Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
File: mapHxZ1qVFUYCFrAznnDAtswUuI.mft (raw, json)
Hash identifier: kB6/b2J2yFawTNnASxq4I9oJ1Q2McY57XYyLR0Mn9gc=
Subject key identifier: 11:DB:D3:22:A8:A7:45:CE:5C:6A:CE:24:28:D6:3B:AE:D8:A3:1D:16
Authority key identifier: 99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
Certificate issuer: /CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Certificate serial: 01870700FE6A3C243DF1E2206DDD0F9F25F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
Manifest number: 0CE3
Signing time: Wed 22 Mar 2023 01:48:38 +0000
Manifest this update: Wed 22 Mar 2023 01:48:38 +0000
Manifest next update: Thu 23 Mar 2023 01:48:38 +0000
Files and hashes: 1: XKkrrZozSEGFAR9nNPdXFLsvMVw.roa (hash: zK3aU9kHfCvoW+APmT3Bk7e7JLtyNHvHZZbFh3nWr68=)
2: Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa (hash: BIhka0NEFcKHbxYTttdXDXrum3AoCoHt712ike5LwdM=)
3: mapHxZ1qVFUYCFrAznnDAtswUuI.crl (hash: xB1E5qfoL+Wvdv6mqSnfRggjQuY35We+CQFwmwPuuUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:00:fe:6a:3c:24:3d:f1:e2:20:6d:dd:0f:9f:25:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Validity
Not Before: Mar 22 01:48:38 2023 GMT
Not After : Mar 23 01:48:38 2023 GMT
Subject: CN=11dbd322a8a745ce5c6ace2428d63baed8a31d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:ea:5d:7a:2c:30:c7:ae:4d:d0:94:82:cd:
62:de:8c:5b:aa:b3:e5:e9:1b:24:27:17:24:cb:75:
dd:c4:83:ae:5d:43:bf:77:86:07:8b:0b:15:b9:57:
a1:1f:7e:7a:cb:62:a6:98:ca:9c:fd:89:1d:9e:80:
53:d3:e4:0c:13:43:c5:d6:ea:b6:0f:46:25:42:b2:
40:c6:a8:9e:78:96:1f:4a:30:34:91:1d:1c:bc:4f:
6c:e4:61:f1:4c:2c:c9:33:9a:a7:a1:33:19:80:4b:
ad:f1:53:af:ff:b5:a5:71:6e:43:d6:5d:bf:b4:74:
6f:86:c4:d1:40:49:22:7e:c3:76:5a:38:7b:7f:10:
a8:87:e7:bf:cb:91:49:9b:68:09:d1:a8:b2:dd:31:
97:e3:86:4e:d8:61:a2:07:65:1d:7c:7b:8f:68:59:
c4:70:51:93:cc:ee:ac:f8:4b:92:6d:1a:f2:72:be:
94:0e:97:77:07:f4:e2:89:0c:11:25:16:a0:0b:85:
ad:e4:5c:23:d5:3c:42:36:68:00:ae:1a:03:fd:bb:
41:61:ae:76:56:8e:43:ad:90:65:79:3f:3c:bd:20:
29:7b:a4:77:54:e6:ce:e8:62:cd:78:d3:cd:98:2c:
f1:c2:5c:dd:97:03:78:2f:bb:e7:30:88:31:b4:53:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DB:D3:22:A8:A7:45:CE:5C:6A:CE:24:28:D6:3B:AE:D8:A3:1D:16
X509v3 Authority Key Identifier:
keyid:99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f3:ef:a2:5d:84:cc:b4:a1:dd:f0:01:b8:ef:57:ae:9f:33:
d4:e1:d9:d4:0e:c9:fa:eb:6b:03:86:c1:5f:9f:16:96:0a:94:
c1:93:2d:75:52:aa:8d:bc:8b:1a:e3:c1:8d:17:81:82:f8:c5:
ea:5e:c3:0e:a9:39:bb:a1:45:01:07:69:ab:54:60:df:af:5e:
a1:cf:81:91:37:59:93:c9:96:1f:a7:5a:d1:16:d5:2c:11:ee:
2e:79:12:4b:2d:f2:06:d1:fb:16:68:bf:20:f9:27:44:8c:d3:
a3:5b:6f:81:49:98:3b:35:f8:4a:70:c2:02:bd:85:73:be:63:
8a:bb:6f:65:65:ce:d7:b1:f6:e3:84:a7:25:95:26:28:c9:7f:
ba:a9:2d:b6:9f:35:23:09:f7:7f:89:59:a5:9f:8b:85:c1:78:
2b:7c:0b:ab:77:8b:62:99:f0:e6:b2:0d:48:9e:5f:f6:05:7c:
2a:42:3d:29:18:34:5d:ba:a2:28:d6:d2:31:15:23:c1:3c:75:
81:22:4c:52:7c:1d:5c:c7:b6:ef:bf:ae:22:ad:66:2c:65:81:
6e:f1:ca:fd:43:7b:70:99:95:3f:1b:df:07:9d:61:aa:b9:a4:
e4:5e:88:af:85:5e:dd:9b:10:c5:13:f5:b5:0e:16:a9:9d:6c:
fc:68:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:01 2025 by rpki-client