Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c09256-4dcf-4a06-902c-8fc18ee151ae/1/hTRFxKn0rdzs3jG2qdlD0Tva-eg.mft
File: hTRFxKn0rdzs3jG2qdlD0Tva-eg.mft (raw, json)
Hash identifier: XAI2tfyfH9OzXzJS/+R8slW4OmSHdzBGWxehjRpE/XA=
Subject key identifier: 5F:38:78:E8:1F:12:9F:8A:BE:66:DF:E7:05:C0:CC:37:1A:29:F3:5F
Authority key identifier: 85:34:45:C4:A9:F4:AD:DC:EC:DE:31:B6:A9:D9:43:D1:3B:DA:F9:E8
Certificate issuer: /CN=853445c4a9f4addcecde31b6a9d943d13bdaf9e8
Certificate serial: 01866F4ED56FE408E4738CEAA50F0ED2318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTRFxKn0rdzs3jG2qdlD0Tva-eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c09256-4dcf-4a06-902c-8fc18ee151ae/1/hTRFxKn0rdzs3jG2qdlD0Tva-eg.mft
Manifest number: 0AC1
Signing time: Mon 20 Feb 2023 14:51:22 +0000
Manifest this update: Mon 20 Feb 2023 14:51:22 +0000
Manifest next update: Tue 21 Feb 2023 14:51:22 +0000
Files and hashes: 1: hTRFxKn0rdzs3jG2qdlD0Tva-eg.crl (hash: zpsxh5EYVaw+CiyIQj1qA+FnxSFAk3qUHnoOlACzrIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:4e:d5:6f:e4:08:e4:73:8c:ea:a5:0f:0e:d2:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853445c4a9f4addcecde31b6a9d943d13bdaf9e8
Validity
Not Before: Feb 20 14:51:22 2023 GMT
Not After : Feb 21 14:51:22 2023 GMT
Subject: CN=5f3878e81f129f8abe66dfe705c0cc371a29f35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:5f:f5:60:55:1b:2e:de:0b:be:b1:5f:19:
4e:73:fb:a5:87:b3:7f:ff:1b:17:a1:09:74:b2:11:
2a:2c:34:b8:15:5e:ce:c6:95:77:60:6a:06:1e:3b:
17:af:22:c0:2b:a9:be:66:e9:41:9d:a1:66:ae:c8:
5e:12:bb:60:63:a2:2e:cd:97:ae:99:ac:13:06:5e:
e6:f6:6a:16:fa:e9:cf:70:61:60:d0:c3:de:b5:42:
0c:7e:38:54:59:4e:9f:5e:1b:fe:19:de:69:cf:6b:
2f:d6:99:9c:b1:28:78:5d:62:88:c0:be:3d:c9:5b:
b9:c3:f0:f0:df:b8:4e:32:82:2b:69:f9:b6:16:57:
b0:93:29:7d:68:30:89:74:a0:28:60:9f:4c:54:aa:
06:2e:5d:6f:48:8b:48:db:a8:fb:a7:5f:30:ef:32:
f5:c5:01:25:a2:90:9c:56:98:72:1b:d3:2b:87:46:
9a:7c:3c:10:19:47:99:f6:95:72:6b:a2:67:ea:e1:
8a:8c:02:a2:a5:a2:a3:ee:62:26:0c:6d:d4:aa:dc:
18:9b:44:72:31:80:7d:08:a2:49:34:c2:7c:d7:77:
3a:20:74:a6:c5:4c:94:58:20:52:5a:d3:82:ae:c7:
a0:b8:c4:c5:19:df:36:98:a0:ff:bf:4b:0a:cd:00:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:38:78:E8:1F:12:9F:8A:BE:66:DF:E7:05:C0:CC:37:1A:29:F3:5F
X509v3 Authority Key Identifier:
keyid:85:34:45:C4:A9:F4:AD:DC:EC:DE:31:B6:A9:D9:43:D1:3B:DA:F9:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTRFxKn0rdzs3jG2qdlD0Tva-eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c09256-4dcf-4a06-902c-8fc18ee151ae/1/hTRFxKn0rdzs3jG2qdlD0Tva-eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c09256-4dcf-4a06-902c-8fc18ee151ae/1/hTRFxKn0rdzs3jG2qdlD0Tva-eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e6:4a:b1:e3:80:9b:59:40:26:d9:a9:6e:8b:5d:44:e7:ce:
08:d5:ad:4f:2e:ce:4c:8c:36:cf:01:b0:ce:c2:39:2a:78:60:
f1:10:42:3d:22:67:b7:16:d6:4b:1b:74:eb:d1:88:bd:76:0a:
2d:6a:22:7d:66:96:53:77:29:83:f3:29:26:bd:37:fb:4f:19:
1a:41:0b:54:de:a5:b2:c8:34:2c:b5:5e:e5:51:85:01:c2:68:
68:46:50:8f:ad:ed:e3:fe:22:1c:6b:37:28:a1:83:0f:29:c5:
24:16:73:36:04:04:68:4c:ff:51:b7:b4:1b:1e:08:0e:70:77:
3f:05:d7:29:51:31:21:12:23:48:e4:00:bf:c2:1d:56:d2:e2:
be:c7:07:3d:bb:39:45:2d:18:70:92:a6:fd:37:19:e8:89:c5:
50:54:2d:99:23:61:70:85:53:2e:93:97:c5:f0:82:ba:b9:d0:
82:b6:eb:0e:bb:60:a8:df:8b:02:8c:cd:56:b1:6a:97:32:2d:
11:35:83:fe:8f:12:28:33:bb:37:35:87:e8:6e:a3:3d:e3:3a:
aa:4d:52:7b:92:49:c7:e5:6a:aa:8e:14:8a:d7:16:59:35:fc:
31:9c:e5:66:2d:41:61:49:c2:8f:6f:0b:e8:5a:d8:2f:b1:91:
18:da:8a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYZvTtVv5Ajkc4zqpQ8O0jGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzQ0NWM0YTlmNGFkZGNlY2RlMzFiNmE5ZDk0M2QxM2Jk
YWY5ZTgwHhcNMjMwMjIwMTQ1MTIyWhcNMjMwMjIxMTQ1MTIyWjAzMTEwLwYDVQQD
Eyg1ZjM4NzhlODFmMTI5ZjhhYmU2NmRmZTcwNWMwY2MzNzFhMjlmMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/5f9WBVGy7eC76xXxlOc/ulh7N/
/xsXoQl0shEqLDS4FV7OxpV3YGoGHjsXryLAK6m+ZulBnaFmrsheErtgY6IuzZeu
mawTBl7m9moW+unPcGFg0MPetUIMfjhUWU6fXhv+Gd5pz2sv1pmcsSh4XWKIwL49
yVu5w/Dw37hOMoIrafm2Flewkyl9aDCJdKAoYJ9MVKoGLl1vSItI26j7p18w7zL1
xQElopCcVphyG9Mrh0aafDwQGUeZ9pVya6Jn6uGKjAKipaKj7mImDG3UqtwYm0Ry
MYB9CKJJNMJ813c6IHSmxUyUWCBSWtOCrseguMTFGd82mKD/v0sKzQDhLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF84eOgfEp+Kvmbf5wXAzDcaKfNfMB8GA1UdIwQY
MBaAFIU0RcSp9K3c7N4xtqnZQ9E72vnoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRSRnhLbjByZHpzM2pHMnFkbEQwVHZhLWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jMDkyNTYtNGRjZi00YTA2LTkwMmMt
OGZjMThlZTE1MWFlLzEvaFRSRnhLbjByZHpzM2pHMnFkbEQwVHZhLWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jMDkyNTYtNGRjZi00YTA2LTkwMmMtOGZjMThlZTE1MWFl
LzEvaFRSRnhLbjByZHpzM2pHMnFkbEQwVHZhLWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOZKseOA
m1lAJtmpbotdROfOCNWtTy7OTIw2zwGwzsI5Knhg8RBCPSJntxbWSxt069GIvXYK
LWoifWaWU3cpg/MpJr03+08ZGkELVN6lssg0LLVe5VGFAcJoaEZQj63t4/4iHGs3
KKGDDynFJBZzNgQEaEz/Ube0Gx4IDnB3PwXXKVExIRIjSOQAv8IdVtLivscHPbs5
RS0YcJKm/TcZ6InFUFQtmSNhcIVTLpOXxfCCurnQgrbrDrtgqN+LAozNVrFqlzIt
ETWD/o8SKDO7NzWH6G6jPeM6qk1Se5JJx+Vqqo4UitcWWTX8MZzlZi1BYUnCj28L
6FrYL7GRGNqKWQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:51:08 2025 by rpki-client