Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft
File: HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft (raw, json)
Hash identifier: xwXnu/1h51SFRFrwbt4S3BuXW5CAL/KOqBJr2EPUdaU=
Subject key identifier: 14:A4:72:D5:77:F9:68:BC:81:FA:46:23:4B:33:0A:D1:A0:03:E0:8E
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0185817F6582964D3BB180C63C37E23165A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft
Manifest number: 0C0C
Signing time: Thu 05 Jan 2023 10:34:47 +0000
Manifest this update: Thu 05 Jan 2023 10:34:47 +0000
Manifest next update: Fri 06 Jan 2023 10:34:47 +0000
Files and hashes: 1: 1--7uMDOzirmB92knmeGeUNOwIV0.roa (hash: bANqGeJDyl9wGU726XQedOCHUv1w61AW0K5NPSnEcM8=)
2: 1-gYwiHi4kEdrKCmhBQ7hnjLrhH8.roa (hash: LFi6c2PK7vvj8+Y7sYtvPh/Gyxc5+OZivNipFO0QsVQ=)
3: HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl (hash: k+ZAugqteXPTmWriTe9jSNxpwD77D74A3cIwvtEfZc4=)
4: WGlu1QViauJx4jUPueADRapd6UU.roa (hash: UZuGNNsaXguvDBgG/AoMFedSWI4UJOldCU693anpTZc=)
5: lc-xPbgG_zL5Kq9gpsS0JpfT6Lc.roa (hash: 4jT1h/7boVWu3tR584lpUKLIw3/CptOkYBMCDXUfnL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:7f:65:82:96:4d:3b:b1:80:c6:3c:37:e2:31:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 5 10:34:47 2023 GMT
Not After : Jan 6 10:34:47 2023 GMT
Subject: CN=14a472d577f968bc81fa46234b330ad1a003e08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:40:66:db:b5:be:87:06:3a:35:2f:57:13:
65:87:74:5d:38:c7:91:df:be:db:ff:8c:17:88:3e:
48:cc:c3:2c:72:25:74:80:0b:03:a0:4c:94:0d:a8:
87:6d:86:45:56:c9:fa:d0:e3:1a:c2:46:7b:44:c2:
5a:51:fc:f3:a0:73:8d:0b:01:69:1b:32:c3:8d:f9:
7c:e2:6c:c1:53:1f:7d:c0:b3:f3:ea:89:f1:0f:16:
fb:99:8d:ff:b7:e0:be:64:63:69:97:10:0f:21:8b:
a3:cf:42:50:cc:33:bf:6c:58:ba:0f:5b:8f:e3:20:
d3:cf:9d:46:9c:e7:b7:51:70:6c:67:39:f1:3c:f3:
c2:16:b3:f3:62:a4:60:17:4b:cc:9c:ad:80:45:eb:
71:0b:6c:53:b0:9b:37:34:5c:c5:db:19:fc:62:f3:
79:ff:a8:31:a9:eb:94:47:94:98:8d:7a:b6:c4:c3:
a2:b8:40:87:be:cf:2e:ec:74:64:5d:e4:4c:fd:ce:
10:ef:78:fd:f1:cf:14:39:81:9e:c7:a0:39:68:26:
77:44:f8:09:59:a6:d0:f4:56:a5:e3:b4:bd:de:da:
4c:63:ae:41:9d:ff:c2:e5:63:92:03:bd:41:b8:d7:
9d:98:59:d2:92:a6:0c:59:d3:1c:1e:7d:8d:6f:ac:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:72:D5:77:F9:68:BC:81:FA:46:23:4B:33:0A:D1:A0:03:E0:8E
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:13:d6:75:d4:94:6f:dd:f0:68:17:d8:7d:4b:99:9b:66:04:
cd:5e:93:e5:4e:07:44:0a:50:a6:ce:ea:2f:e2:2e:6f:32:5e:
7d:0b:ab:bd:55:18:d2:11:7f:1e:b7:98:79:f2:50:fb:53:f1:
bf:51:7b:dc:cc:1d:f1:07:63:d2:e1:63:42:f3:ce:8c:1c:c4:
58:fb:83:40:0b:97:e9:e9:6a:3b:86:48:0d:c3:db:3f:cd:65:
81:d4:82:7e:1c:d5:20:95:5f:02:3f:3b:19:a0:ce:bf:97:ad:
26:b9:cb:f5:26:ac:72:86:21:44:c0:3e:9c:d1:22:9a:bf:43:
6e:77:61:b0:67:5e:0d:61:7a:2a:c8:29:42:a0:a8:e6:6f:8e:
7f:01:b2:be:91:81:65:09:6f:0e:c8:d6:d9:ed:7d:e8:92:df:
9f:a4:c4:f5:de:ae:dd:94:8e:8f:c7:ba:b8:36:ae:4b:45:72:
4d:11:25:62:91:a3:0d:1c:92:41:09:3e:cb:81:c1:07:04:b3:
f1:f8:a2:1a:9f:6f:f4:18:fb:19:5e:fc:48:5b:a3:3a:51:31:
f5:c5:b4:71:a9:78:4c:58:d4:18:c8:00:0f:38:1a:59:f4:e7:
32:c9:d1:e6:b7:27:0e:03:b3:25:d3:09:c3:8b:2b:be:9a:cc:
70:60:c2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:31:09 2025 by rpki-client