Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft
File: DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft (raw, json)
Hash identifier: RNZ4RnDNjRHoevK8rqqwTfOIYWQiMpOEmpNDfRfpvy4=
Subject key identifier: D3:9E:26:F1:45:1D:08:E2:A9:95:9C:48:19:4C:A5:AF:01:6B:B9:5B
Authority key identifier: 0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
Certificate issuer: /CN=0d3f228c8fc364d935943afae474b96ff648556a
Certificate serial: 0184E64946FD810E4E5AB0DB3C57FE4189CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft
Manifest number: 0871
Signing time: Tue 06 Dec 2022 07:14:32 +0000
Manifest this update: Tue 06 Dec 2022 07:14:32 +0000
Manifest next update: Wed 07 Dec 2022 07:14:32 +0000
Files and hashes: 1: 5FxJOtKKM7LGPrivYkVcdZMSY-w.roa (hash: t3GOYYLpLksDuIkTO1mGYrC58Wa4kovYbNxrVjuBMX8=)
2: DT8ijI_DZNk1lDr65HS5b_ZIVWo.crl (hash: TKcLDCcUrHgIOt0Z2KvtFD9JDnWOplp0eTwhzwP50lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:49:46:fd:81:0e:4e:5a:b0:db:3c:57:fe:41:89:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3f228c8fc364d935943afae474b96ff648556a
Validity
Not Before: Dec 6 07:14:32 2022 GMT
Not After : Dec 7 07:14:32 2022 GMT
Subject: CN=d39e26f1451d08e2a9959c48194ca5af016bb95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:9f:b6:37:14:9f:38:d5:a0:89:61:d0:b8:
8b:42:7f:db:34:fd:b2:7c:d2:6c:4b:28:83:e6:f2:
98:ba:cb:82:d6:0b:02:f6:ab:0e:08:ab:4e:7b:80:
86:bf:15:a0:42:ee:27:c5:30:e0:1c:d7:66:14:f0:
4f:37:79:67:a4:be:23:8d:2f:79:58:20:8c:f0:fa:
e5:10:5f:20:29:1a:4e:3c:85:a2:cc:ce:01:49:45:
da:40:d3:ff:13:6e:99:48:9c:1b:94:42:23:5f:7c:
25:bb:d0:a6:ee:ad:53:ea:cd:92:36:56:62:04:e0:
ea:0a:d0:8e:df:e3:75:dd:79:75:aa:71:9e:46:22:
20:3e:bb:6c:db:b6:4d:10:3a:29:5f:4d:9c:7d:d1:
23:f6:1c:f4:d4:16:2d:0b:28:95:ad:0a:19:5e:71:
3e:f6:ca:a5:43:1d:be:60:94:05:e6:20:16:ba:69:
30:04:5e:3f:07:00:0b:c1:d5:71:f4:69:44:21:85:
9b:72:5f:38:6c:99:c0:97:5e:d7:e9:2c:20:26:ea:
9f:17:1a:84:09:77:cd:76:26:55:33:32:c5:29:4e:
7f:ca:61:80:74:38:e9:a0:e0:27:48:b3:31:87:b6:
49:00:ab:bb:6c:5f:e4:8b:6b:44:ab:00:6f:9f:4e:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:26:F1:45:1D:08:E2:A9:95:9C:48:19:4C:A5:AF:01:6B:B9:5B
X509v3 Authority Key Identifier:
keyid:0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:94:65:7d:12:9c:e7:dc:77:54:5b:f2:64:f6:ec:7a:86:
d8:b7:fa:29:f2:99:50:15:8f:ed:fe:14:9a:b3:a0:1b:b5:02:
af:2d:71:13:97:35:ee:c2:f8:85:6e:40:f7:80:df:dd:9b:d4:
e8:9a:7d:3b:34:c0:58:d2:af:d0:0e:a3:10:46:1e:7b:7b:89:
ff:01:d7:ab:f9:49:2f:1f:fb:0d:72:43:4f:a4:41:a7:3b:82:
36:b9:a0:ca:b8:a8:c4:96:ad:62:83:03:87:f1:90:7a:ae:bd:
9c:9b:80:c4:fc:24:96:98:40:88:18:2c:8d:fa:a3:d1:c2:7a:
5e:17:b8:f3:2f:da:4f:77:c2:43:00:bc:69:d0:e2:f1:37:ce:
cd:d0:d8:7d:78:0f:4b:9a:a1:34:90:32:18:bd:ae:23:79:91:
cf:aa:55:02:80:1c:4d:24:f4:ad:01:ac:d1:63:d3:17:d4:f6:
89:db:d5:c1:2c:ff:07:c5:76:01:8c:1c:b3:43:7c:40:85:92:
a5:32:58:f7:66:9b:e0:64:b7:a1:fb:22:a7:0e:b3:fc:2a:a3:
a8:ea:d2:62:2d:33:f3:48:44:b2:3c:bc:21:db:d3:ea:61:56:
d1:36:ac:27:87:81:95:74:82:18:a9:e7:0e:18:8a:3a:fa:9f:
50:15:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:38 2025 by rpki-client