Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.mft
File: 8hbxg4mg4ew7bAr56xbcor-_rG4.mft (raw, json)
Hash identifier: HKluCrDDUkG7Ehs9z6268sY7HF8KBaw4zamaTt3gzZ8=
Subject key identifier: 1A:25:1F:3E:77:06:AB:E0:FA:42:BE:50:80:A4:01:39:78:EE:AD:27
Authority key identifier: F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
Certificate issuer: /CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Certificate serial: 018EF642F12988607C5A1A8FC0768941CD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.mft
Manifest number: 09
Signing time: Fri 19 Apr 2024 12:09:25 +0000
Manifest this update: Fri 19 Apr 2024 12:09:25 +0000
Manifest next update: Sat 20 Apr 2024 12:09:25 +0000
Files and hashes: 1: 8hbxg4mg4ew7bAr56xbcor-_rG4.crl (hash: 4WJTcEn2nA7Mfo6vpK3q389uqVOlrs6YKBpUtAyyD7k=)
2: yM5L4lc2GYFj-yG42e7mRTgyxL4.roa (hash: NIPHfLRf6L30ECIARzcswbNUO9C0UVwZK2QUdqB6QaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f6:42:f1:29:88:60:7c:5a:1a:8f:c0:76:89:41:cd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f216f18389a0e1ec3b6c0af9eb16dca2bfbfac6e
Validity
Not Before: Apr 19 12:09:25 2024 GMT
Not After : Apr 20 12:09:25 2024 GMT
Subject: CN=1a251f3e7706abe0fa42be5080a4013978eead27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:c7:3b:8d:20:f9:dc:62:95:f7:f9:c5:2f:
d3:3d:7f:0c:01:e6:51:bf:7a:38:8a:a6:68:3a:7d:
b9:8e:fc:fa:7e:0e:ac:86:33:22:da:2d:30:6e:73:
13:47:a9:88:b8:bf:bd:46:40:71:28:28:3d:e6:6f:
db:06:f2:7b:40:b0:f8:38:44:90:d7:fb:61:db:50:
64:4a:5b:5c:11:9f:a7:6a:96:52:c1:6d:fe:f8:55:
34:78:63:81:e6:0c:d4:f5:93:8d:3f:51:aa:f5:53:
b5:3b:85:37:90:35:28:5b:aa:e7:48:fc:f7:47:9b:
e3:cc:52:d7:fb:45:e8:cd:b2:8f:7f:68:f1:28:1c:
74:bc:80:e7:c0:57:d6:3e:cc:e2:ea:40:1a:70:32:
e4:14:34:9a:9b:71:40:33:2f:86:15:bd:3d:ed:b6:
a6:46:73:44:0e:a4:5b:c8:a8:07:06:4d:a8:84:e1:
17:6e:3a:ac:6f:e1:45:93:92:b7:b1:f1:a7:25:ff:
7d:8d:35:03:8c:ee:57:c2:e7:d2:40:aa:12:c7:50:
3c:fa:cb:61:62:8f:9b:9d:2f:54:a8:2b:ef:cd:4d:
7a:91:43:fe:e0:77:c2:ab:b9:67:4c:f5:be:11:b9:
61:a6:27:b2:81:c6:c2:f4:1d:54:43:2c:fa:3d:96:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:25:1F:3E:77:06:AB:E0:FA:42:BE:50:80:A4:01:39:78:EE:AD:27
X509v3 Authority Key Identifier:
keyid:F2:16:F1:83:89:A0:E1:EC:3B:6C:0A:F9:EB:16:DC:A2:BF:BF:AC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hbxg4mg4ew7bAr56xbcor-_rG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cf8818-0b7e-40b6-bcee-fe372afd3bc3/1/8hbxg4mg4ew7bAr56xbcor-_rG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0d:db:33:d3:7d:9f:9d:b0:21:74:4a:3b:47:cc:fc:ab:30:
2c:02:0a:ad:0f:02:47:eb:ee:1b:f5:35:02:41:aa:40:79:7c:
80:17:da:de:b2:e8:02:e0:86:1c:dc:f4:0b:32:4b:1f:6f:6e:
f0:58:5a:1d:8f:02:0c:0a:a1:e7:3c:d5:8f:e6:c9:1c:29:47:
c2:1e:3d:5d:2c:13:29:7a:d6:e6:be:11:07:b1:e9:c7:04:c1:
af:82:3f:79:f0:36:8a:0b:32:1d:4c:09:c3:4a:4c:fb:15:d3:
4e:f5:c6:34:d6:5a:2c:d2:f2:06:f8:e3:58:9e:96:41:07:5c:
c2:19:6e:b3:09:e8:fc:a8:3c:c6:32:a1:15:e6:6a:81:38:44:
b2:5d:e5:4a:77:06:5c:9c:d7:d6:17:8c:56:5e:f5:c1:e8:e1:
fd:15:f1:8e:58:2f:a6:78:05:24:63:7b:f2:3a:eb:d3:1e:6c:
d9:fd:11:dd:73:c7:c2:0a:c7:9f:1d:11:74:e9:f6:0a:d2:c7:
de:68:71:99:b1:a2:77:65:64:d0:30:4e:fc:cb:c6:ef:49:b3:
22:fe:57:4e:d3:96:99:b5:92:39:68:7f:d6:4e:7a:80:5d:dd:
3e:77:d2:97:7e:f0:f1:7c:ba:b3:7f:2f:6c:2f:a2:b2:a2:2d:
18:a4:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:51:01 2025 by rpki-client