Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.mft
File: lH5GdlRWWN4JqnePiwDppP2g0A8.mft (raw, json)
Hash identifier: M5E67KPa2NIfZURzFsYZEDN1+c6XVOrJiJHgmOwTlGU=
Subject key identifier: 0A:9B:E9:D0:11:7E:F2:52:8B:83:AC:9C:56:27:7C:04:4A:BA:32:77
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: 018D87851B96D43D0AA91D97A753DC193221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.mft
Manifest number: 0863
Signing time: Thu 08 Feb 2024 07:01:03 +0000
Manifest this update: Thu 08 Feb 2024 07:01:03 +0000
Manifest next update: Fri 09 Feb 2024 07:01:03 +0000
Files and hashes: 1: T4TcGeLHlQ57sNClmMDRjEU-ej8.roa (hash: aHWMDkqbAFS5y//TMfc4cxqLx85DLuUHfNEaI+Hy9Gg=)
2: VjXoMSHMetWe5Ymqil2sdFxl2hE.roa (hash: wuwUeX+wJMF1EgKKOb8LDdNTMtynWrUANRMsZJK+2JU=)
3: lH5GdlRWWN4JqnePiwDppP2g0A8.crl (hash: kCl1dw5TiYHDKTbviWKXfw+hHW+0sV4INtHjGbM31vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:85:1b:96:d4:3d:0a:a9:1d:97:a7:53:dc:19:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Feb 8 07:01:03 2024 GMT
Not After : Feb 9 07:01:03 2024 GMT
Subject: CN=0a9be9d0117ef2528b83ac9c56277c044aba3277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d1:38:83:59:89:f4:f7:7a:17:4c:d5:d2:8b:
77:b7:ca:08:2b:63:8e:db:85:a9:e9:84:6f:a7:11:
52:4d:2a:0f:f8:05:50:f8:b5:8e:88:04:31:ea:df:
39:ed:18:ec:f0:94:f4:65:ed:2a:5c:cb:d3:75:ab:
ee:95:5c:9d:3f:91:b0:c4:23:61:8a:dd:4a:20:f1:
89:fc:9d:a4:9e:52:89:61:25:8d:b4:48:34:05:aa:
4e:6d:85:16:b7:a1:65:f6:0a:05:88:10:ac:80:3b:
0b:62:b8:ec:56:ff:d8:2d:23:0a:66:ff:09:7f:e5:
53:f7:b3:2e:64:20:b3:ce:54:03:ec:eb:25:47:1d:
a1:d3:82:27:b6:19:cf:cc:50:55:17:4c:70:52:24:
c9:9a:86:91:99:8d:bc:53:01:c0:14:5b:7f:70:c0:
54:5f:ff:74:51:c4:38:c1:f4:6c:ad:85:3d:88:a9:
43:0a:4e:76:3d:4b:8a:bb:34:11:0f:14:e4:e3:3c:
79:3a:0c:24:6f:5d:ee:1d:a2:64:e7:24:11:c9:1b:
05:17:ca:85:bc:85:49:7c:11:8b:8b:c0:d5:7b:14:
18:c6:f2:8e:4a:20:2f:32:9d:5c:8d:0f:12:6f:ce:
19:61:ca:71:2f:93:c4:17:b1:d5:d1:9d:b8:24:8a:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:E9:D0:11:7E:F2:52:8B:83:AC:9C:56:27:7C:04:4A:BA:32:77
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:04:12:76:80:eb:e2:85:74:42:7b:94:12:9e:80:d5:6a:9b:
a3:90:8f:30:98:ee:3a:9e:3b:f4:76:6f:e9:3c:a3:16:f3:eb:
db:41:a3:b0:f5:da:6d:cd:d6:4f:36:cc:5b:cb:16:47:23:ee:
b3:fb:1c:8a:15:ec:ef:48:e0:24:3b:70:38:21:89:f6:80:e3:
62:40:74:17:9f:ff:07:bc:35:cf:35:93:f8:78:8a:7f:fc:d0:
13:d6:2b:a0:34:39:c6:a4:17:b8:9c:c1:44:21:0c:16:f6:8e:
89:d1:6a:ef:d7:48:65:9c:97:c4:6a:41:d8:01:de:56:be:fc:
65:3e:9e:78:11:50:e0:a7:ac:c6:54:bf:a1:af:59:56:47:27:
04:8d:59:15:a5:6f:d0:0b:39:79:f5:33:e1:48:74:a5:7f:ca:
68:bb:3e:df:4a:8f:b4:a5:ee:c0:29:25:31:d7:b1:c6:38:53:
89:3c:87:de:83:3a:9a:82:7d:4c:a8:5e:91:6d:eb:7c:49:ee:
5e:f2:f5:6b:b4:18:00:09:5e:a7:57:98:16:bb:ad:bb:c4:c2:
b2:60:a3:80:ae:8b:01:72:09:5d:5d:73:85:82:e5:8c:0c:61:
cc:16:7c:0e:86:5a:19:0a:a4:b3:e5:fe:ac:4a:82:3c:cb:0f:
4d:40:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:48 2025 by rpki-client