Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.mft
File: HPiZA4AXKfwe01NyoHSzXK0YTd8.mft (raw, json)
Hash identifier: O7xdbnfB+G2QBczX1Dpfq/KabOo583gJbdPAT7mZyfc=
Subject key identifier: 32:E8:93:3D:FE:3E:25:BA:A7:27:C6:F2:0B:F8:48:87:24:8B:9C:EC
Authority key identifier: 1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
Certificate issuer: /CN=1cf89903801729fc1ed35372a074b35cad184ddf
Certificate serial: 018BEB8840C25122426671EF515E27A6A2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPiZA4AXKfwe01NyoHSzXK0YTd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.mft
Manifest number: 07FB
Signing time: Mon 20 Nov 2023 07:00:56 +0000
Manifest this update: Mon 20 Nov 2023 07:00:56 +0000
Manifest next update: Tue 21 Nov 2023 07:00:56 +0000
Files and hashes: 1: Gmw_4ziW_1u-PEvZPWV0YR_lwe0.roa (hash: UCn+NOuRHKhXaa0gSFVfL/3e7NQBpFVZ4zZ42aRdQQU=)
2: HPiZA4AXKfwe01NyoHSzXK0YTd8.crl (hash: UlhNyzHcrHDr9YGP7KRiXGbmHD/Xa0kMJEDhKLfadCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:88:40:c2:51:22:42:66:71:ef:51:5e:27:a6:a2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf89903801729fc1ed35372a074b35cad184ddf
Validity
Not Before: Nov 20 07:00:56 2023 GMT
Not After : Nov 21 07:00:56 2023 GMT
Subject: CN=32e8933dfe3e25baa727c6f20bf84887248b9cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:b1:9a:f2:11:9f:01:4b:c5:46:e2:e4:b3:
b9:43:1b:fc:5c:7d:00:9a:bf:e3:ce:c9:68:9b:47:
70:41:77:4b:03:28:cb:e5:b3:00:53:98:c8:13:4b:
9b:2d:fe:ee:77:f8:89:a7:b9:a0:9e:50:cf:fb:f8:
92:29:e1:6d:7f:eb:3c:7d:f5:88:c2:3b:1a:d6:6d:
53:46:de:1b:62:cd:d7:1c:be:a9:be:66:a7:19:4d:
06:23:51:c2:5f:30:ae:10:5c:ec:76:20:b0:e1:85:
e0:1f:d3:bc:83:cf:3a:ee:cf:22:be:30:8b:3a:7f:
4c:93:73:48:85:d4:37:8e:22:a0:c2:bf:e4:03:84:
cc:23:00:60:53:8e:49:b3:db:6b:f6:96:d2:54:24:
24:0f:e0:8f:da:7c:48:f8:ce:bf:66:a0:83:b7:15:
16:ff:28:d4:5e:b6:d0:37:b5:c8:4a:8d:26:9e:64:
a2:d4:ba:42:e3:3f:55:b5:e3:c8:8c:65:27:d5:21:
6d:92:f0:f6:16:5d:6c:22:25:b9:38:80:cd:ca:19:
44:73:65:dc:08:8e:c5:79:68:09:7b:67:74:85:d6:
82:c1:2d:74:9d:fb:c0:1c:d5:87:40:82:41:85:e8:
84:e3:eb:e4:39:20:7c:5a:be:31:21:55:cc:f0:18:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E8:93:3D:FE:3E:25:BA:A7:27:C6:F2:0B:F8:48:87:24:8B:9C:EC
X509v3 Authority Key Identifier:
keyid:1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPiZA4AXKfwe01NyoHSzXK0YTd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4e:d0:81:98:65:02:ad:88:e3:66:76:de:5f:56:ae:9b:b2:
1a:a3:78:dc:bf:ec:37:8f:4e:ab:06:e7:41:3e:08:a3:68:44:
c8:cf:e6:7d:52:42:1d:c6:09:8b:90:90:30:ec:4a:a1:de:40:
91:9d:66:7e:f6:3b:fc:b2:cd:05:fb:d4:db:af:c4:dd:03:8f:
5d:dc:3b:a9:50:56:1f:f2:10:5c:aa:17:10:b7:bd:37:b8:58:
47:9c:0f:68:48:17:39:f9:f0:a8:10:a9:32:ce:26:5b:6f:05:
2a:5b:2d:82:df:5a:62:b5:48:1c:8d:26:d2:04:14:b8:c2:b0:
94:53:55:1a:74:99:60:aa:5a:9c:57:dc:d7:ec:80:5a:a0:2b:
eb:76:f6:de:ff:97:81:e8:67:7c:8a:af:98:de:61:0e:dc:e2:
72:dc:ae:ba:10:6d:26:f5:44:5e:31:55:e9:f4:3c:04:9f:50:
5f:2e:32:2d:a7:ff:31:02:7d:08:9c:7f:04:8c:c4:a5:47:0c:
8f:78:61:cd:8c:db:06:02:73:cc:99:5e:57:6a:6d:9d:97:6a:
a3:50:9d:c1:7b:81:bc:d7:83:53:f5:2f:a9:5d:7b:a3:7e:d0:
f0:1e:46:be:4c:7e:7f:64:9f:a9:e7:71:18:85:8e:cb:61:38:
33:e3:aa:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvriEDCUSJCZnHvUV4npqKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZjg5OTAzODAxNzI5ZmMxZWQzNTM3MmEwNzRiMzVjYWQx
ODRkZGYwHhcNMjMxMTIwMDcwMDU2WhcNMjMxMTIxMDcwMDU2WjAzMTEwLwYDVQQD
EygzMmU4OTMzZGZlM2UyNWJhYTcyN2M2ZjIwYmY4NDg4NzI0OGI5Y2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFexmvIRnwFLxUbi5LO5Qxv8XH0A
mr/jzslom0dwQXdLAyjL5bMAU5jIE0ubLf7ud/iJp7mgnlDP+/iSKeFtf+s8ffWI
wjsa1m1TRt4bYs3XHL6pvmanGU0GI1HCXzCuEFzsdiCw4YXgH9O8g8867s8ivjCL
On9Mk3NIhdQ3jiKgwr/kA4TMIwBgU45Js9tr9pbSVCQkD+CP2nxI+M6/ZqCDtxUW
/yjUXrbQN7XISo0mnmSi1LpC4z9VtePIjGUn1SFtkvD2Fl1sIiW5OIDNyhlEc2Xc
CI7FeWgJe2d0hdaCwS10nfvAHNWHQIJBheiE4+vkOSB8Wr4xIVXM8BgXPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLokz3+PiW6pyfG8gv4SIcki5zsMB8GA1UdIwQY
MBaAFBz4mQOAFyn8HtNTcqB0s1ytGE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBpWkE0QVhLZndlMDFOeW9IU3pYSzBZVGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80ZDViNzctYmQ4OS00NjAwLTk3OWMt
MDNjODA5NTYyNjhjLzEvSFBpWkE0QVhLZndlMDFOeW9IU3pYSzBZVGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80ZDViNzctYmQ4OS00NjAwLTk3OWMtMDNjODA5NTYyNjhj
LzEvSFBpWkE0QVhLZndlMDFOeW9IU3pYSzBZVGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek7QgZhl
Aq2I42Z23l9WrpuyGqN43L/sN49OqwbnQT4Io2hEyM/mfVJCHcYJi5CQMOxKod5A
kZ1mfvY7/LLNBfvU26/E3QOPXdw7qVBWH/IQXKoXELe9N7hYR5wPaEgXOfnwqBCp
Ms4mW28FKlstgt9aYrVIHI0m0gQUuMKwlFNVGnSZYKpanFfc1+yAWqAr63b23v+X
gehnfIqvmN5hDtzictyuuhBtJvVEXjFV6fQ8BJ9QXy4yLaf/MQJ9CJx/BIzEpUcM
j3hhzYzbBgJzzJleV2ptnZdqo1CdwXuBvNeDU/UvqV17o37Q8B5Gvkx+f2Sfqedx
GIWOy2E4M+OqkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:03 2024 by rpki-client on console-fra.rpki-client.org