Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.mft
File: hxukfXuxJG1bcAeDclaflPNY-wY.mft (raw, json)
Hash identifier: 7C5FUacTGvzchPXxZLgcHX/Q+U8rQCLFw8EGzJiFrcs=
Subject key identifier: C9:37:4F:74:E9:3B:91:EE:B0:69:95:43:3C:C5:52:69:6A:03:90:5D
Authority key identifier: 87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
Certificate issuer: /CN=871ba47d7bb1246d5b70078372569f94f358fb06
Certificate serial: 018B046FB12E145AB9BD54CDE86B2F492BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.mft
Manifest number: 085F
Signing time: Fri 06 Oct 2023 10:01:50 +0000
Manifest this update: Fri 06 Oct 2023 10:01:50 +0000
Manifest next update: Sat 07 Oct 2023 10:01:50 +0000
Files and hashes: 1: 02PkLnXnqmWRuTOBbQmR9WRt_3k.roa (hash: XI9nXGYBxAN8h0/JYtcpHKSS/RSH9ju2906jdZgUhwY=)
2: hxukfXuxJG1bcAeDclaflPNY-wY.crl (hash: b2EryP6LrzlrGVasfGNVY+wAmmpLuLXgDF+7uqEFP/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:6f:b1:2e:14:5a:b9:bd:54:cd:e8:6b:2f:49:2b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871ba47d7bb1246d5b70078372569f94f358fb06
Validity
Not Before: Oct 6 10:01:50 2023 GMT
Not After : Oct 7 10:01:50 2023 GMT
Subject: CN=c9374f74e93b91eeb06995433cc552696a03905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:e7:ba:d7:36:dc:9f:4a:db:ee:12:e2:ca:
42:26:ed:ea:00:48:cf:ac:af:56:f9:ac:77:b3:ba:
28:d7:32:f6:7a:ff:74:a6:94:bd:fd:c4:d9:00:fe:
41:29:87:a1:0f:df:59:f2:69:f8:d4:18:6e:01:c0:
2d:79:fa:3a:56:12:b9:fc:2d:da:8a:e1:c1:d1:0b:
b5:34:8b:06:06:5d:38:c0:3a:a1:6a:1a:1d:b6:b8:
05:3d:ae:b5:a1:37:5b:4e:50:f4:c1:83:5c:4b:44:
ba:82:ef:47:55:b5:a4:e4:e3:14:03:35:36:8e:76:
0c:7c:b8:b7:9e:15:35:e3:f2:41:78:25:4d:ae:6e:
58:9a:f7:b5:b3:24:42:e6:b6:2a:e6:eb:b5:48:b3:
2d:94:51:56:14:5a:12:3b:b8:b2:fd:be:25:28:6d:
68:01:8a:1e:c5:8c:fb:70:a3:36:a1:21:5f:e8:f5:
b0:46:65:a5:9a:25:e6:26:87:55:a3:9f:69:83:f1:
e4:72:a3:83:88:f4:8a:be:37:6e:f2:c5:d9:50:2c:
0e:cb:b0:33:21:79:0b:d0:a8:9e:12:58:64:0a:88:
cb:58:69:ec:4c:6e:ae:93:bc:d0:48:6d:52:53:44:
2d:50:04:56:65:d9:19:ed:53:8c:cd:09:04:11:f6:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:37:4F:74:E9:3B:91:EE:B0:69:95:43:3C:C5:52:69:6A:03:90:5D
X509v3 Authority Key Identifier:
keyid:87:1B:A4:7D:7B:B1:24:6D:5B:70:07:83:72:56:9F:94:F3:58:FB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxukfXuxJG1bcAeDclaflPNY-wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/67d028-67f5-444a-8afd-f0a660657e83/1/hxukfXuxJG1bcAeDclaflPNY-wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:9b:7b:54:67:41:5a:11:bd:a9:7b:35:d3:4b:27:a2:ed:
d0:1e:ff:8f:ca:33:4c:88:65:32:4a:cd:55:0a:0e:2a:40:d8:
74:e7:53:a3:8b:bb:24:90:06:7b:f4:c8:dd:57:16:90:e6:e8:
8e:dc:e9:59:51:af:04:c0:77:64:8d:ce:9c:90:b1:47:97:0a:
11:3a:3f:1e:b7:4b:cf:6a:bf:4a:fb:7f:fd:77:cc:0c:13:9c:
3b:fd:7a:52:1b:3c:ad:89:f4:39:31:f0:5e:6f:07:a4:09:ec:
30:b1:cc:f3:05:03:72:18:2b:ff:b5:8d:18:d2:f1:c2:9f:3b:
2b:cb:f8:2c:4c:a6:0c:3e:18:3d:64:0e:56:46:87:13:66:b9:
8c:1e:6c:34:03:a5:6f:7f:5d:91:68:13:f4:fa:ee:5f:66:f2:
2d:bd:ee:58:49:8d:c3:01:cf:38:0a:60:68:83:0e:fe:fb:fe:
a6:03:c9:51:7b:0f:98:6c:f1:39:b1:f0:de:85:83:3a:c5:a4:
e5:9b:e2:fb:d7:ae:c6:e4:aa:9b:4f:35:78:f7:96:81:d8:f8:
e2:06:cf:2b:f1:b7:00:f5:12:2c:3e:f9:cd:a2:26:f7:c7:9f:
aa:ff:14:f1:d2:8e:a0:17:df:93:17:fe:f9:09:0b:66:ca:3b:
c3:d4:90:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYsEb7EuFFq5vVTN6GsvSSvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MWJhNDdkN2JiMTI0NmQ1YjcwMDc4MzcyNTY5Zjk0ZjM1
OGZiMDYwHhcNMjMxMDA2MTAwMTUwWhcNMjMxMDA3MTAwMTUwWjAzMTEwLwYDVQQD
EyhjOTM3NGY3NGU5M2I5MWVlYjA2OTk1NDMzY2M1NTI2OTZhMDM5MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzrnutc23J9K2+4S4spCJu3qAEjP
rK9W+ax3s7oo1zL2ev90ppS9/cTZAP5BKYehD99Z8mn41BhuAcAtefo6VhK5/C3a
iuHB0Qu1NIsGBl04wDqhahodtrgFPa61oTdbTlD0wYNcS0S6gu9HVbWk5OMUAzU2
jnYMfLi3nhU14/JBeCVNrm5Ymve1syRC5rYq5uu1SLMtlFFWFFoSO7iy/b4lKG1o
AYoexYz7cKM2oSFf6PWwRmWlmiXmJodVo59pg/HkcqODiPSKvjdu8sXZUCwOy7Az
IXkL0KieElhkCojLWGnsTG6uk7zQSG1SU0QtUARWZdkZ7VOMzQkEEfZuYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk3T3TpO5HusGmVQzzFUmlqA5BdMB8GA1UdIwQY
MBaAFIcbpH17sSRtW3AHg3JWn5TzWPsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHh1a2ZYdXhKRzFiY0FlRGNsYWZsUE5ZLXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82N2QwMjgtNjdmNS00NDRhLThhZmQt
ZjBhNjYwNjU3ZTgzLzEvaHh1a2ZYdXhKRzFiY0FlRGNsYWZsUE5ZLXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82N2QwMjgtNjdmNS00NDRhLThhZmQtZjBhNjYwNjU3ZTgz
LzEvaHh1a2ZYdXhKRzFiY0FlRGNsYWZsUE5ZLXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAWbe1Rn
QVoRval7NdNLJ6Lt0B7/j8ozTIhlMkrNVQoOKkDYdOdTo4u7JJAGe/TI3VcWkObo
jtzpWVGvBMB3ZI3OnJCxR5cKETo/HrdLz2q/Svt//XfMDBOcO/16Uhs8rYn0OTHw
Xm8HpAnsMLHM8wUDchgr/7WNGNLxwp87K8v4LEymDD4YPWQOVkaHE2a5jB5sNAOl
b39dkWgT9PruX2byLb3uWEmNwwHPOApgaIMO/vv+pgPJUXsPmGzxObHw3oWDOsWk
5Zvi+9euxuSqm081ePeWgdj44gbPK/G3APUSLD75zaIm98efqv8U8dKOoBffkxf+
+QkLZso7w9SQlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org