Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.mft
File: R_hDzOCcKV0thtk1QRabwaD1ork.mft (raw, json)
Hash identifier: xWRBTlh1LaMTND5R/rWJXdob97N+POnMsoPcVZRvQZQ=
Subject key identifier: 54:77:04:5D:71:11:E3:23:80:D1:9B:22:07:3A:D5:10:78:D1:16:95
Authority key identifier: 47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
Certificate issuer: /CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Certificate serial: 01888AA38E7F7617D38EE86BCD1F9B666B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.mft
Manifest number: 0D53
Signing time: Mon 05 Jun 2023 08:19:14 +0000
Manifest this update: Mon 05 Jun 2023 08:19:14 +0000
Manifest next update: Tue 06 Jun 2023 08:19:14 +0000
Files and hashes: 1: 5QsOJFYXXw8SnmPzUIg-ZC_0gCs.roa (hash: BFujvvmm9HdJ3k/f6GTgwBVx6rYNVLqyWZmFmVpbiqA=)
2: R_hDzOCcKV0thtk1QRabwaD1ork.crl (hash: mvLE/uzv2q+QRnd2dmrOEuwHpxGLvv8Y3u6ip2tA7/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:a3:8e:7f:76:17:d3:8e:e8:6b:cd:1f:9b:66:6b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f843cce09c295d2d86d93541169bc1a0f5a2b9
Validity
Not Before: Jun 5 08:19:14 2023 GMT
Not After : Jun 6 08:19:14 2023 GMT
Subject: CN=5477045d7111e32380d19b22073ad51078d11695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:45:ae:0d:1d:73:f3:eb:30:78:28:16:cb:
6a:3f:4c:6a:c9:d6:34:3e:13:35:29:08:1e:b5:8c:
96:6e:2f:ee:42:a7:9a:ad:a4:31:33:7b:4d:06:f9:
41:15:97:9b:3d:59:da:08:64:de:ca:ca:22:21:ff:
af:d1:88:ea:ac:53:f1:37:fb:1f:c1:f9:99:d6:80:
a4:70:66:46:10:fd:23:42:20:db:95:a4:4f:22:74:
9d:cf:27:e8:af:ff:d9:81:c6:83:62:56:db:38:84:
de:49:f2:39:4b:4a:61:c8:ad:a3:f5:d1:e2:cb:a3:
33:8b:f1:1e:24:d6:dd:e1:58:d2:33:d7:64:2b:ef:
00:cd:67:88:57:3e:77:33:b5:2f:98:12:84:cc:12:
05:ed:82:7b:c1:63:9c:a9:d7:84:16:92:ac:0b:d8:
c0:1c:69:f3:d4:b2:37:2b:bd:f0:15:27:10:1e:85:
c4:63:d9:fc:1e:87:e0:77:9b:e0:5b:13:da:9f:ea:
14:a9:b0:64:10:cc:98:e1:50:64:af:d4:2f:7c:8e:
8d:8b:0a:a2:df:d9:c5:c9:e7:80:18:2b:35:59:e1:
34:49:2a:c9:e0:48:25:37:0b:32:5d:3d:2b:33:b1:
28:b9:f3:19:bf:87:80:69:29:64:51:4d:ef:34:5c:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:77:04:5D:71:11:E3:23:80:D1:9B:22:07:3A:D5:10:78:D1:16:95
X509v3 Authority Key Identifier:
keyid:47:F8:43:CC:E0:9C:29:5D:2D:86:D9:35:41:16:9B:C1:A0:F5:A2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hDzOCcKV0thtk1QRabwaD1ork.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/36f7ab-566b-49a5-a137-8f153d37a9a3/1/R_hDzOCcKV0thtk1QRabwaD1ork.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:68:30:b8:72:5d:62:9f:51:b3:64:ac:b8:d6:c1:54:4b:74:
aa:25:f4:fd:f3:75:b7:bd:ff:6d:8e:ff:51:bd:da:38:ee:b3:
da:41:40:c2:7f:5b:f6:17:0b:5f:d2:17:22:ee:ed:a5:22:01:
cd:61:14:54:f9:c5:cd:a1:63:2a:3a:5e:7a:9e:b8:48:dc:b1:
a8:81:98:e0:ac:ac:8e:f8:e0:ea:94:b8:02:d6:c5:af:da:e1:
3e:2f:40:2c:3c:00:0e:ec:29:b5:9b:88:2c:18:c2:7f:d2:5c:
7d:ef:37:02:dd:fc:98:44:05:83:c4:ed:77:9e:29:bd:68:06:
09:4f:de:9f:38:9e:54:9c:df:00:b6:51:60:11:6f:bd:0c:01:
53:77:58:9d:3b:28:ec:fc:09:e0:07:33:c5:42:a3:63:5a:4c:
25:f8:39:73:7e:1c:5f:29:ff:ce:39:fe:12:7b:5a:20:3b:15:
29:a0:3a:5a:82:fa:a4:46:70:d7:f8:8f:5d:4c:84:56:a2:43:
16:b0:6d:0d:a6:ac:fd:9f:82:61:6f:3b:df:e2:34:5b:7b:e9:
c5:44:69:53:46:ba:e3:cc:55:79:7d:de:90:26:48:cc:24:96:
44:df:56:c0:a4:5a:91:0f:f9:ab:0a:ed:16:86:b0:fd:a3:59:
dd:67:0d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:45 2025 by rpki-client