Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.mft
File: cr-HKHOMFKUfz17YSjl88QpwLn0.mft (raw, json)
Hash identifier: dKY1ngQ4rR4PVO5w4HF3IzVZKbEHxa19cdm/ndq1Fbg=
Subject key identifier: 10:32:74:63:AA:8B:A0:8B:96:97:DC:D7:2A:03:C8:E6:60:08:B6:6E
Authority key identifier: 72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
Certificate issuer: /CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Certificate serial: 018BEBBF0CE407A69EBCA879335526BE8627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.mft
Manifest number: 0868
Signing time: Mon 20 Nov 2023 08:00:48 +0000
Manifest this update: Mon 20 Nov 2023 08:00:48 +0000
Manifest next update: Tue 21 Nov 2023 08:00:48 +0000
Files and hashes: 1: Y4sjCmuuEqNNxEsRfddhGjcEK8Y.roa (hash: NtTYJ19q9jjCLz9PfuobGlJxbmQ2CoaRdD6eTbbF0XQ=)
2: cr-HKHOMFKUfz17YSjl88QpwLn0.crl (hash: 9rXAfRRHj0SZ8MAcedS0jPaCm17tdhZM2/czLKUtv/o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:bf:0c:e4:07:a6:9e:bc:a8:79:33:55:26:be:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bf8728738c14a51fcf5ed84a397cf10a702e7d
Validity
Not Before: Nov 20 08:00:48 2023 GMT
Not After : Nov 21 08:00:48 2023 GMT
Subject: CN=10327463aa8ba08b9697dcd72a03c8e66008b66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:d9:1c:d8:dc:6a:5a:80:8b:c3:80:35:0a:
03:96:c0:b2:82:b2:79:34:b0:7d:7b:62:ea:14:9f:
d0:43:71:2f:3d:bd:b9:a1:5c:c5:07:18:2a:a3:40:
d5:fa:84:ee:9c:d0:fc:9b:4f:70:14:29:d1:7b:bc:
7c:78:73:1e:fb:3f:3e:99:8e:fc:c6:47:f8:b0:8a:
7f:9d:73:41:3a:ce:27:e2:0e:3d:94:03:42:f6:52:
b7:f2:d7:34:25:87:51:26:0e:33:41:95:23:57:4a:
1f:fe:94:ad:1f:3a:88:a6:48:b9:0c:b2:44:28:bf:
36:6a:15:21:08:f2:48:f8:b4:47:71:b1:a6:73:70:
8c:84:8d:32:8d:e5:96:25:d1:68:0f:00:2f:58:81:
56:38:a8:7b:ed:3c:23:65:0c:0e:68:86:50:13:3c:
ee:80:45:64:14:3d:b1:2f:9f:e1:fb:52:f1:59:6f:
d0:ee:1e:c4:f6:bc:3d:1b:11:80:52:63:da:58:d1:
91:6a:bc:df:14:14:a1:0e:e6:d0:46:7c:90:39:68:
a7:12:57:1f:e4:ee:60:ff:c1:46:a0:39:bd:97:d6:
45:95:33:5c:cd:e2:47:bb:ba:3f:2a:99:e1:d9:68:
d3:a8:91:61:81:0b:59:17:95:d2:ab:cd:69:10:78:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:74:63:AA:8B:A0:8B:96:97:DC:D7:2A:03:C8:E6:60:08:B6:6E
X509v3 Authority Key Identifier:
keyid:72:BF:87:28:73:8C:14:A5:1F:CF:5E:D8:4A:39:7C:F1:0A:70:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr-HKHOMFKUfz17YSjl88QpwLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e12d83-be7c-42e7-b47a-d8ab28baad68/1/cr-HKHOMFKUfz17YSjl88QpwLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:96:92:e4:32:86:07:ef:d3:e1:38:58:f7:33:41:41:19:
0c:91:7f:a0:bf:1a:c5:a4:47:f4:a2:81:e2:a0:94:e0:cd:ae:
f3:ff:44:76:77:34:e3:36:d0:58:89:c5:89:c2:7f:62:36:d0:
3d:ca:84:e6:1a:b1:58:aa:cf:2e:29:10:30:b8:69:ad:2a:45:
63:ac:8d:80:2d:74:3a:4c:98:70:a8:f6:59:4e:f5:6f:2e:22:
8b:51:c8:a3:39:d7:85:d4:81:95:ec:de:62:51:c9:25:52:37:
cc:46:2b:c7:d7:84:07:fe:b8:dc:ed:d7:81:84:33:e8:ea:fe:
ec:92:b1:29:b9:29:61:f9:d5:b2:d9:5c:75:84:3f:58:b5:4c:
ca:c6:85:37:e9:94:a8:df:67:2e:9e:6c:88:e5:a2:92:a7:22:
85:ac:03:3e:09:fe:00:ba:b4:71:7f:dc:45:8f:06:3a:43:fb:
06:1e:2e:31:78:8d:24:6a:ff:aa:95:17:91:90:fd:c9:ea:5a:
8e:97:31:73:bd:3c:7d:eb:ea:18:88:bc:0c:3e:0d:bd:db:dc:
6a:6e:4a:b3:6a:c5:ed:a0:ed:b1:cb:cd:c8:8b:c8:3a:e5:de:
3c:62:bb:7d:f5:6e:46:0c:eb:95:d4:8a:9c:43:0a:3b:8e:25:
60:06:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org