Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.mft
File: hWNWRitvoH85ziCDzkV9ZUGJDkg.mft (raw, json)
Hash identifier: bvR3f3R+BD+erguhjsOvfkeWD3AJXf6g0A0PXL5JAtQ=
Subject key identifier: 7F:87:CB:DB:AA:94:18:7C:9F:95:C2:65:AA:64:B2:FF:C1:37:DB:2A
Authority key identifier: 85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
Certificate issuer: /CN=856356462b6fa07f39ce2083ce457d6541890e48
Certificate serial: 018C38FE9288D6C4ABA11AEF1C9B1BFEC3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.mft
Manifest number: 011D
Signing time: Tue 05 Dec 2023 08:00:56 +0000
Manifest this update: Tue 05 Dec 2023 08:00:56 +0000
Manifest next update: Wed 06 Dec 2023 08:00:56 +0000
Files and hashes: 1: 99Vo969Em8LkeNv_IEQWiRSe1Gg.roa (hash: ib05Tj/mzC3vKYmwadOgxUV6hLtmBIgF3iebD7jXMLg=)
2: hWNWRitvoH85ziCDzkV9ZUGJDkg.crl (hash: W+DTHdJQZiEHDfVW27f4K9lJtP6nbEkp6MITgSBUBow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:fe:92:88:d6:c4:ab:a1:1a:ef:1c:9b:1b:fe:c3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856356462b6fa07f39ce2083ce457d6541890e48
Validity
Not Before: Dec 5 08:00:56 2023 GMT
Not After : Dec 6 08:00:56 2023 GMT
Subject: CN=7f87cbdbaa94187c9f95c265aa64b2ffc137db2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:75:ef:88:aa:1e:6d:ca:40:cd:6a:2f:aa:
9d:91:ed:24:a3:09:94:1b:28:73:90:7d:dc:7d:ec:
f1:3e:37:c5:d1:58:67:bd:d9:cc:fc:b9:bd:ae:8b:
ee:db:d3:10:da:88:12:4e:1d:77:15:e7:45:7a:31:
aa:c3:73:24:2c:b0:3b:f8:11:b4:a5:a1:95:de:6c:
28:98:47:16:23:66:27:7a:6b:fc:86:ac:3e:97:b8:
3a:04:21:d1:d7:3f:5a:f4:66:ec:ec:39:b8:b9:4c:
7c:bc:16:46:03:97:55:e0:44:62:96:dc:56:af:06:
85:ba:c3:31:4b:e7:fc:e6:95:6a:b3:8c:f0:a1:65:
8e:c7:24:5b:22:c8:03:a3:d2:82:25:81:39:ff:e2:
6b:06:45:07:fd:d7:e1:36:19:2e:3d:c2:fc:d4:a2:
82:e9:2c:df:19:95:52:43:2b:3d:ac:5d:f7:3f:5b:
d4:c8:c9:ae:2f:7d:dd:8d:a8:2b:5e:24:a2:60:a6:
a0:34:a4:e2:59:6e:5f:fe:5b:b1:94:a7:5c:6b:c4:
98:eb:3a:ad:f5:6a:c9:6b:89:4a:a1:1d:33:74:9c:
c9:2b:4d:ec:38:c9:d7:38:66:64:12:eb:86:0d:66:
18:8f:81:54:8b:8f:bb:1a:7f:aa:87:94:65:11:1a:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:CB:DB:AA:94:18:7C:9F:95:C2:65:AA:64:B2:FF:C1:37:DB:2A
X509v3 Authority Key Identifier:
keyid:85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e7:19:0d:38:9e:9f:63:89:0c:25:dc:6d:c6:ac:56:6e:81:
4b:c2:29:61:9f:23:b2:40:5d:9e:ed:ff:ba:bc:0f:63:75:72:
7e:11:4f:57:a5:f2:8d:14:73:18:32:e3:5d:da:4f:88:e6:b5:
d9:3c:3b:23:33:67:c8:3b:18:c0:6c:46:ac:62:2c:a4:6b:f9:
fa:f0:fd:be:94:74:50:93:a0:d3:18:c3:36:b8:cc:f1:33:27:
7c:b3:0e:e1:e6:f4:40:19:07:92:0a:5a:bc:49:c6:fa:00:eb:
be:1b:50:bd:42:e7:86:1d:0b:e0:4a:33:d1:60:cc:19:81:f8:
b8:5a:78:e1:cf:f8:2c:f2:7e:ab:f0:e9:bb:f8:e0:c4:10:bc:
db:31:81:69:77:f1:8f:02:24:ec:7e:84:9f:b4:ab:ce:3e:aa:
95:0d:a8:7a:b6:6d:58:f5:cf:f9:77:ae:9a:9e:66:ea:31:3c:
1f:12:46:8c:cd:4c:04:22:87:ed:c0:61:17:14:3f:67:05:b5:
46:97:52:25:f7:46:37:65:05:73:c9:c3:9e:d6:9d:5f:d9:a0:
12:df:d4:c9:14:d1:8e:03:53:4e:be:71:d6:b1:ee:64:df:51:
74:4d:94:ff:50:59:68:16:ec:fa:f9:33:38:7b:75:49:4e:b2:
c2:7e:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:03 2025 by rpki-client