Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.mft
File: hZxtwhPBvuYUgZxr0sYH4vXYy2I.mft (raw, json)
Hash identifier: ssNg7i0FscW29l7fTxsMrya4zqPp2BlFqxQZs3UVUPw=
Subject key identifier: 96:EF:CD:6D:6A:0B:57:2E:9D:8E:35:CA:1B:2C:20:3E:9D:2C:F4:94
Authority key identifier: 85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
Certificate issuer: /CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Certificate serial: 0184C19AF6C7935CE05CC2F1D43A9C22AB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.mft
Manifest number: 093F
Signing time: Tue 29 Nov 2022 04:17:49 +0000
Manifest this update: Tue 29 Nov 2022 04:17:49 +0000
Manifest next update: Wed 30 Nov 2022 04:17:49 +0000
Files and hashes: 1: hZxtwhPBvuYUgZxr0sYH4vXYy2I.crl (hash: rp/SUBhc87ahItnWjXk545HbgRXFFNkmnntTjoN88HQ=)
2: ycnzn81zl6DX40axGYCybmCrEMU.roa (hash: mkU5FiZ2taUO5iuRW4P7kmZRtBhquycXVHLGtsrGsHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:9a:f6:c7:93:5c:e0:5c:c2:f1:d4:3a:9c:22:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859c6dc213c1bee614819c6bd2c607e2f5d8cb62
Validity
Not Before: Nov 29 04:17:49 2022 GMT
Not After : Nov 30 04:17:49 2022 GMT
Subject: CN=96efcd6d6a0b572e9d8e35ca1b2c203e9d2cf494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:78:24:40:08:6e:f8:99:55:b8:e4:b1:df:
18:f6:42:4e:72:fd:ed:96:dc:1b:d1:17:f3:78:03:
a8:25:03:f4:4f:22:30:70:01:a8:14:8b:d4:a3:ca:
20:ec:f0:e3:f1:38:31:03:df:05:b7:09:70:20:cb:
68:8e:23:84:5a:50:03:df:a6:d3:9c:8d:4d:95:ac:
5b:18:24:43:fd:ee:19:82:20:e2:e0:21:e3:3e:78:
8f:0c:8e:e5:d9:79:20:23:3e:cb:a4:53:44:47:09:
e9:af:e3:ca:4b:d0:f3:31:2b:87:1b:9c:b8:4b:49:
bc:aa:c5:ea:13:44:bb:4f:86:37:ca:ca:ff:91:bf:
ee:f8:b4:00:55:34:c2:1f:d2:56:61:e7:23:57:d4:
fe:79:02:2a:06:2d:e7:94:35:86:3c:98:73:9c:68:
19:89:c5:0e:39:e8:3d:ce:fc:79:ee:ae:f2:35:29:
5c:b6:c6:c6:d8:22:37:0d:dd:fa:43:8c:af:be:82:
d0:5f:cf:b7:9f:42:68:54:1a:1e:9d:a4:7f:0d:8e:
b1:aa:fc:4a:80:a3:3e:8c:49:51:da:7b:a3:a7:14:
d7:1a:86:c8:e5:17:a8:75:0e:9d:70:59:46:68:cb:
83:16:7c:75:a1:73:b2:b4:13:fe:02:73:4e:8a:48:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EF:CD:6D:6A:0B:57:2E:9D:8E:35:CA:1B:2C:20:3E:9D:2C:F4:94
X509v3 Authority Key Identifier:
keyid:85:9C:6D:C2:13:C1:BE:E6:14:81:9C:6B:D2:C6:07:E2:F5:D8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZxtwhPBvuYUgZxr0sYH4vXYy2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d70da6-6a81-4e91-b453-e5ea3e731c27/1/hZxtwhPBvuYUgZxr0sYH4vXYy2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:09:77:c7:76:fe:51:fc:e6:02:f3:da:78:77:65:8f:23:51:
4e:8a:36:5a:30:6a:f3:ac:5d:38:5d:62:ab:da:89:81:1b:2e:
bd:b9:8b:b1:de:15:37:e0:54:bd:5b:68:18:f5:88:9d:eb:46:
5c:d6:80:56:e0:0a:4b:35:5b:df:8b:6b:9b:02:9a:de:7e:d3:
47:5b:b2:d1:a4:72:d0:64:20:36:c6:83:4e:cc:3c:53:32:98:
e6:34:56:58:a3:de:fe:93:e1:cb:16:0d:03:08:8e:a8:65:35:
e4:db:60:5b:47:77:0d:fe:7f:c2:31:77:2d:fd:29:ba:2e:32:
1b:95:b5:d2:ff:08:81:0d:4f:6f:03:72:8d:e0:21:26:42:34:
4e:9b:58:39:79:5e:ed:aa:2f:a9:d7:91:6f:10:cc:1f:9f:7a:
c9:82:40:d9:71:0f:4c:ee:08:25:dc:1a:6c:95:72:cf:c2:17:
47:24:0d:8e:81:e8:1d:ca:ca:c9:ed:d1:d4:09:ac:62:1a:ab:
6f:37:3d:ad:23:0d:d7:6a:02:db:06:7d:2e:d5:3e:5f:e3:fb:
e8:28:b6:c9:83:9a:14:96:48:3a:59:6d:93:42:65:45:1b:76:
5a:e1:b7:f3:43:e6:b1:48:b8:e0:b4:ba:18:ec:d4:8a:0b:dc:
bf:0f:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:51 2025 by rpki-client