Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
File: hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft (raw, json)
Hash identifier: xHzPdelWIpoD4B9VOJLF12MCcdIi3cizz3Ah071aYiE=
Subject key identifier: 91:14:FE:B4:67:D8:C7:B8:D4:DB:A2:E5:AD:3C:44:3B:E7:ED:F9:FD
Authority key identifier: 85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
Certificate issuer: /CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Certificate serial: 018D9D67F3B82E83AFC8C86F54B5F49A502B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
Manifest number: 0868
Signing time: Mon 12 Feb 2024 13:00:51 +0000
Manifest this update: Mon 12 Feb 2024 13:00:51 +0000
Manifest next update: Tue 13 Feb 2024 13:00:51 +0000
Files and hashes: 1: GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa (hash: LE2d9xMGdkNoX72UoIfKNzK76cxen8GPilrDVX6EJWc=)
2: hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl (hash: jObAvDRw+N4lDDLesVoAL5YeijT/5om7nftvk8s2S/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:67:f3:b8:2e:83:af:c8:c8:6f:54:b5:f4:9a:50:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Validity
Not Before: Feb 12 13:00:51 2024 GMT
Not After : Feb 13 13:00:51 2024 GMT
Subject: CN=9114feb467d8c7b8d4dba2e5ad3c443be7edf9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:a0:46:5c:ff:ef:b0:ee:34:e1:e2:cd:2b:
7e:1c:31:be:9b:f8:b1:5e:39:2a:72:e6:5e:bf:42:
da:74:27:24:65:8a:89:de:f2:e4:8a:a1:a5:af:8f:
44:6c:ae:24:f6:91:b9:6a:d4:0b:28:d5:53:71:de:
e4:fd:e3:16:09:f1:82:bc:e2:45:16:f4:bf:c7:e9:
16:08:0e:a6:30:a6:6f:3a:80:33:d5:2d:fa:32:6a:
17:3a:ee:88:fa:1a:59:03:12:22:d4:9b:6b:e4:af:
7c:1a:d3:e9:10:45:bf:c6:52:8e:81:ab:d6:43:15:
ad:75:fc:a0:39:2e:4e:de:1a:f4:7d:2c:18:2f:02:
f8:91:a2:41:94:ff:6a:a0:ae:b6:ca:81:f5:93:22:
65:4a:e6:ff:48:39:0b:d0:0f:d0:e8:62:e5:8b:5d:
b0:32:c2:6b:07:a9:7e:99:c5:ab:1a:a9:6c:fb:02:
aa:d9:6a:39:d7:d5:83:80:7c:1c:52:c3:75:ea:79:
8f:de:d3:e4:95:0e:c1:cf:65:85:07:ff:10:78:10:
dc:9c:3a:08:60:49:f4:2f:2f:3d:45:1d:c5:1d:91:
b1:f9:c5:fc:18:78:5a:60:6f:46:8e:ff:56:c1:b1:
1e:df:57:b7:60:37:eb:68:20:27:d6:7b:25:e2:31:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:FE:B4:67:D8:C7:B8:D4:DB:A2:E5:AD:3C:44:3B:E7:ED:F9:FD
X509v3 Authority Key Identifier:
keyid:85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:0f:4a:9b:b2:46:fe:5a:8f:f9:4d:5b:8d:f5:2d:e0:00:
2c:3a:14:39:ed:06:1e:4d:37:61:ff:0f:07:b2:0d:94:17:e5:
60:a2:a0:ae:19:03:3d:8e:86:4a:f7:0a:d9:25:6b:13:a9:83:
58:8e:f5:cc:60:2e:fe:5b:0d:a4:1f:5d:46:5a:0d:87:bd:c3:
8e:8e:2f:8c:ec:d9:6a:43:e3:3c:bf:e8:df:91:ed:8f:d6:e7:
38:f0:1c:40:49:c0:4b:80:02:c0:79:71:cc:16:7c:e7:99:09:
84:af:ef:e5:19:75:c6:db:cb:02:5d:41:d4:54:b8:03:e7:97:
12:17:6d:38:94:4c:1e:45:b3:40:84:e8:59:cf:3f:1a:66:30:
ec:92:09:71:d4:41:f1:c2:a0:42:fb:eb:18:56:8b:c9:78:a5:
6f:f3:77:c0:68:26:f7:a7:c7:b6:76:f4:6d:f5:d2:a8:7e:44:
78:54:4f:8a:dc:4e:8b:16:b6:6d:cb:99:db:f6:65:7a:09:5d:
9f:27:e9:83:d8:bf:63:9d:e6:d4:b0:9c:b3:17:69:69:10:af:
4b:22:f1:5f:8a:b4:a3:a4:d7:f8:a4:ac:06:94:b6:e1:43:09:
4b:30:e5:22:bb:87:11:44:7d:aa:b4:b8:7b:30:18:a1:1a:50:
c5:a2:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:58 2025 by rpki-client