Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.mft
File: HTpxBuIabDIvmOS8G5yWXXKIkno.mft (raw, json)
Hash identifier: mvfYtszXAR8Ad73VjUlvxF7hA1+qxU9r0Z9HnfL13a8=
Subject key identifier: B0:D2:16:BC:BC:66:62:46:AE:C0:5B:CC:24:8D:FA:BA:1A:AC:3E:CC
Authority key identifier: 1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
Certificate issuer: /CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Certificate serial: 018BEA3F2D613F5A8DAFEFA05E37FEB6F6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.mft
Manifest number: 0858
Signing time: Mon 20 Nov 2023 01:01:30 +0000
Manifest this update: Mon 20 Nov 2023 01:01:30 +0000
Manifest next update: Tue 21 Nov 2023 01:01:30 +0000
Files and hashes: 1: 1-O-kiS05OrGFZfFElMiQjOaM9CQ.roa (hash: vVTgjP9bZ0X6erabSOuQoyBw0E1B6CEV+gwMDgeo+Tk=)
2: HTpxBuIabDIvmOS8G5yWXXKIkno.crl (hash: g8lUyZu59ow0nDf2M8kZEnuW8XGeHmFIpop77a2SDWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:3f:2d:61:3f:5a:8d:af:ef:a0:5e:37:fe:b6:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3a7106e21a6c322f98e4bc1b9c965d7288927a
Validity
Not Before: Nov 20 01:01:30 2023 GMT
Not After : Nov 21 01:01:30 2023 GMT
Subject: CN=b0d216bcbc666246aec05bcc248dfaba1aac3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:9f:e8:8d:04:69:11:4d:95:d7:c8:60:50:
14:84:94:90:9d:53:de:a1:43:57:9a:40:12:2a:40:
e8:72:9a:b9:a7:8a:72:c8:8e:8e:0a:d9:9c:32:a2:
12:45:a6:ad:3a:aa:3b:85:3d:1e:09:02:17:18:5f:
b2:47:3b:1c:41:2c:f3:ca:77:96:c2:d2:4e:13:40:
b3:1a:9d:95:1c:4e:f3:0a:64:73:75:ef:4c:33:c5:
5e:66:82:d7:1a:0e:78:65:66:1d:f9:31:be:e7:6a:
f7:56:34:fd:0a:26:df:44:c1:f3:4f:77:f8:db:8e:
78:22:d7:c9:b9:a6:6f:4b:ea:3e:52:a5:78:04:fc:
35:e7:f2:f4:c0:36:44:41:a3:6d:81:ec:43:fd:4c:
43:a6:05:5b:fc:65:f1:e3:4a:d2:69:b8:03:36:43:
ef:0d:9e:08:89:83:c7:d9:1e:fa:0a:66:69:be:f1:
5e:bf:22:86:24:48:d0:03:3d:b7:25:be:57:f1:ba:
a6:39:a2:50:5c:63:2a:1e:23:a2:1c:1c:a2:25:65:
54:6e:d8:9d:07:38:92:69:ab:98:bb:2b:d8:67:f5:
34:a7:b6:b7:02:1a:83:f0:27:cb:66:a3:d4:7a:2f:
e5:a2:e2:d1:45:f9:86:ef:d0:35:f2:6c:dd:17:2a:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:16:BC:BC:66:62:46:AE:C0:5B:CC:24:8D:FA:BA:1A:AC:3E:CC
X509v3 Authority Key Identifier:
keyid:1D:3A:71:06:E2:1A:6C:32:2F:98:E4:BC:1B:9C:96:5D:72:88:92:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTpxBuIabDIvmOS8G5yWXXKIkno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4f5d41-eec3-4e62-aa01-5c46da3bc5a5/1/HTpxBuIabDIvmOS8G5yWXXKIkno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:24:c5:ff:c0:2c:2e:c0:30:54:26:20:fb:b3:84:ce:66:1e:
77:c2:f0:12:c2:aa:1e:5f:e7:4b:fb:00:4f:3a:9f:b2:5b:9c:
d9:32:f3:9b:aa:ba:ad:84:50:e6:64:b9:68:43:1e:4a:0c:0b:
63:b2:85:ca:38:24:90:b7:9f:25:b1:1f:ad:f6:cb:50:7d:1a:
50:96:93:34:19:1a:c0:d5:57:49:9d:64:01:63:7e:28:96:ca:
66:67:07:94:32:32:b8:6f:89:5c:ee:0b:69:17:69:73:ab:be:
c8:af:fb:4f:8e:8a:ee:81:ec:89:03:da:e9:c4:df:e7:38:e3:
b7:3e:e7:d9:67:41:28:43:aa:23:33:00:a3:5a:ae:b8:6e:f2:
84:09:0b:bd:2f:d6:e6:e6:cc:87:3f:8b:6c:6e:e0:8e:8a:7a:
3c:9d:19:73:a6:db:9c:84:1f:61:b3:a0:90:e3:fc:8d:45:9c:
60:5b:f7:99:b0:6d:25:75:3e:d1:2e:a5:c7:c3:b8:f1:e3:bf:
24:ab:83:83:9c:a4:58:93:67:03:d9:b6:e2:3d:67:0b:fa:60:
a3:97:6b:f1:e2:04:6c:4d:2f:1d:5f:07:e1:03:47:d0:46:7a:
f2:f3:28:67:5a:89:01:f0:c7:5d:56:f9:bd:e4:20:f7:09:e3:
2d:20:e2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqPy1hP1qNr++gXjf+tvbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkM2E3MTA2ZTIxYTZjMzIyZjk4ZTRiYzFiOWM5NjVkNzI4
ODkyN2EwHhcNMjMxMTIwMDEwMTMwWhcNMjMxMTIxMDEwMTMwWjAzMTEwLwYDVQQD
EyhiMGQyMTZiY2JjNjY2MjQ2YWVjMDViY2MyNDhkZmFiYTFhYWMzZWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnOf6I0EaRFNldfIYFAUhJSQnVPe
oUNXmkASKkDocpq5p4pyyI6OCtmcMqISRaatOqo7hT0eCQIXGF+yRzscQSzzyneW
wtJOE0CzGp2VHE7zCmRzde9MM8VeZoLXGg54ZWYd+TG+52r3VjT9CibfRMHzT3f4
2454ItfJuaZvS+o+UqV4BPw15/L0wDZEQaNtgexD/UxDpgVb/GXx40rSabgDNkPv
DZ4IiYPH2R76CmZpvvFevyKGJEjQAz23Jb5X8bqmOaJQXGMqHiOiHByiJWVUbtid
BziSaauYuyvYZ/U0p7a3AhqD8CfLZqPUei/louLRRfmG79A18mzdFyoiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDSFry8ZmJGrsBbzCSN+roarD7MMB8GA1UdIwQY
MBaAFB06cQbiGmwyL5jkvBucll1yiJJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRweEJ1SWFiREl2bU9TOEc1eVdYWEtJa25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ZjVkNDEtZWVjMy00ZTYyLWFhMDEt
NWM0NmRhM2JjNWE1LzEvSFRweEJ1SWFiREl2bU9TOEc1eVdYWEtJa25vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ZjVkNDEtZWVjMy00ZTYyLWFhMDEtNWM0NmRhM2JjNWE1
LzEvSFRweEJ1SWFiREl2bU9TOEc1eVdYWEtJa25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCTF/8As
LsAwVCYg+7OEzmYed8LwEsKqHl/nS/sATzqfsluc2TLzm6q6rYRQ5mS5aEMeSgwL
Y7KFyjgkkLefJbEfrfbLUH0aUJaTNBkawNVXSZ1kAWN+KJbKZmcHlDIyuG+JXO4L
aRdpc6u+yK/7T46K7oHsiQPa6cTf5zjjtz7n2WdBKEOqIzMAo1quuG7yhAkLvS/W
5ubMhz+LbG7gjop6PJ0Zc6bbnIQfYbOgkOP8jUWcYFv3mbBtJXU+0S6lx8O48eO/
JKuDg5ykWJNnA9m24j1nC/pgo5dr8eIEbE0vHV8H4QNH0EZ68vMoZ1qJAfDHXVb5
veQg9wnjLSDiWw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:42 2025 by rpki-client