Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.mft
File: c6_HV3jpCALR0tsoclM9GQmfE_w.mft (raw, json)
Hash identifier: XVThXHh8SgyDb3+FTpGMiBK1YKiS+zbNwS9l6Wy+IHQ=
Subject key identifier: 2A:DC:66:DF:DA:DC:17:35:1C:55:C7:FB:B4:88:C8:50:E8:F3:82:82
Authority key identifier: 73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
Certificate issuer: /CN=73afc75778e90802d1d2db2872533d19099f13fc
Certificate serial: 018C67C596B218C75E4D7BDFF911DF6259AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.mft
Manifest number: 0876
Signing time: Thu 14 Dec 2023 10:00:51 +0000
Manifest this update: Thu 14 Dec 2023 10:00:51 +0000
Manifest next update: Fri 15 Dec 2023 10:00:51 +0000
Files and hashes: 1: YwdN2No2Y0cgh79C6sajh-gSRMI.roa (hash: snH75mqCPJZO66dUA4ZID8mC3Ia+/DcoppqJ9OTB+jo=)
2: c6_HV3jpCALR0tsoclM9GQmfE_w.crl (hash: xrJuPSGhTWgmshycROqWPqDV4TZYtmuPduglgEs7nYI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:c5:96:b2:18:c7:5e:4d:7b:df:f9:11:df:62:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73afc75778e90802d1d2db2872533d19099f13fc
Validity
Not Before: Dec 14 10:00:51 2023 GMT
Not After : Dec 15 10:00:51 2023 GMT
Subject: CN=2adc66dfdadc17351c55c7fbb488c850e8f38282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:52:17:a9:ad:b8:8f:9c:b6:3e:f4:4b:11:
34:49:6a:c6:2c:d1:eb:21:96:b4:d8:19:31:09:2b:
a7:a2:04:0f:ab:05:1a:ff:04:29:08:2f:9e:cb:ba:
e1:72:d6:28:d5:eb:f0:23:ef:9c:b9:78:ec:07:c4:
03:b5:47:66:77:1f:c4:43:36:fb:6b:70:06:c4:f2:
a7:d0:fe:d7:29:70:e6:36:02:8a:e0:4c:18:9f:95:
db:87:b0:c3:02:d2:d7:77:54:b7:fb:2b:ae:f3:b1:
17:77:be:33:c1:8b:96:a1:83:d4:be:30:7a:c4:7a:
7a:1c:cb:e6:27:49:4c:c1:85:4a:4c:d9:91:cc:b7:
89:36:1d:29:fc:00:fb:e0:5a:a1:0f:14:cb:a3:7c:
b3:fc:09:71:d4:70:8f:34:47:4f:cc:ae:e2:51:50:
42:73:67:48:26:fa:fb:3d:f8:fb:89:61:a2:f3:11:
fd:62:14:97:cb:2f:37:24:2d:b3:89:6d:0e:23:d3:
2a:b1:ae:7c:69:6b:51:a1:56:90:27:c3:6c:38:8f:
1f:8a:b8:10:0c:68:57:07:d7:ec:f6:98:22:2e:71:
0f:ff:1d:c5:ff:15:fd:da:1c:4b:18:a2:f8:30:57:
f4:d8:e5:18:bd:9d:74:85:6c:7b:8b:a2:51:9f:36:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:66:DF:DA:DC:17:35:1C:55:C7:FB:B4:88:C8:50:E8:F3:82:82
X509v3 Authority Key Identifier:
keyid:73:AF:C7:57:78:E9:08:02:D1:D2:DB:28:72:53:3D:19:09:9F:13:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6_HV3jpCALR0tsoclM9GQmfE_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/620ce1-85a5-4349-a326-85e5d54024ef/1/c6_HV3jpCALR0tsoclM9GQmfE_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:92:af:cb:f6:77:b0:81:fd:a1:68:13:57:4a:71:26:38:b8:
70:79:49:de:73:09:8b:f5:9a:a0:8f:5b:6c:c8:bf:28:d5:0a:
b0:34:a4:7d:05:15:96:f9:ff:c8:4f:b0:f1:83:8a:c6:12:76:
6c:c1:53:5c:c0:c0:87:aa:c4:9f:ff:a4:cb:3f:f9:89:d5:73:
87:a7:7f:e6:13:26:c3:29:82:a5:5e:b5:f3:a6:30:b3:d3:af:
c3:62:1d:0d:ae:75:a1:a1:f3:5a:97:7b:65:84:f3:38:44:49:
ca:ad:3e:eb:b9:a4:9f:f0:28:16:7c:59:f9:ee:fc:0d:11:93:
82:85:ac:ea:93:4d:86:a0:3e:62:13:ba:ef:4c:8b:18:f5:67:
88:8c:5a:8d:d3:3e:b2:f5:a5:e3:69:9e:62:f3:70:c6:42:35:
31:83:2a:6d:9c:9a:e5:ba:fb:86:5c:5f:47:51:35:68:74:cc:
14:78:52:87:2e:a7:6c:4e:cc:e2:2d:12:25:38:46:6c:c6:c9:
02:67:67:7f:be:7c:ac:c2:b5:89:7d:40:d0:3d:30:b4:bf:43:
34:4d:e9:e9:45:26:1b:34:15:17:0c:62:33:33:07:3a:2b:63:
9d:91:c5:38:b4:de:d6:a9:b3:35:cf:43:2b:c7:62:28:41:73:
b6:6a:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:10 2025 by rpki-client