Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft
File: hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft (raw, json)
Hash identifier: w8T+7eRdmwrgvrL4U4mpmWB2zUBjuvH4YRx1ZoZr+cE=
Subject key identifier: 01:F2:F8:3A:CF:68:AA:3A:95:55:9D:98:AE:EF:47:FF:2E:8B:D1:EA
Authority key identifier: 86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC
Certificate issuer: /CN=862b88563d6847558f99cf48edd4005409b1f4bc
Certificate serial: 018A6E04787371ED1B3427E0CFB25B0F8D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft
Manifest number: 0890
Signing time: Thu 07 Sep 2023 05:01:41 +0000
Manifest this update: Thu 07 Sep 2023 05:01:41 +0000
Manifest next update: Fri 08 Sep 2023 05:01:41 +0000
Files and hashes: 1: hiuIVj1oR1WPmc9I7dQAVAmx9Lw.crl (hash: tvpoIIQENj13w4VK7lcUxL9MKDkWbrDrQHefvwm2Vtk=)
2: plGuuPSFwPCZ8toehL2y50C_N9M.roa (hash: 7U7+P40lrXfldhNmY1QB8PztStLRKkikge6THZRArKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:04:78:73:71:ed:1b:34:27:e0:cf:b2:5b:0f:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862b88563d6847558f99cf48edd4005409b1f4bc
Validity
Not Before: Sep 7 05:01:41 2023 GMT
Not After : Sep 8 05:01:41 2023 GMT
Subject: CN=01f2f83acf68aa3a95559d98aeef47ff2e8bd1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:df:1c:d7:d2:d9:0b:bb:a0:c6:8a:bf:47:
33:1d:31:39:45:b8:ea:eb:3b:8d:e1:5f:16:c4:0c:
9d:7d:3a:f3:5f:91:2b:e3:12:5c:51:a0:20:2a:35:
04:37:eb:72:c9:5b:f8:ba:1e:07:07:4f:b4:c5:a5:
1e:27:83:38:96:36:4d:a7:ee:02:01:cf:1c:55:8f:
09:56:a4:82:36:07:cd:cc:0c:f3:90:c2:5c:db:92:
54:23:fa:fe:09:a8:87:b1:25:1a:d7:27:ac:27:5f:
6b:4f:fe:f8:87:23:ea:91:18:50:a2:be:1f:ad:8b:
3a:25:bf:cc:53:7b:52:37:aa:01:dc:f9:9b:82:fb:
cd:3a:68:de:58:76:01:fd:e2:ad:54:c7:3e:c3:61:
6d:fa:fc:8f:61:96:29:75:3c:91:04:3f:6e:ee:f7:
0a:06:d8:3c:e9:95:0e:30:9f:1f:a6:5c:0e:49:23:
37:08:b1:f8:76:88:3f:41:93:e6:36:2e:ef:86:29:
7a:95:57:64:93:50:7b:1e:d4:1a:41:6b:63:57:48:
9d:ad:cc:d6:fa:b0:fe:af:31:4d:07:05:bc:47:98:
94:7c:7e:d1:1e:9c:1c:b8:c0:39:47:16:65:3f:da:
42:1f:71:1f:ea:61:cf:6c:5e:a5:cf:20:8f:9f:83:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:F8:3A:CF:68:AA:3A:95:55:9D:98:AE:EF:47:FF:2E:8B:D1:EA
X509v3 Authority Key Identifier:
keyid:86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:d1:d4:37:79:c4:9b:3c:cd:62:4d:f5:dc:b4:dc:d2:97:
ab:af:89:85:77:40:1d:f4:c0:4a:a2:27:f4:12:3d:dd:9a:d6:
86:d2:81:18:9c:78:23:00:37:d9:2f:e3:3c:f9:f1:69:1e:e7:
08:08:af:6a:3d:36:a8:76:08:70:c6:3c:9d:fb:f8:98:fb:40:
58:59:2d:05:43:e7:cc:31:55:6d:17:00:c7:dc:d4:8d:ed:35:
4a:0b:6a:93:a7:d8:0b:da:ea:a8:9c:7d:14:e2:0b:01:2f:b0:
93:bb:66:7c:e3:d7:90:c8:55:7e:07:f0:98:a6:fd:f7:ad:10:
54:27:a4:aa:fb:68:5a:31:81:e2:11:e5:b4:0e:47:06:79:97:
e6:70:cc:a3:c8:62:11:e8:89:c4:e2:4f:e6:5f:e8:8c:6d:53:
e5:c6:07:37:79:89:65:9d:f6:6e:c6:1c:cc:2a:21:9a:c2:43:
26:b3:eb:67:b9:22:72:e4:ff:b1:80:2b:09:cd:50:a1:3b:13:
0c:11:ef:e1:62:26:01:1e:8e:20:a7:79:b0:d3:3e:0d:27:60:
72:56:36:fb:b4:91:94:1b:b1:03:ec:58:a6:a4:47:18:ec:c0:
00:06:69:0c:3f:e5:7d:20:51:eb:27:42:f4:ce:07:1c:25:ae:
7b:48:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:15 2025 by rpki-client