Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.mft
File: hfWcGyUHeRRr5G992NJ1qy0IoqE.mft (raw, json)
Hash identifier: /GlftnKPfD9bHTxT+yk00z5SN4YZ3GEWUVlCCHfJFE0=
Subject key identifier: 3E:AF:9D:07:88:D8:C4:2F:3C:E3:2E:1D:43:B0:3E:98:E3:34:31:BE
Authority key identifier: 85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1
Certificate issuer: /CN=85f59c1b250779146be46f7dd8d275ab2d08a2a1
Certificate serial: 018BCBC762ED39A8E5352ADB89DCF10ECBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfWcGyUHeRRr5G992NJ1qy0IoqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.mft
Manifest number: 0848
Signing time: Tue 14 Nov 2023 03:02:03 +0000
Manifest this update: Tue 14 Nov 2023 03:02:03 +0000
Manifest next update: Wed 15 Nov 2023 03:02:03 +0000
Files and hashes: 1: apqEl7Kh0d-zVsN3fYP3sqICTaw.roa (hash: OlB5NfdwodQTZaC1/nocpwtT8pm0akPMn/B/THaKb5g=)
2: hfWcGyUHeRRr5G992NJ1qy0IoqE.crl (hash: Cg4ClAeWLN3y7aGTc0qSa+6gQgEjFVvb6SHsjxdTYHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:c7:62:ed:39:a8:e5:35:2a:db:89:dc:f1:0e:cb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f59c1b250779146be46f7dd8d275ab2d08a2a1
Validity
Not Before: Nov 14 03:02:03 2023 GMT
Not After : Nov 15 03:02:03 2023 GMT
Subject: CN=3eaf9d0788d8c42f3ce32e1d43b03e98e33431be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:03:a7:5a:6d:36:f1:a6:71:6a:3c:51:6c:
72:d8:e7:40:6e:12:bf:e1:ff:2c:a4:75:88:b5:24:
85:f9:5b:fb:1e:9d:70:22:dd:47:b4:f9:f9:4d:9f:
50:b6:e0:87:f8:92:50:e9:e7:8a:22:9d:11:ae:7c:
7c:c1:a8:15:5d:35:1b:3e:cd:2c:35:5d:b0:51:b5:
cc:f5:0f:39:fa:17:53:81:db:c1:ca:e1:5b:70:c2:
68:1e:4c:77:80:aa:c1:ef:df:70:72:18:39:df:3a:
6e:0f:2b:34:65:2d:49:49:97:d3:46:57:67:fd:77:
1b:56:c0:b6:13:d5:95:e8:9f:fb:e8:13:22:5b:15:
35:6a:b3:2b:5f:c9:7e:b8:a8:1b:7f:04:8e:e3:e9:
20:d7:b7:38:7b:08:fd:0e:ac:42:8a:1c:e5:d0:2f:
6e:b0:c5:d8:8b:a1:7e:aa:1e:ae:20:69:1f:c8:51:
07:9f:32:36:ef:5a:b5:32:63:f3:37:3f:87:3b:af:
16:c7:14:d7:b7:cc:f0:43:fb:cb:e2:e1:8d:7b:21:
bd:b8:f1:ff:00:7f:0c:8b:87:c4:e5:4e:e9:ff:12:
8e:ff:07:ef:d7:c2:69:89:61:07:a6:78:2b:1b:d9:
8c:8c:1d:32:d2:20:fd:52:b9:f0:a5:66:6c:8e:7a:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AF:9D:07:88:D8:C4:2F:3C:E3:2E:1D:43:B0:3E:98:E3:34:31:BE
X509v3 Authority Key Identifier:
keyid:85:F5:9C:1B:25:07:79:14:6B:E4:6F:7D:D8:D2:75:AB:2D:08:A2:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfWcGyUHeRRr5G992NJ1qy0IoqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b5a8a-40c0-4c86-ae43-c47a89056848/1/hfWcGyUHeRRr5G992NJ1qy0IoqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:bb:b0:60:fa:db:7c:e0:f8:37:4c:c5:93:c7:2d:c0:15:
f3:53:a3:c7:d3:ab:74:a5:c2:fa:c9:cf:26:24:ec:79:29:69:
13:cf:1c:dc:a7:3d:0d:b4:20:d9:e7:cd:9e:75:9f:4b:16:aa:
a1:92:fb:31:25:51:b6:db:54:c9:d5:f8:c0:46:09:cf:bf:3f:
73:38:6c:f4:30:6b:cd:cd:27:58:53:76:34:86:dc:1a:f2:46:
d0:c6:5c:8b:32:2f:68:cc:d6:85:1f:94:69:36:29:4c:72:39:
98:53:c4:f6:91:eb:ea:87:d7:74:cf:7f:e1:d8:1e:1d:90:9f:
ef:f9:a2:dc:0e:5d:47:07:ef:b4:b7:fe:c2:2c:4f:a0:61:62:
c0:4f:81:de:d2:35:13:4e:bb:59:c8:29:4a:a3:24:2c:26:ad:
dc:27:d3:43:ba:41:1b:00:29:03:18:d7:f3:bc:0d:36:1c:0c:
fe:7d:77:3e:54:e3:10:ac:a5:de:d4:11:cb:5e:b5:0f:28:03:
c5:dc:18:c6:5b:4e:dc:4e:09:b7:cc:fb:bc:6c:d5:cd:ee:3c:
64:55:07:ed:2a:f6:48:b2:df:82:d4:e4:db:79:69:0e:4d:3d:
3b:30:a5:4f:cc:52:95:a7:96:89:5f:82:97:87:c1:10:a1:fe:
7a:1a:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:01 2024 by rpki-client on console-fra.rpki-client.org