Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
File: hz7BW5jibospu33PSmBSys5tJoM.mft (raw, json)
Hash identifier: IymY0+yn9ijah/OYGT9vgOTO3SBAeR0zNbcHSPu4jmM=
Subject key identifier: 2D:A3:74:2A:9B:36:9B:FD:E9:6F:D9:CC:67:11:39:FB:CE:30:0F:0B
Authority key identifier: 87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
Certificate issuer: /CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Certificate serial: 018D81836598FBD2712D88386D6E51186648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
Manifest number: 0848
Signing time: Wed 07 Feb 2024 03:01:28 +0000
Manifest this update: Wed 07 Feb 2024 03:01:28 +0000
Manifest next update: Thu 08 Feb 2024 03:01:28 +0000
Files and hashes: 1: hz7BW5jibospu33PSmBSys5tJoM.crl (hash: +SgDOc+vAzJjgDw64VWA2jSoYc5D4ysBAqG+9/DQkgA=)
2: wzbb2zGEu4hFon3LvZoHz0P_YQs.roa (hash: D+qc74ALqdEhkQMcXXKCiEsyDiNvHhzDHWXcDZQU5XA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:83:65:98:fb:d2:71:2d:88:38:6d:6e:51:18:66:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873ec15b98e26e8b29bb7dcf4a6052cace6d2683
Validity
Not Before: Feb 7 03:01:28 2024 GMT
Not After : Feb 8 03:01:28 2024 GMT
Subject: CN=2da3742a9b369bfde96fd9cc671139fbce300f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:15:e4:8e:2e:d0:c8:bd:12:6a:14:c0:36:
c6:0c:aa:60:2c:02:f0:04:23:31:62:a5:e4:cb:7e:
b9:e9:31:3e:7c:30:34:b6:82:88:f4:6d:17:bc:6f:
52:a8:23:72:fa:4e:a7:a6:50:53:44:f0:92:fd:fa:
24:90:e4:47:bf:06:2b:39:ed:06:6b:3a:79:4e:63:
ff:97:6f:09:22:78:b5:1f:1f:ac:27:85:37:09:3a:
15:f2:33:9e:a4:a5:a2:c1:f6:8f:6f:78:25:57:00:
b5:43:09:a4:19:52:6b:6c:d2:a1:cd:20:ba:c8:0e:
7f:df:b3:c0:74:2e:bf:fb:b9:40:5a:2d:3c:4c:4f:
4e:7d:17:b2:53:96:98:22:46:8d:19:e2:35:09:8b:
8c:67:d7:a6:f6:e5:73:7f:85:72:59:53:30:0b:ef:
48:06:32:2a:15:c8:e7:2a:a4:51:41:e6:3b:92:e8:
c4:7d:ad:ad:7a:8a:fb:b2:cd:fb:28:35:2e:a1:19:
a4:64:04:17:51:8a:f4:9b:92:97:d0:a2:68:34:13:
d7:1b:54:83:06:b6:7b:00:bb:d0:d4:be:7e:64:c1:
e3:fa:45:0a:5d:71:4d:af:33:c2:91:47:85:31:90:
76:11:1d:ec:ad:01:b0:12:9d:7a:89:b5:47:5b:79:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:74:2A:9B:36:9B:FD:E9:6F:D9:CC:67:11:39:FB:CE:30:0F:0B
X509v3 Authority Key Identifier:
keyid:87:3E:C1:5B:98:E2:6E:8B:29:BB:7D:CF:4A:60:52:CA:CE:6D:26:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hz7BW5jibospu33PSmBSys5tJoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3ec59e-ea85-40cb-a285-07ded20e3c63/1/hz7BW5jibospu33PSmBSys5tJoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:33:d2:0a:79:11:13:26:ff:50:77:0f:64:78:80:f9:dc:da:
1c:17:72:5c:f3:e0:9a:e5:41:ff:ca:51:7e:3a:57:83:91:26:
d3:39:52:dc:c3:c9:c1:5f:04:67:04:f0:d8:5b:f8:5c:03:34:
18:94:34:7b:67:11:57:92:42:77:7d:82:51:f7:24:7c:f1:66:
91:12:01:c5:c4:40:ca:d6:3e:07:69:c8:cf:24:e6:53:87:54:
a0:89:53:a3:ed:0a:64:85:f9:93:7e:25:72:58:f3:bf:bc:e2:
60:9a:2f:00:e6:54:08:46:9c:d6:c4:e5:6d:10:ad:29:bf:f8:
f1:98:4a:6d:fa:69:92:57:f8:d4:c1:cc:92:2e:92:63:42:31:
ff:48:e5:42:98:fe:1f:06:15:df:af:c8:8f:3a:42:94:08:9b:
30:d5:45:a3:84:c7:05:72:00:c9:86:ae:40:f0:fe:e8:23:64:
6e:50:ce:f2:05:43:50:de:8d:15:10:4c:69:42:3f:60:9c:98:
07:d7:cf:2b:a6:70:54:96:1d:95:d0:d9:ef:58:c7:ad:78:fd:
39:10:0b:86:c0:b5:54:38:6f:31:1a:bd:a2:de:f1:8c:72:6b:
3b:30:ce:46:b3:9b:9b:7a:82:e8:22:85:ad:47:8b:f6:9f:3f:
ac:a2:8e:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2Bg2WY+9JxLYg4bW5RGGZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3M2VjMTViOThlMjZlOGIyOWJiN2RjZjRhNjA1MmNhY2U2
ZDI2ODMwHhcNMjQwMjA3MDMwMTI4WhcNMjQwMjA4MDMwMTI4WjAzMTEwLwYDVQQD
EygyZGEzNzQyYTliMzY5YmZkZTk2ZmQ5Y2M2NzExMzlmYmNlMzAwZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY0V5I4u0Mi9EmoUwDbGDKpgLALw
BCMxYqXky3656TE+fDA0toKI9G0XvG9SqCNy+k6nplBTRPCS/fokkORHvwYrOe0G
azp5TmP/l28JIni1Hx+sJ4U3CToV8jOepKWiwfaPb3glVwC1QwmkGVJrbNKhzSC6
yA5/37PAdC6/+7lAWi08TE9OfReyU5aYIkaNGeI1CYuMZ9em9uVzf4VyWVMwC+9I
BjIqFcjnKqRRQeY7kujEfa2teor7ss37KDUuoRmkZAQXUYr0m5KX0KJoNBPXG1SD
BrZ7ALvQ1L5+ZMHj+kUKXXFNrzPCkUeFMZB2ER3srQGwEp16ibVHW3nQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2jdCqbNpv96W/ZzGcROfvOMA8LMB8GA1UdIwQY
MBaAFIc+wVuY4m6LKbt9z0pgUsrObSaDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUt
MDdkZWQyMGUzYzYzLzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZWM1OWUtZWE4NS00MGNiLWEyODUtMDdkZWQyMGUzYzYz
LzEvaHo3Qlc1amlib3NwdTMzUFNtQlN5czV0Sm9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjPSCnkR
Eyb/UHcPZHiA+dzaHBdyXPPgmuVB/8pRfjpXg5Em0zlS3MPJwV8EZwTw2Fv4XAM0
GJQ0e2cRV5JCd32CUfckfPFmkRIBxcRAytY+B2nIzyTmU4dUoIlTo+0KZIX5k34l
cljzv7ziYJovAOZUCEac1sTlbRCtKb/48ZhKbfppklf41MHMki6SY0Ix/0jlQpj+
HwYV36/IjzpClAibMNVFo4THBXIAyYauQPD+6CNkblDO8gVDUN6NFRBMaUI/YJyY
B9fPK6ZwVJYdldDZ71jHrXj9ORALhsC1VDhvMRq9ot7xjHJrOzDORrObm3qC6CKF
rUeL9p8/rKKOrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:57 2025 by rpki-client