Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.mft
File: hMIa9BBRyAvGXssF2XslT44EaCo.mft (raw, json)
Hash identifier: S0jcTskf68Fo0xE9UzPhristUeoIPgx32iHKnr14hbg=
Subject key identifier: A2:45:21:4F:73:BA:73:06:3D:DA:B3:EF:F4:BF:8D:D2:BD:B0:CB:29
Authority key identifier: 84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
Certificate issuer: /CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Certificate serial: 018B13E1F110BB380914B5C9710B08200A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.mft
Manifest number: 0874
Signing time: Mon 09 Oct 2023 10:00:56 +0000
Manifest this update: Mon 09 Oct 2023 10:00:56 +0000
Manifest next update: Tue 10 Oct 2023 10:00:56 +0000
Files and hashes: 1: AJ2GG5kgz5B-XTHP4-lcS1MhmuA.roa (hash: +zvJkO0ipVIyxzagafRorL4+kqDUZmY8kIeYJ4ckZPE=)
2: hMIa9BBRyAvGXssF2XslT44EaCo.crl (hash: hDYRrh18rG6nebvz+6CDagqgFeO3uX9zMGbOtgUDOj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:e1:f1:10:bb:38:09:14:b5:c9:71:0b:08:20:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c21af41051c80bc65ecb05d97b254f8e04682a
Validity
Not Before: Oct 9 10:00:56 2023 GMT
Not After : Oct 10 10:00:56 2023 GMT
Subject: CN=a245214f73ba73063ddab3eff4bf8dd2bdb0cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:dc:fb:d8:16:12:35:c7:73:e0:67:91:77:
38:95:ef:db:4c:ec:ef:3f:c5:6d:9a:c7:2a:16:0e:
53:55:34:6b:1c:ba:bf:6b:7e:6e:a0:18:d9:c9:a0:
9c:30:58:8c:c8:90:f2:0e:fd:f7:de:c3:ea:11:10:
f9:2b:2e:93:c4:04:93:af:0c:c8:75:51:22:e0:3e:
e7:d1:cb:a2:b2:ba:7d:0e:53:69:b6:cc:6b:05:90:
b3:4e:7a:f8:70:af:09:5b:eb:35:4c:70:af:24:7a:
95:c0:2a:50:0b:67:6a:81:61:a9:42:ec:d7:de:70:
a4:1e:af:36:5b:f2:0b:4e:5e:15:44:37:72:fd:56:
84:47:b8:42:8e:29:56:ed:ac:5b:92:31:9f:85:d9:
38:1d:ae:d1:6f:32:22:da:3a:44:40:13:11:28:c8:
57:9b:ee:70:cb:e9:9e:22:30:97:18:c0:a0:21:08:
45:0c:27:b5:72:1d:c5:a3:cb:fa:05:84:fb:0e:85:
96:ed:d2:80:01:26:7d:09:68:52:40:6a:05:0e:42:
7e:02:26:06:1f:a1:b3:1a:85:1b:c2:e0:7f:69:12:
6a:3b:91:cd:ae:f5:3b:14:d9:ef:ea:db:6b:d1:4e:
00:06:f5:f2:26:93:dd:87:5e:24:f6:ea:80:44:1c:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:21:4F:73:BA:73:06:3D:DA:B3:EF:F4:BF:8D:D2:BD:B0:CB:29
X509v3 Authority Key Identifier:
keyid:84:C2:1A:F4:10:51:C8:0B:C6:5E:CB:05:D9:7B:25:4F:8E:04:68:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMIa9BBRyAvGXssF2XslT44EaCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3de18b-9dde-4d5c-8f2d-0d6ab5eac390/1/hMIa9BBRyAvGXssF2XslT44EaCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:83:e4:35:2e:70:17:eb:83:48:a1:0f:4b:fb:b7:3b:0d:
a6:16:44:55:4d:bc:92:79:2c:ff:09:12:f9:4d:b1:37:bb:a3:
0d:ca:73:ea:fd:c2:3d:82:4f:73:e9:36:14:dc:21:2f:af:4d:
e7:90:f8:6b:2b:05:69:83:62:5b:96:d7:b6:4f:cd:d5:de:d8:
d1:09:f9:76:79:a5:3d:f5:33:3f:23:dd:91:c1:c9:46:c8:ca:
08:b5:9c:59:67:b4:ac:ee:30:b3:cc:44:73:fe:0c:28:16:c0:
ac:f1:69:46:23:5e:54:bf:89:80:8d:90:db:b9:60:6c:9c:20:
bd:f0:be:e3:78:e8:f9:dd:83:84:35:41:53:8a:e5:b1:b6:11:
60:d9:cb:0d:fd:cd:d8:2e:67:20:cc:8d:36:46:ba:e5:76:54:
80:ae:91:ad:f1:1f:80:8e:5e:2e:d4:8e:28:ea:61:67:59:a4:
e2:31:b2:6d:51:ca:7d:54:a9:0c:aa:9d:7a:e0:75:7b:27:73:
f5:f9:8a:c1:14:cc:97:43:09:fb:03:05:55:57:14:07:a0:e9:
0f:79:75:d3:4e:78:6f:6d:d1:bd:e1:46:2a:c1:5a:66:1b:9d:
ed:30:3b:bb:da:9f:93:78:04:3a:da:9a:02:c0:8f:09:f6:92:
4f:46:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:33 2025 by rpki-client