Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.mft
File: hKOZTFFsuF3uduIUBF7zmzjznPw.mft (raw, json)
Hash identifier: Re3KkL3i+6hn2h0pRDy8GPzlAisgt94z7C7x+Yh5+10=
Subject key identifier: B2:48:77:83:26:47:BC:C8:59:3B:7A:56:97:DB:38:51:6B:0C:74:73
Authority key identifier: 84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
Certificate issuer: /CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Certificate serial: 018B83E474700ACA21343896EABAB22FF33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.mft
Manifest number: 0ECE
Signing time: Tue 31 Oct 2023 04:01:09 +0000
Manifest this update: Tue 31 Oct 2023 04:01:09 +0000
Manifest next update: Wed 01 Nov 2023 04:01:09 +0000
Files and hashes: 1: 5BklaO2hUcgVp93-Axjt1xGSQEo.roa (hash: fyH7yc4cOofFpCw7MlsIYOfX4gcFv/d2Ygq5L4T2gvw=)
2: hKOZTFFsuF3uduIUBF7zmzjznPw.crl (hash: GUGpH7MNrcYaozcvACKGqJB0AaUuiIR/a4xpuqiAMWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:83:e4:74:70:0a:ca:21:34:38:96:ea:ba:b2:2f:f3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3994c516cb85dee76e214045ef39b38f39cfc
Validity
Not Before: Oct 31 04:01:09 2023 GMT
Not After : Nov 1 04:01:09 2023 GMT
Subject: CN=b24877832647bcc8593b7a5697db38516b0c7473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9d:06:2d:7a:dd:5d:f1:b3:de:3a:10:d2:6e:
62:c5:0b:3f:7a:23:21:26:da:8c:78:7b:5e:a6:be:
9f:fa:40:ab:b2:07:0c:61:cb:1f:d4:d9:7e:44:e8:
a3:b5:15:37:03:d1:cc:99:e2:ab:5a:f7:05:aa:01:
75:a3:66:0f:32:d5:30:f7:a6:43:d0:fc:6c:a1:ba:
4d:8f:bd:38:de:ac:bd:a7:e1:fc:f9:b5:3f:0f:a8:
6b:52:07:cc:50:70:e9:50:dd:fd:da:00:b3:a1:cb:
69:08:8f:e7:b3:36:0b:c2:57:45:5e:a1:fb:c9:03:
cc:0c:d4:f0:9b:e8:3d:d0:96:72:ec:65:a8:35:81:
03:f6:29:48:d9:e5:ab:68:35:b3:bb:7b:e9:be:d8:
c4:98:e7:4e:34:67:c2:e3:bb:a0:d2:a4:3c:4a:76:
87:fc:83:72:f5:20:51:f0:7c:b7:79:2e:aa:5a:2e:
26:36:27:d6:b3:0e:41:94:bd:74:36:75:7b:b7:d3:
6a:c0:dc:5e:03:f1:5d:06:dd:fb:ef:10:9f:09:e3:
fc:4d:48:2c:c6:0d:3f:76:a6:c8:86:0f:64:76:ec:
d4:39:c3:36:0b:f7:ee:fc:47:42:99:80:35:08:c9:
12:0f:90:f7:94:9c:a2:80:12:3f:75:4c:89:09:21:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:77:83:26:47:BC:C8:59:3B:7A:56:97:DB:38:51:6B:0C:74:73
X509v3 Authority Key Identifier:
keyid:84:A3:99:4C:51:6C:B8:5D:EE:76:E2:14:04:5E:F3:9B:38:F3:9C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKOZTFFsuF3uduIUBF7zmzjznPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c9cb0c-9608-4280-a1b8-3b8fa2f522e6/1/hKOZTFFsuF3uduIUBF7zmzjznPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:5a:2c:75:0b:0d:bb:a7:0a:c7:2f:e5:c7:e9:4c:ad:0c:
85:d3:87:fa:aa:b8:ca:40:aa:3f:c4:97:57:4f:85:f6:62:b4:
11:e1:6f:77:76:cc:02:1b:d1:3d:e8:44:84:07:39:f5:f0:36:
4d:0d:43:a6:9d:57:c8:7f:80:ea:29:98:69:7c:17:3f:69:8b:
ad:ac:76:c8:0d:58:5e:2e:c8:54:13:64:db:54:0b:22:71:64:
79:c8:4a:c5:53:32:24:1f:fb:8d:88:60:d4:2a:23:2e:dd:db:
3f:4f:d6:a1:a4:74:93:0c:3c:81:54:84:86:3c:a0:34:d2:d4:
c3:d7:31:67:c3:36:ae:9c:15:2f:ae:c5:06:86:1e:4e:00:9e:
38:2e:7e:c4:06:a9:1a:af:b0:81:01:b0:ee:20:cf:01:df:4c:
84:12:97:68:96:52:85:58:95:36:9a:7a:5a:72:98:a4:34:1e:
24:de:84:4f:2b:a7:fd:b9:1a:c5:6d:40:93:da:af:2e:d7:42:
f1:52:ed:f9:79:49:1c:99:89:a2:05:b3:ba:91:f6:57:c9:5d:
79:83:36:15:5f:6c:64:61:23:2d:43:de:14:92:c1:fe:8d:a2:
d1:0f:db:e0:f9:f6:76:42:d5:25:78:fc:1c:7c:ad:4f:7c:c4:
5f:a4:ef:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuD5HRwCsohNDiW6rqyL/M7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YTM5OTRjNTE2Y2I4NWRlZTc2ZTIxNDA0NWVmMzliMzhm
MzljZmMwHhcNMjMxMDMxMDQwMTA5WhcNMjMxMTAxMDQwMTA5WjAzMTEwLwYDVQQD
EyhiMjQ4Nzc4MzI2NDdiY2M4NTkzYjdhNTY5N2RiMzg1MTZiMGM3NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ0GLXrdXfGz3joQ0m5ixQs/eiMh
JtqMeHtepr6f+kCrsgcMYcsf1Nl+ROijtRU3A9HMmeKrWvcFqgF1o2YPMtUw96ZD
0PxsobpNj7043qy9p+H8+bU/D6hrUgfMUHDpUN392gCzoctpCI/nszYLwldFXqH7
yQPMDNTwm+g90JZy7GWoNYED9ilI2eWraDWzu3vpvtjEmOdONGfC47ug0qQ8SnaH
/INy9SBR8Hy3eS6qWi4mNifWsw5BlL10NnV7t9NqwNxeA/FdBt377xCfCeP8TUgs
xg0/dqbIhg9kduzUOcM2C/fu/EdCmYA1CMkSD5D3lJyigBI/dUyJCSEHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJId4MmR7zIWTt6VpfbOFFrDHRzMB8GA1UdIwQY
MBaAFISjmUxRbLhd7nbiFARe85s485z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEtPWlRGRnN1RjN1ZHVJVUJGN3ptemp6blB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jOWNiMGMtOTYwOC00MjgwLWExYjgt
M2I4ZmEyZjUyMmU2LzEvaEtPWlRGRnN1RjN1ZHVJVUJGN3ptemp6blB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jOWNiMGMtOTYwOC00MjgwLWExYjgtM2I4ZmEyZjUyMmU2
LzEvaEtPWlRGRnN1RjN1ZHVJVUJGN3ptemp6blB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ1aLHUL
DbunCscv5cfpTK0MhdOH+qq4ykCqP8SXV0+F9mK0EeFvd3bMAhvRPehEhAc59fA2
TQ1Dpp1XyH+A6imYaXwXP2mLrax2yA1YXi7IVBNk21QLInFkechKxVMyJB/7jYhg
1CojLt3bP0/WoaR0kww8gVSEhjygNNLUw9cxZ8M2rpwVL67FBoYeTgCeOC5+xAap
Gq+wgQGw7iDPAd9MhBKXaJZShViVNpp6WnKYpDQeJN6ETyun/bkaxW1Ak9qvLtdC
8VLt+XlJHJmJogWzupH2V8ldeYM2FV9sZGEjLUPeFJLB/o2i0Q/b4Pn2dkLVJXj8
HHytT3zEX6TvaA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:13 2025 by rpki-client