Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft
File: hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft (raw, json)
Hash identifier: FdyjLCK3fjaMLGwCqK/R+C2U9nc9KPY8T360LPPw9OI=
Subject key identifier: 2D:E5:42:74:42:0B:1A:E9:64:62:DC:D1:B9:97:83:52:2C:54:E7:28
Authority key identifier: 84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
Certificate issuer: /CN=846a1ba02e439066ef579010ea308054ac8bf9df
Certificate serial: 018BF07810AA720DE0DEC5FD7AD2A9EAC644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft
Manifest number: 0864
Signing time: Tue 21 Nov 2023 06:01:22 +0000
Manifest this update: Tue 21 Nov 2023 06:01:22 +0000
Manifest next update: Wed 22 Nov 2023 06:01:22 +0000
Files and hashes: 1: Yq3N7Z_6X2LG8dVfmv2no8AMPAI.roa (hash: PgzCWtWZ+MRsPKn26TMqZDRuvNRonXHnUeY8hiuueuA=)
2: hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl (hash: to+2FLvz4isWbySRfy+ffYigBY94OrnVmr6bmjZiXK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:78:10:aa:72:0d:e0:de:c5:fd:7a:d2:a9:ea:c6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846a1ba02e439066ef579010ea308054ac8bf9df
Validity
Not Before: Nov 21 06:01:22 2023 GMT
Not After : Nov 22 06:01:22 2023 GMT
Subject: CN=2de54274420b1ae96462dcd1b99783522c54e728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:42:cd:0c:2b:cb:ec:27:9a:23:3c:df:78:
3d:ee:f5:fc:91:c7:aa:77:1f:11:4d:f4:c3:15:8c:
ce:a5:fe:d0:85:72:8b:df:c6:03:80:eb:5f:9f:81:
90:d1:e0:91:93:a1:c4:6d:62:61:cb:69:ff:30:34:
c7:82:de:e5:1f:7b:69:40:4e:6d:0d:13:8e:c4:16:
5b:4d:7b:c8:6d:c5:8e:42:ad:1b:73:46:d2:de:27:
54:1b:36:4e:b3:2d:d8:58:32:db:da:ca:d9:c3:fe:
78:43:ea:1f:15:42:6d:3d:7e:2c:e3:d1:ff:ac:d4:
b4:24:f0:0d:03:8e:ca:b2:45:42:b5:5c:15:ad:2f:
1e:a2:12:00:fc:61:13:d4:00:78:0d:7f:e4:06:bb:
fe:19:d9:aa:ec:d3:ad:aa:a4:21:98:b5:41:48:82:
2c:f1:44:1f:51:ea:04:b1:7a:7e:5d:55:97:a1:e9:
16:23:9a:1f:73:25:a8:69:c5:ca:2d:31:24:a3:58:
42:29:3c:70:00:1b:99:28:fe:e2:5b:a7:be:0d:ce:
31:37:c1:74:a7:e1:a5:3a:fd:73:9a:d7:6e:b1:bc:
51:a1:ea:15:3e:5d:b4:c9:1f:e9:15:04:81:9b:fa:
83:4f:f3:a0:38:ae:e7:f5:b9:0c:8c:28:ee:5a:61:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E5:42:74:42:0B:1A:E9:64:62:DC:D1:B9:97:83:52:2C:54:E7:28
X509v3 Authority Key Identifier:
keyid:84:6A:1B:A0:2E:43:90:66:EF:57:90:10:EA:30:80:54:AC:8B:F9:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGoboC5DkGbvV5AQ6jCAVKyL-d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b4a080-5080-447e-a54d-e90bea5ffd40/1/hGoboC5DkGbvV5AQ6jCAVKyL-d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:dd:12:cc:28:22:3a:df:de:ef:39:20:ab:1a:51:2c:bd:
39:e1:10:8f:d0:2b:e7:39:09:8d:61:67:e4:b2:0b:fd:62:24:
30:98:c2:1a:ac:31:03:bf:bc:9d:46:b9:aa:a8:de:41:43:0c:
a5:2b:ff:8e:03:1f:a1:b2:95:24:ec:f6:43:90:11:41:45:ef:
f2:b7:fc:15:4f:5d:88:8c:ec:29:a3:2a:6c:2a:f2:1d:84:77:
d3:b0:7b:96:09:c4:e1:7e:9f:71:4c:f0:90:5d:ea:25:c7:9a:
18:69:92:d8:f7:70:a7:e8:57:1e:75:32:95:6a:3b:4a:58:5d:
26:c1:55:db:1b:fa:c9:47:63:72:b6:8c:de:51:06:ee:30:a0:
b1:d2:f4:9a:60:af:20:6e:4f:65:ce:0c:91:79:c8:ac:07:06:
88:42:d2:0f:fb:6d:42:ac:78:db:3b:51:f7:09:fb:a6:18:2a:
ba:38:96:a1:dd:60:17:a5:a9:f7:e5:ce:85:b2:b5:15:69:9d:
aa:21:30:26:35:ca:eb:da:4a:dd:d1:c1:be:24:a2:72:d7:9d:
8f:81:55:12:70:da:8a:e9:c9:cb:81:b6:d4:47:d4:58:7f:99:
5d:ca:37:14:25:39:7c:4e:69:8c:25:8b:0f:81:78:7c:45:33:
ca:5e:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:01 2025 by rpki-client