Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/18cb86-f8f3-4042-a26a-9b53a517a157/1/hfzKq2iYqiIkL6hHzgKluhpn3SI.mft
File: hfzKq2iYqiIkL6hHzgKluhpn3SI.mft (raw, json)
Hash identifier: uQ8MouKq0qDlgIV5LNLQla23izZTau/9VsffrsFWAHs=
Subject key identifier: D1:E5:A1:EE:2E:BE:6F:62:CB:40:AD:EE:FE:F7:FE:72:BA:45:C6:F0
Authority key identifier: 85:FC:CA:AB:68:98:AA:22:24:2F:A8:47:CE:02:A5:BA:1A:67:DD:22
Certificate issuer: /CN=85fccaab6898aa22242fa847ce02a5ba1a67dd22
Certificate serial: 018B8941AF722BFC913592C70EDA536114D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfzKq2iYqiIkL6hHzgKluhpn3SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/18cb86-f8f3-4042-a26a-9b53a517a157/1/hfzKq2iYqiIkL6hHzgKluhpn3SI.mft
Manifest number: 087C
Signing time: Wed 01 Nov 2023 05:01:04 +0000
Manifest this update: Wed 01 Nov 2023 05:01:04 +0000
Manifest next update: Thu 02 Nov 2023 05:01:04 +0000
Files and hashes: 1: XvaKaxI4O3XG2Eocc1QLHXpNzD8.roa (hash: IiDoG6IKKIwBbbs45tSKbKGXKgg+U03HXB12f/zGchY=)
2: hfzKq2iYqiIkL6hHzgKluhpn3SI.crl (hash: ibgPsobRSIzsupWcN00eJqguCjWK1zMnmpt2wAsjnNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:41:af:72:2b:fc:91:35:92:c7:0e:da:53:61:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fccaab6898aa22242fa847ce02a5ba1a67dd22
Validity
Not Before: Nov 1 05:01:04 2023 GMT
Not After : Nov 2 05:01:04 2023 GMT
Subject: CN=d1e5a1ee2ebe6f62cb40adeefef7fe72ba45c6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:e4:1b:b3:b6:e6:e9:4b:b0:c4:f8:80:6e:
03:78:3e:a7:d4:03:f7:a9:50:ba:7c:3a:c9:c4:10:
55:cc:56:e8:d6:63:c0:33:25:6e:e2:c1:79:9f:69:
57:ff:1f:46:9f:59:b2:0b:48:a2:41:a4:04:3b:4e:
3d:f6:b0:63:ea:16:8f:7c:8e:d6:54:a0:3d:11:43:
c9:70:3e:f1:b7:31:a9:b3:24:92:4b:09:c6:1f:a7:
5c:59:b3:b8:6b:b6:42:36:01:1d:6c:ed:85:87:a5:
e4:ac:83:1c:39:67:8e:fe:a5:ec:3e:ce:29:54:ed:
60:7b:c8:aa:d7:8a:10:23:a9:f7:45:1c:5e:a9:5a:
a6:41:17:ea:e5:52:15:20:10:21:00:b8:1d:23:b6:
d9:71:92:2d:7d:9b:3b:79:53:55:af:a3:a8:05:6b:
6f:12:90:a0:0a:0e:95:16:36:08:60:af:c9:59:40:
4a:25:a1:5e:af:de:0d:e8:34:71:41:4c:45:e0:bc:
ab:04:51:bb:a5:d8:11:a1:99:0d:66:10:ed:fa:52:
75:3e:e3:71:81:1b:a4:c4:45:f7:e9:b8:ff:b8:c0:
5c:87:95:31:fa:b2:ac:9f:78:6f:51:b0:ce:99:c9:
6a:f2:74:61:e0:30:f7:44:26:46:52:cd:da:b4:33:
75:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:A1:EE:2E:BE:6F:62:CB:40:AD:EE:FE:F7:FE:72:BA:45:C6:F0
X509v3 Authority Key Identifier:
keyid:85:FC:CA:AB:68:98:AA:22:24:2F:A8:47:CE:02:A5:BA:1A:67:DD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfzKq2iYqiIkL6hHzgKluhpn3SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/18cb86-f8f3-4042-a26a-9b53a517a157/1/hfzKq2iYqiIkL6hHzgKluhpn3SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/18cb86-f8f3-4042-a26a-9b53a517a157/1/hfzKq2iYqiIkL6hHzgKluhpn3SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:4d:c4:40:03:59:03:05:6a:db:4e:18:56:67:8c:9f:96:
3e:b3:83:a9:e3:84:34:1a:c1:8c:3d:75:14:d0:45:a3:86:db:
7b:f4:a7:0d:11:35:70:2f:98:67:27:75:b1:ca:58:e0:e4:dc:
f1:55:4a:88:0e:72:31:64:25:62:1e:7a:4c:99:6f:6e:0a:29:
c3:95:6d:af:13:4d:06:7a:ee:55:48:1d:0b:e4:ef:de:b7:34:
43:22:5d:ee:db:b7:47:30:36:4a:b1:e1:09:2b:a8:47:0a:73:
80:8b:71:dc:5c:6d:fe:b0:6d:6f:6a:87:3e:8d:08:b0:51:21:
ae:d5:b2:fc:09:1b:86:20:61:1e:07:0c:15:e7:b7:33:fe:3b:
dc:b6:c3:b5:57:5b:1d:33:7b:82:9d:61:19:8d:31:51:24:8f:
14:39:11:b1:6c:00:90:64:26:66:17:8f:7d:03:10:02:06:e2:
16:31:57:0b:ed:bd:94:9a:31:fe:d6:da:08:8c:b5:51:85:1f:
8b:d9:b4:8e:9f:7f:d5:29:85:e0:d2:23:4f:36:e5:da:80:63:
eb:68:37:2a:ee:e1:ab:c7:44:f2:86:57:37:96:b7:a8:90:90:
33:25:4c:6b:35:7a:34:6e:ae:ac:01:0a:2f:fc:ee:14:bd:19:
db:b0:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:05 2023 by rpki-client on console-ams.rpki-client.org