Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.mft
File: hm1qGIMFpNwYQBqiDUziZv0wR14.mft (raw, json)
Hash identifier: W072Y9Yp4kSZ9WkVF8l+aUtHbS1IZKlHfDuxoPr5+eo=
Subject key identifier: 63:A9:11:2E:6D:CD:26:33:59:F3:65:3F:9A:D4:59:CE:99:EE:33:D5
Authority key identifier: 86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
Certificate issuer: /CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Certificate serial: 018BD6B88AE996A714846B3E04958459D204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.mft
Manifest number: 0979
Signing time: Thu 16 Nov 2023 06:01:40 +0000
Manifest this update: Thu 16 Nov 2023 06:01:40 +0000
Manifest next update: Fri 17 Nov 2023 06:01:40 +0000
Files and hashes: 1: c6rU0OAglfoIJ3LrezeXnYQQzLY.roa (hash: iezJcOqCMvfKxyYCUE7qjt4EThO86SFJt6QK9lkyA04=)
2: hm1qGIMFpNwYQBqiDUziZv0wR14.crl (hash: 6utqbjaioGMvP9Ff/W1GevKygn0GTlUgSxd/IcNjxE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d6:b8:8a:e9:96:a7:14:84:6b:3e:04:95:84:59:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866d6a188305a4dc18401aa20d4ce266fd30475e
Validity
Not Before: Nov 16 06:01:40 2023 GMT
Not After : Nov 17 06:01:40 2023 GMT
Subject: CN=63a9112e6dcd263359f3653f9ad459ce99ee33d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:f4:ad:3f:41:5e:46:d8:f5:17:16:3c:6d:
a4:2c:2a:d0:c3:38:91:56:19:ca:06:e8:e1:14:f5:
c0:52:9e:4b:c9:80:22:90:a0:16:1a:69:64:db:2f:
5c:95:5e:09:ce:e5:11:1e:61:4f:15:9a:28:85:42:
32:c2:02:2a:b6:8b:7f:d7:ab:c2:fa:e6:aa:c4:07:
28:28:6c:8c:98:00:ea:51:8b:ce:7f:1f:7f:9c:18:
a1:b3:a4:85:b2:a7:9d:f1:58:64:e8:32:c8:05:c2:
fe:e5:0b:75:a7:12:e1:23:10:8f:e5:47:db:22:95:
9f:fd:78:c4:68:29:6b:04:02:e0:a1:3d:e3:c6:47:
bc:eb:e2:df:e7:c7:e5:bf:04:8a:0c:9f:2c:2b:2d:
8b:25:f0:44:e9:52:3b:23:30:b2:6c:f9:7c:cf:e8:
f2:2f:be:0b:8d:92:60:52:b8:75:3e:45:8f:ba:6a:
9d:6e:9e:9f:62:bb:b6:5a:df:15:20:b8:19:36:75:
f5:64:6c:b4:40:d4:c1:62:b9:fb:bb:78:5c:dd:2c:
4d:29:d7:d0:ff:a0:cc:0b:4b:06:1e:f2:70:1e:fa:
08:33:bc:61:54:14:00:5f:8d:15:fa:ac:97:35:bb:
6d:c7:93:28:81:d4:ab:e6:a5:13:aa:b3:59:3d:28:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:11:2E:6D:CD:26:33:59:F3:65:3F:9A:D4:59:CE:99:EE:33:D5
X509v3 Authority Key Identifier:
keyid:86:6D:6A:18:83:05:A4:DC:18:40:1A:A2:0D:4C:E2:66:FD:30:47:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm1qGIMFpNwYQBqiDUziZv0wR14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56a650-da30-4fe6-ac71-5e01194597db/1/hm1qGIMFpNwYQBqiDUziZv0wR14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7a:93:cb:3f:96:6b:a6:2f:c6:26:87:9e:06:bd:10:d7:26:
37:28:4a:04:5d:6a:81:3b:90:3c:a2:0e:7d:a5:a5:25:3f:14:
d7:c9:fe:f0:7d:d2:9c:ba:62:30:09:98:38:47:22:e3:9c:dd:
b7:98:05:bd:1e:93:8a:90:63:d0:44:8e:49:46:da:ef:10:af:
5f:c7:de:b9:1d:cb:b6:5c:67:ee:fd:1d:45:0a:52:4a:a9:51:
60:06:e0:d5:ed:1a:51:c5:76:59:db:e3:44:c6:07:d1:6f:9a:
95:8b:d1:96:c7:23:ac:42:d5:b6:ed:4d:78:96:ff:49:ad:11:
36:9b:64:99:53:16:e0:8d:8b:db:f2:3a:b2:bd:bc:67:c9:a0:
36:c9:d4:62:38:2e:bb:4a:cf:87:0e:04:48:74:37:91:e0:b8:
22:f8:c8:54:2f:e6:80:5f:38:c3:db:64:aa:15:3b:a4:cb:96:
75:b2:57:c8:ed:d3:90:3e:d8:c6:59:4a:4b:a6:d1:f0:5d:49:
8a:c3:08:6d:b1:fa:42:85:70:41:ad:18:8b:4e:7c:ee:b7:c1:
14:3b:d0:2e:12:ca:7c:18:b7:6b:6e:2f:b4:24:18:23:22:d0:
cd:34:ad:bd:f1:51:a4:01:da:12:35:3d:08:e7:ef:0f:ca:6e:
83:13:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:32 2025 by rpki-client