Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.mft
File: dHM-CN3CU2e-bzrYps79GOde7YI.mft (raw, json)
Hash identifier: NBIc1mMsG3vfX+GDK6oSt6W6zeSffslVtl+3RAOEjFE=
Subject key identifier: 59:43:A0:51:B5:85:A7:1D:DE:4D:75:28:49:03:75:E2:94:7C:0E:88
Authority key identifier: 74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
Certificate issuer: /CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Certificate serial: 018AAAF519675AB9FE90D05E933793B88AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.mft
Manifest number: 063D
Signing time: Tue 19 Sep 2023 01:01:44 +0000
Manifest this update: Tue 19 Sep 2023 01:01:44 +0000
Manifest next update: Wed 20 Sep 2023 01:01:44 +0000
Files and hashes: 1: 8CAd2SZDoM9iZGfZRDQU3AKTUtw.roa (hash: r92m9Q4tqOe4GsRDgLx9iHnzrtBtIit6+ZziTcFgEqE=)
2: dHM-CN3CU2e-bzrYps79GOde7YI.crl (hash: GUMhoMOSkL82r14diIRN1hPC5JwJUdR5mISUzX/n4eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:aa:f5:19:67:5a:b9:fe:90:d0:5e:93:37:93:b8:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74733e08ddc25367be6f3ad8a6cefd18e75eed82
Validity
Not Before: Sep 19 01:01:44 2023 GMT
Not After : Sep 20 01:01:44 2023 GMT
Subject: CN=5943a051b585a71dde4d7528490375e2947c0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:67:d1:51:1d:aa:ed:b8:0c:61:f5:62:7b:
de:6d:04:6d:c7:09:d3:1c:2a:27:4d:21:43:4f:8e:
29:23:5e:4f:38:e6:1b:9d:85:6b:77:e4:30:54:44:
c0:81:44:87:19:71:cd:b6:58:f0:f2:d3:ae:51:15:
31:51:73:ad:45:66:ce:3a:93:0c:72:5d:58:a0:74:
9e:dc:86:40:e1:12:71:13:18:fd:68:ae:1f:f9:3f:
cf:f0:36:79:5d:7e:f1:68:10:ee:36:37:bd:ed:0d:
fc:e4:60:7a:f7:50:63:00:f7:00:7e:eb:66:5f:6c:
10:cd:2b:9a:7c:3e:e3:13:95:f4:b9:33:b8:56:d6:
64:47:5a:bb:97:7d:42:5c:72:80:92:51:33:cf:47:
b1:ae:01:9c:7b:89:12:fd:1d:4e:a8:81:38:68:0d:
f1:eb:e2:2e:e1:4f:b0:94:38:e7:af:37:5f:6d:88:
48:72:01:ea:b3:db:d6:ac:41:af:18:67:81:00:aa:
b8:d1:fe:1d:f2:58:e0:65:07:84:a1:83:6e:40:0a:
27:cf:98:ba:80:f5:67:93:b3:bb:07:48:27:55:72:
0a:35:99:c7:8e:ef:f8:23:8a:e7:26:11:d4:36:b6:
42:fa:6b:94:fe:4b:c7:c4:90:1d:83:a6:0a:a7:00:
6e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:A0:51:B5:85:A7:1D:DE:4D:75:28:49:03:75:E2:94:7C:0E:88
X509v3 Authority Key Identifier:
keyid:74:73:3E:08:DD:C2:53:67:BE:6F:3A:D8:A6:CE:FD:18:E7:5E:ED:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHM-CN3CU2e-bzrYps79GOde7YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7f1c89-6ab3-4285-98eb-c918e2f729aa/1/dHM-CN3CU2e-bzrYps79GOde7YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1b:2b:6e:25:5c:98:8f:b3:74:42:0c:4f:3a:2b:76:23:c5:
92:e7:c8:0f:05:97:f3:f1:c0:69:2e:26:61:d7:90:f0:70:8f:
0f:d8:06:7c:6a:5f:88:b8:21:58:0c:b8:8f:1c:1b:97:95:d4:
b0:45:89:05:a7:be:e8:5d:2d:0c:35:04:57:b0:bf:7e:4a:12:
47:07:f9:ad:d1:6f:2b:38:9a:c3:38:d2:fd:74:f4:93:76:d1:
45:92:ad:0e:8e:1b:d2:42:e5:33:7f:50:92:90:da:c5:1b:76:
8a:f7:9d:96:04:55:3c:e6:64:8c:a6:7b:d5:d7:42:b5:d5:ee:
33:e7:18:9e:e8:52:b2:40:be:8b:8a:a9:4e:17:45:b9:c3:04:
d6:6f:de:0b:8f:92:7c:99:3f:a5:bc:47:99:c2:3b:8b:09:5e:
f9:93:3b:c3:28:36:8a:ac:a0:ea:7a:66:20:a1:08:59:d4:20:
73:4c:48:f2:84:1a:34:5c:16:ec:fb:5b:e1:0f:ff:8e:7d:83:
ea:62:16:d4:5e:1f:4b:64:c6:cd:5e:7c:d8:26:ec:da:24:79:
7a:2b:84:84:d7:31:a7:f1:47:78:a4:72:df:8a:63:a2:c7:5e:
1e:65:6f:9a:ae:35:0d:7e:f3:9f:c3:98:75:89:2c:e6:50:e6:
67:62:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:01 2025 by rpki-client