Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft
File: Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft (raw, json)
Hash identifier: iTOmIijoNLmZmoJKanfOgIdXoST8Vz3cUhKINPXyXE0=
Subject key identifier: 88:AC:3F:31:83:A5:00:5B:C4:A0:CA:1A:EB:F3:65:49:4C:FA:27:32
Authority key identifier: 1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
Certificate issuer: /CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Certificate serial: 018BDC82D4144D5FC70A9FDF600937E1FDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft
Manifest number: 0865
Signing time: Fri 17 Nov 2023 09:00:43 +0000
Manifest this update: Fri 17 Nov 2023 09:00:43 +0000
Manifest next update: Sat 18 Nov 2023 09:00:43 +0000
Files and hashes: 1: Hd6ckmyzp7iGHqrHAUClSfH0FhA.crl (hash: r6JBZ+tMAaJbLbyV1XYjShXfaE7o4bCueJaID2bGEqc=)
2: iOoq4kg3hkkwLrEhV4WesKPtKS0.roa (hash: jrDRTWhVtuIXcXMk+sms8ddb06Fbi+rb2596ql8Umvs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:82:d4:14:4d:5f:c7:0a:9f:df:60:09:37:e1:fd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde9c926cb3a7b8861eaac70140a549f1f41610
Validity
Not Before: Nov 17 09:00:43 2023 GMT
Not After : Nov 18 09:00:43 2023 GMT
Subject: CN=88ac3f3183a5005bc4a0ca1aebf365494cfa2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:87:ae:5d:2b:32:dc:5a:b1:e9:2d:13:96:
6a:4e:28:21:c4:9e:76:f0:b1:89:69:4e:7f:fe:df:
ad:08:12:a7:80:23:de:93:1d:84:d5:37:c9:63:20:
49:b3:1d:f8:70:01:a0:74:aa:06:7d:06:02:da:2f:
07:99:3b:61:ed:c8:ba:1c:38:02:ec:f7:51:5e:f8:
1a:96:eb:4a:8e:be:eb:10:8b:3d:01:86:43:c0:53:
ad:66:81:60:4d:95:27:6f:4c:f0:7f:62:11:58:37:
f7:a7:b1:c5:6f:cd:95:9b:56:d0:f6:17:b0:b3:e0:
e0:fa:da:be:89:23:16:4c:8a:1f:d0:ed:40:ce:6e:
cd:07:7b:49:a5:a2:51:c4:41:4b:fc:18:63:d4:7d:
a5:d9:89:ec:7e:9c:45:ed:6a:56:7f:a9:43:87:b1:
e9:85:0d:7f:b7:7a:43:44:cb:05:0a:89:4a:11:e9:
eb:43:53:70:19:8a:4a:19:25:81:94:b1:fe:46:d4:
a2:b7:81:d7:05:f8:cd:f2:d5:99:1b:76:bb:88:f4:
b0:c2:04:b5:8f:4e:20:a3:ae:5b:51:3b:d7:03:80:
f8:3d:e3:a3:88:df:c0:99:a3:9e:e3:70:8a:69:61:
c5:0f:99:c0:2f:4e:c3:fb:be:ed:8f:27:37:a6:fc:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AC:3F:31:83:A5:00:5B:C4:A0:CA:1A:EB:F3:65:49:4C:FA:27:32
X509v3 Authority Key Identifier:
keyid:1D:DE:9C:92:6C:B3:A7:B8:86:1E:AA:C7:01:40:A5:49:F1:F4:16:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd6ckmyzp7iGHqrHAUClSfH0FhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8a734a-5bef-420d-acfc-c08f52fa4dbd/1/Hd6ckmyzp7iGHqrHAUClSfH0FhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c1:e0:b9:f5:2c:d9:0d:4b:e6:6b:05:ce:c7:b3:95:f7:e5:
5a:1b:0c:6f:4d:82:5d:d6:69:3b:d3:77:d7:18:e0:5f:6a:42:
ca:a9:e9:34:25:a7:5d:19:40:12:d6:74:44:d1:23:40:9a:91:
7e:1b:c5:69:a8:74:9b:e9:e8:c8:13:15:a8:79:d4:36:20:c7:
6a:6a:5e:b7:0a:c7:38:c5:bd:a0:09:6a:2b:53:6e:f7:e0:ef:
20:bb:5c:63:a3:ea:46:3f:e3:33:81:6e:98:d8:48:0f:29:1f:
6d:67:bf:47:2c:6f:67:18:eb:18:cd:eb:47:39:6b:63:27:b2:
8e:9a:45:7a:60:05:77:c9:a7:3b:50:81:b0:d3:07:b6:5e:9d:
50:4d:03:96:10:79:5c:d7:4e:d3:94:36:3c:fe:3a:4c:a6:01:
c3:62:d6:ce:fe:65:21:40:02:b8:00:b8:f8:5a:8c:f1:a0:bc:
b6:d0:86:d0:b3:41:71:41:2c:ac:a8:ba:89:d0:8a:3f:79:6d:
23:d9:1f:9d:e8:3e:c3:bc:31:b0:0a:da:76:65:49:73:62:f0:
c4:b2:d6:12:8c:11:b3:8d:72:1a:aa:ba:0a:1f:ae:23:d8:c2:
f6:e5:ab:48:01:1c:a6:05:0d:bb:40:83:16:03:49:a0:2a:2b:
1d:b5:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:19 2025 by rpki-client