cb:7f:9c:2c:60:c0:b3:b6:d0:3d:91:22:b2:57:
ed:f6:d1:0c:92:b3:d5:22:2b:73:f7:a1:80:70:7f:a9:f1:44:
f9:b8:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:11 2024 by rpki-client on console-ams.rpki-client.org