Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2f2fb0-8658-45ce-b4bb-5bfb21c397a8/1/hazqJ-GjfW1bXheRsiULh_2Qfv8.mft
File: hazqJ-GjfW1bXheRsiULh_2Qfv8.mft (raw, json)
Hash identifier: c3FfQw+R/Ys9ugrp8MTFSa1fCbCMXMXqWP3pZYh9GTQ=
Subject key identifier: B4:97:B1:B1:A1:81:97:3F:AB:94:7B:E0:7A:1A:F1:F2:16:82:B7:48
Authority key identifier: 85:AC:EA:27:E1:A3:7D:6D:5B:5E:17:91:B2:25:0B:87:FD:90:7E:FF
Certificate issuer: /CN=85acea27e1a37d6d5b5e1791b2250b87fd907eff
Certificate serial: 0182D42CF98F5F2595A914D10004BCD4AB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hazqJ-GjfW1bXheRsiULh_2Qfv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2f2fb0-8658-45ce-b4bb-5bfb21c397a8/1/hazqJ-GjfW1bXheRsiULh_2Qfv8.mft
Manifest number: 07E3
Signing time: Thu 25 Aug 2022 08:44:53 +0000
Manifest this update: Thu 25 Aug 2022 08:44:53 +0000
Manifest next update: Fri 26 Aug 2022 08:44:53 +0000
Files and hashes: 1: PsM_OJ_YjVWYykPL60IMaPUgVrI.roa (hash: xvMWdZDCXzbUr4RKK+EZg+DuIVbaRyCMxh9MhqtwOj4=)
2: hazqJ-GjfW1bXheRsiULh_2Qfv8.crl (hash: kCrVp3gd/jjNymwLVOvCAfOxLXVgtC5b3F7nQAklclU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:2c:f9:8f:5f:25:95:a9:14:d1:00:04:bc:d4:ab:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85acea27e1a37d6d5b5e1791b2250b87fd907eff
Validity
Not Before: Aug 25 08:44:53 2022 GMT
Not After : Aug 26 08:44:53 2022 GMT
Subject: CN=b497b1b1a181973fab947be07a1af1f21682b748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:15:0a:77:7d:77:85:d5:ed:35:47:5c:0d:
97:5e:83:0f:ff:8c:35:b7:83:7a:f5:ef:30:3e:05:
21:76:55:0d:07:97:6f:15:23:89:e4:f7:7b:f2:d0:
fa:7c:21:61:ce:da:23:3b:70:04:cc:0f:0d:a3:a3:
91:2e:05:bd:81:56:12:90:67:fc:38:8b:ad:f3:d7:
e9:21:f9:a0:3c:0f:12:62:83:3e:18:64:08:9a:2b:
cf:ba:e3:46:a0:b2:1c:6f:3b:fd:98:2f:08:54:70:
87:8e:3c:d8:d8:bf:6f:e4:d7:07:88:a5:d8:15:32:
ae:a6:24:5b:d0:dc:63:f8:a8:5b:cf:8e:c3:f8:7a:
ad:5b:b1:83:21:ea:23:4d:98:ea:eb:2e:1c:e5:0e:
fa:85:bb:b9:04:c3:c5:dd:e4:ad:45:2d:f0:2e:fa:
1f:66:3d:12:65:2e:9b:fe:0c:c0:66:8f:4c:90:fe:
4a:01:9a:bb:38:e7:8d:3f:ed:2c:c5:ef:d3:18:da:
f8:0c:f3:c9:6b:e2:18:90:40:0b:4c:e3:68:02:9d:
d8:8e:17:c0:a3:4d:4f:5b:0f:a4:e5:d1:ca:a1:d4:
c8:4a:d1:53:50:05:bc:82:bf:05:d1:e1:ff:d0:d2:
81:f8:9a:56:55:08:5d:bb:48:6c:72:4f:c1:50:d8:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:B1:B1:A1:81:97:3F:AB:94:7B:E0:7A:1A:F1:F2:16:82:B7:48
X509v3 Authority Key Identifier:
keyid:85:AC:EA:27:E1:A3:7D:6D:5B:5E:17:91:B2:25:0B:87:FD:90:7E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hazqJ-GjfW1bXheRsiULh_2Qfv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2f2fb0-8658-45ce-b4bb-5bfb21c397a8/1/hazqJ-GjfW1bXheRsiULh_2Qfv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2f2fb0-8658-45ce-b4bb-5bfb21c397a8/1/hazqJ-GjfW1bXheRsiULh_2Qfv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fe:f5:5e:64:98:d7:2d:22:11:d8:02:4f:f8:e5:ab:7b:4e:
0a:17:0a:97:5c:06:44:da:c9:2a:b4:a8:41:cc:a6:0d:df:44:
9b:fb:4c:ba:cc:db:0b:f8:8d:e7:be:9f:ab:5c:67:c4:e6:e7:
68:9d:a2:b8:c4:f9:37:82:aa:a5:f8:f3:21:b2:dc:93:c4:bd:
98:f2:ea:da:79:f1:37:00:ae:e9:d9:dd:99:3e:80:9d:dc:a3:
cf:be:03:6e:ae:d8:86:74:5e:c3:ff:a8:9e:33:3c:1c:45:84:
91:eb:db:b4:54:8e:16:7f:c0:42:3b:e5:a6:b5:b1:65:87:8a:
13:88:a0:cc:74:3b:13:c1:3e:d4:9b:71:8f:80:57:de:1b:b1:
cf:e3:dc:bb:00:90:28:46:e6:1d:7d:ce:99:a5:47:20:3f:a7:
1e:8b:bc:ad:e3:66:7e:fe:64:a7:df:c8:88:70:a8:48:7d:bf:
79:f2:b0:14:19:94:fd:1d:dc:ed:3c:b9:fc:04:b0:3d:12:aa:
d5:78:cc:24:84:31:c4:3b:35:23:c0:01:12:47:cf:84:cc:2a:
d9:7e:c9:ed:e7:77:14:e6:98:db:31:68:0d:85:23:cb:c4:13:
26:12:4c:31:06:ef:71:95:f7:71:a0:20:d1:73:0a:5f:a5:a7:
36:62:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:14 2025 by rpki-client