Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
File: hcP2qehVDAkLw7JX9yuPZbaan2E.mft (raw, json)
Hash identifier: zeA0NvskGsjraZHKjrmzgKUZUXAp7vSHvJyYTH5fFJ8=
Subject key identifier: 66:72:05:9B:59:B4:A8:3E:53:87:66:CB:59:D7:37:6C:22:1F:5D:FC
Authority key identifier: 85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Certificate issuer: /CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Certificate serial: 018B9357B0CDA90DEAFBF866CC001E852118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
Manifest number: 0902
Signing time: Fri 03 Nov 2023 04:01:19 +0000
Manifest this update: Fri 03 Nov 2023 04:01:19 +0000
Manifest next update: Sat 04 Nov 2023 04:01:19 +0000
Files and hashes: 1: hcP2qehVDAkLw7JX9yuPZbaan2E.crl (hash: l4yfQVkfmbShG6SL3PcRGzn4/MQEqeQpCQWU+h5ZkpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:57:b0:cd:a9:0d:ea:fb:f8:66:cc:00:1e:85:21:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Validity
Not Before: Nov 3 04:01:19 2023 GMT
Not After : Nov 4 04:01:19 2023 GMT
Subject: CN=6672059b59b4a83e538766cb59d7376c221f5dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:ad:e3:02:d3:82:e7:74:2c:0c:f3:51:76:
cf:2a:6e:73:ad:69:4e:69:b6:d4:4a:12:37:80:2a:
cc:0f:40:25:1b:26:a4:fc:a0:00:79:65:7e:46:6a:
86:57:f0:c8:28:9c:90:fb:40:53:b1:58:f5:de:f6:
e9:b8:4c:6d:3f:a4:11:83:65:42:91:9d:d7:6f:9e:
8d:a3:14:f4:56:a3:06:be:df:fb:ed:76:4d:af:04:
3c:4c:a8:d4:d1:c0:41:69:ba:b4:f5:8b:5e:dd:77:
95:0b:6b:72:cc:53:05:65:18:f0:0d:3b:d4:b8:8c:
86:94:e2:b0:8f:4b:f3:06:38:0b:32:a6:c7:9d:80:
3a:43:ca:a9:83:e0:af:e0:ce:aa:3d:99:53:2c:80:
f4:08:91:9f:1e:a8:44:c0:9f:38:b1:02:68:6b:22:
45:77:c4:90:0f:61:58:77:a0:da:76:20:d4:82:a4:
50:10:e3:23:0f:53:07:d5:31:d6:73:15:b0:a8:81:
36:b0:aa:a5:8f:e6:0a:af:10:e1:0b:7c:3c:d0:25:
90:6f:9b:61:9f:5f:8a:a0:84:89:82:ba:bc:96:91:
8d:38:e6:dc:42:1d:f1:cc:60:e4:96:fa:3a:f0:2a:
6a:3f:2f:db:ef:77:6c:f5:9d:dc:fd:37:0a:58:60:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:05:9B:59:B4:A8:3E:53:87:66:CB:59:D7:37:6C:22:1F:5D:FC
X509v3 Authority Key Identifier:
keyid:85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:b8:95:45:19:9d:9b:90:03:07:2d:09:ed:7e:80:79:43:
8b:d3:98:b3:01:c8:01:72:84:de:f6:ea:41:0d:8b:c8:80:7d:
43:63:0e:c6:b7:e2:8a:8c:c1:fc:16:5a:ca:24:47:b4:c2:93:
d9:a6:bc:0d:0a:b9:eb:17:9a:52:d2:9a:72:1a:cc:3b:81:17:
e1:99:e7:0d:fc:ff:b8:bc:fb:1d:ec:0f:90:43:53:1d:c7:37:
d0:5d:ae:ae:c1:22:96:b2:fd:98:cf:73:2f:56:64:73:3c:51:
c7:52:bc:de:cd:31:ae:7a:e1:57:96:31:b4:a4:98:6f:9f:61:
76:82:e8:62:48:b5:48:ad:79:a2:35:0b:4a:f3:12:e2:5c:31:
be:33:5a:45:26:e6:2d:68:4c:2d:99:50:63:a3:88:2a:02:a7:
0a:85:e4:4a:25:21:0d:01:d5:3e:63:50:b5:e6:3a:93:b7:16:
6a:b8:82:05:fe:93:2d:48:e7:8a:ac:dd:b7:ed:c2:67:66:15:
ac:3a:21:19:10:9a:38:75:86:9e:03:93:cd:b9:b9:65:b3:0f:
ad:44:e6:52:1e:e8:ec:7c:46:ec:c8:ea:ee:c9:6a:d9:e4:f3:
5a:b4:a1:b6:d2:ce:13:5c:62:13:e3:08:61:f2:2f:5e:e3:fd:
f6:a1:30:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuTV7DNqQ3q+/hmzAAehSEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YzNmNmE5ZTg1NTBjMDkwYmMzYjI1N2Y3MmI4ZjY1YjY5
YTlmNjEwHhcNMjMxMTAzMDQwMTE5WhcNMjMxMTA0MDQwMTE5WjAzMTEwLwYDVQQD
Eyg2NjcyMDU5YjU5YjRhODNlNTM4NzY2Y2I1OWQ3Mzc2YzIyMWY1ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSet4wLTgud0LAzzUXbPKm5zrWlO
abbUShI3gCrMD0AlGyak/KAAeWV+RmqGV/DIKJyQ+0BTsVj13vbpuExtP6QRg2VC
kZ3Xb56NoxT0VqMGvt/77XZNrwQ8TKjU0cBBabq09Yte3XeVC2tyzFMFZRjwDTvU
uIyGlOKwj0vzBjgLMqbHnYA6Q8qpg+Cv4M6qPZlTLID0CJGfHqhEwJ84sQJoayJF
d8SQD2FYd6DadiDUgqRQEOMjD1MH1THWcxWwqIE2sKqlj+YKrxDhC3w80CWQb5th
n1+KoISJgrq8lpGNOObcQh3xzGDklvo68CpqPy/b73ds9Z3c/TcKWGDUhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZyBZtZtKg+U4dmy1nXN2wiH138MB8GA1UdIwQY
MBaAFIXD9qnoVQwJC8OyV/crj2W2mp9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGNQMnFlaFZEQWtMdzdKWDl5dVBaYmFhbjJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81MjRiYTUtMDk2ZC00N2ZmLWE4ZjQt
ZGM4YTJkOWVjNmYzLzEvaGNQMnFlaFZEQWtMdzdKWDl5dVBaYmFhbjJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81MjRiYTUtMDk2ZC00N2ZmLWE4ZjQtZGM4YTJkOWVjNmYz
LzEvaGNQMnFlaFZEQWtMdzdKWDl5dVBaYmFhbjJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACre4lUUZ
nZuQAwctCe1+gHlDi9OYswHIAXKE3vbqQQ2LyIB9Q2MOxrfiiozB/BZayiRHtMKT
2aa8DQq56xeaUtKachrMO4EX4ZnnDfz/uLz7HewPkENTHcc30F2ursEilrL9mM9z
L1ZkczxRx1K83s0xrnrhV5YxtKSYb59hdoLoYki1SK15ojULSvMS4lwxvjNaRSbm
LWhMLZlQY6OIKgKnCoXkSiUhDQHVPmNQteY6k7cWariCBf6TLUjniqzdt+3CZ2YV
rDohGRCaOHWGngOTzbm5ZbMPrUTmUh7o7HxG7Mjq7slq2eTzWrShttLOE1xiE+MI
YfIvXuP99qEwYQ==
-----END CERTIFICATE-----
Generated at Fri Nov 3 09:31:24 2023 by rpki-client on console-ams.rpki-client.org