Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft
File: HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft (raw, json)
Hash identifier: v191IiTZWmjgv32ssr3azTRCw63kZFYpd+rLQKYifD8=
Subject key identifier: 8E:AE:BE:B8:FC:A7:17:EA:61:25:DB:81:B2:60:26:1D:62:CE:51:B9
Authority key identifier: 1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
Certificate issuer: /CN=1da3393991409489ef9fd7460a75a370cae9dca7
Certificate serial: 018C14F246D9C1798DF96498CFF39E739ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft
Manifest number: 0877
Signing time: Tue 28 Nov 2023 08:01:11 +0000
Manifest this update: Tue 28 Nov 2023 08:01:11 +0000
Manifest next update: Wed 29 Nov 2023 08:01:11 +0000
Files and hashes: 1: FlmOOUB0UeJOXnm118WnTvOeHoA.roa (hash: 4W1LmKIQUYyZJRH82LuAFDo/6vc7lZAMUD6Qn4Ez1LM=)
2: HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl (hash: OaxRCiyTqvvnkqMDb3BPzRNyZLKHS/c5GfRtbMHp1cI=)
3: IbfTuVubnOBXjYDiwvIThNtGH2E.roa (hash: kt8RF1AKftg5WHw86HI3ZhdPtVVIRj4sc8hxm+I8Ppk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:f2:46:d9:c1:79:8d:f9:64:98:cf:f3:9e:73:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da3393991409489ef9fd7460a75a370cae9dca7
Validity
Not Before: Nov 28 08:01:11 2023 GMT
Not After : Nov 29 08:01:11 2023 GMT
Subject: CN=8eaebeb8fca717ea6125db81b260261d62ce51b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:e6:44:86:ee:48:dd:5f:39:34:b2:98:7e:
68:7a:6f:ec:71:59:dd:93:1e:f6:35:37:84:0a:a3:
be:b0:ac:35:63:d8:58:3d:5c:ce:4d:26:5f:79:43:
08:78:1f:e9:27:7c:ca:4a:f1:2e:33:15:21:cc:d9:
04:91:c9:66:f3:8a:36:03:99:77:5c:6e:b0:76:92:
e6:e9:e4:51:65:90:a2:20:21:1b:77:33:01:0b:4c:
df:78:cb:d9:be:24:7a:17:1c:ff:16:fa:5e:6f:ad:
0f:5e:1c:16:52:b1:6f:03:8c:f4:e8:30:39:00:8e:
bf:8f:4c:36:93:94:8c:5b:fd:ac:bc:c8:d7:38:2b:
c8:d5:35:7b:2e:d4:e4:90:a7:eb:7d:45:5c:70:71:
4d:d9:e4:a1:24:bf:8d:fd:97:05:d8:5e:5e:59:d0:
b7:5e:18:f7:94:56:28:55:37:56:b6:59:21:7d:9e:
22:c7:0e:cf:7a:d2:2d:e5:84:99:9b:fc:e6:ef:9b:
fc:10:e3:e7:81:47:e2:64:f4:01:7b:f6:64:7a:07:
f2:ef:84:23:24:06:08:29:95:45:33:74:66:10:d0:
cf:14:87:3e:5b:66:9d:17:ac:ca:c9:b5:50:73:21:
39:15:6e:2e:13:c8:6e:f7:c3:da:bc:2f:95:a9:5e:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:BE:B8:FC:A7:17:EA:61:25:DB:81:B2:60:26:1D:62:CE:51:B9
X509v3 Authority Key Identifier:
keyid:1D:A3:39:39:91:40:94:89:EF:9F:D7:46:0A:75:A3:70:CA:E9:DC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaM5OZFAlInvn9dGCnWjcMrp3Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/508017-e484-4094-807c-86a3a795da49/1/HaM5OZFAlInvn9dGCnWjcMrp3Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:dd:6f:37:7e:b1:98:15:a6:aa:4d:6b:48:ab:0b:61:73:2b:
62:be:6b:ae:80:8e:ea:12:81:eb:40:92:2d:9e:20:f4:49:5f:
19:96:ec:1a:d1:7b:a6:b7:1b:30:b4:95:4c:84:7d:df:92:c4:
b4:95:24:42:76:eb:3d:ae:94:1a:f3:f1:67:e1:cc:6f:c8:4c:
2c:c6:d4:80:1b:45:87:0d:6f:0f:39:35:b8:6e:21:30:a1:33:
ab:04:df:15:10:9d:62:cb:3e:f2:20:d6:5b:1e:c7:db:35:49:
7d:82:7a:ac:63:97:b2:bf:ff:59:83:ff:ba:c8:11:73:fb:80:
70:33:1f:13:f7:98:93:35:32:26:20:31:fb:ee:73:0f:25:37:
b1:03:e3:3b:62:b1:33:5c:94:0f:4b:98:0b:e0:4f:8e:fc:a5:
25:86:27:d5:43:f8:0a:47:42:10:62:94:4d:ae:b6:31:f2:7a:
a4:99:67:3d:40:84:a3:8e:6d:0b:0d:c1:8b:f5:d2:06:62:45:
70:f4:08:62:b8:5d:c2:9d:99:48:0e:d2:96:f3:00:73:9b:ff:
88:95:3a:58:e4:4b:f3:fb:f1:3e:80:f3:72:77:99:61:02:e7:
98:c6:fd:42:0b:c2:89:c1:2f:91:32:4e:44:d3:7f:e4:22:f2:
79:73:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:53:39 2025 by rpki-client