Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.mft
File: Hq3W_48hqbiENym5slYYWSeQIyk.mft (raw, json)
Hash identifier: NDgHSW3/tMXjCqN/9s6GflrntVPogDEDwN/iOedVob4=
Subject key identifier: 15:8E:5C:2A:E5:B5:4B:01:C4:A3:BC:C0:B7:7F:77:34:C9:F6:6A:CC
Authority key identifier: 1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
Certificate issuer: /CN=1eadd6ff8f21a9b8843729b9b256185927902329
Certificate serial: 07A3917D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq3W_48hqbiENym5slYYWSeQIyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.mft
Manifest number: 08DF
Signing time: Tue 05 Apr 2022 07:19:35 +0000
Manifest this update: Tue 05 Apr 2022 07:19:35 +0000
Manifest next update: Wed 06 Apr 2022 07:19:35 +0000
Files and hashes: 1: Hq3W_48hqbiENym5slYYWSeQIyk.crl (hash: 2dbjrJKIrk227TCm8NHUsdQ02DoR0ucgM2lCfmXMPAU=)
2: t4f2MI0dIv15QDBaLmrjWmVGbkY.roa (hash: LthO4mQ+1RBhSWqWRdir9tDeLVY30IA6ij7IUgrMdqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128160125 (0x7a3917d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eadd6ff8f21a9b8843729b9b256185927902329
Validity
Not Before: Apr 5 07:19:35 2022 GMT
Not After : Apr 6 07:19:35 2022 GMT
Subject: CN=158e5c2ae5b54b01c4a3bcc0b77f7734c9f66acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:48:65:c6:c3:20:eb:ed:3f:86:1e:9c:85:
34:46:54:35:de:6e:95:51:5b:d6:b4:10:d9:01:27:
53:e5:0d:3c:3d:aa:3b:09:68:c7:27:a9:02:47:33:
c7:6e:63:4c:f9:2e:17:05:58:88:a3:30:22:f4:4b:
20:68:83:95:b6:fe:5c:05:8e:23:9b:4e:d6:72:26:
73:4b:8f:8c:15:9d:ec:fb:d7:5c:66:b7:db:c1:49:
53:a6:27:86:01:35:fc:07:2a:1c:30:82:c1:83:4d:
59:3e:38:b4:35:b2:49:30:cd:95:29:43:8c:f4:2c:
2b:e1:da:4c:61:81:81:f3:2b:fe:98:e3:44:c4:0f:
78:b1:87:d1:35:06:6e:a3:69:c2:3c:36:85:49:b2:
36:3b:f0:c1:86:77:fa:5a:ef:7f:f0:fc:5b:c2:a3:
34:44:7e:1d:62:e3:a3:b4:4b:70:90:68:de:b8:e4:
7d:cc:32:9d:f4:ed:90:f9:a3:d9:b1:d6:f3:15:06:
32:62:83:29:a5:d5:07:58:bb:b1:aa:33:c3:e0:f4:
a2:05:73:a3:d8:eb:12:60:81:da:d4:fc:12:68:ad:
99:f5:72:b1:7e:f6:c6:d6:01:e0:f2:2a:72:a2:cf:
2c:2b:b2:50:7c:ed:4e:52:19:71:eb:e4:cd:05:d5:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:5C:2A:E5:B5:4B:01:C4:A3:BC:C0:B7:7F:77:34:C9:F6:6A:CC
X509v3 Authority Key Identifier:
keyid:1E:AD:D6:FF:8F:21:A9:B8:84:37:29:B9:B2:56:18:59:27:90:23:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq3W_48hqbiENym5slYYWSeQIyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/85b222-7627-4fc8-9146-0e713c6967c6/1/Hq3W_48hqbiENym5slYYWSeQIyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:01:52:61:42:e6:f3:11:68:5d:cb:8c:41:6c:8f:de:26:
15:bf:2c:3e:54:a9:9f:38:0f:cc:c4:33:a8:bb:71:64:c6:12:
af:cc:9a:07:5e:6a:0c:5f:03:f4:95:af:07:90:2f:44:98:33:
6c:1b:a1:63:9c:47:67:23:4a:70:49:13:7e:08:f5:e2:cc:31:
b9:1f:6c:78:78:9a:98:ae:fe:96:1b:c5:43:c6:7f:f8:69:02:
24:7d:72:41:2f:a0:3e:70:e5:44:b7:ec:28:dd:d2:87:3e:02:
4c:fc:57:27:13:2c:3c:dc:bf:de:dd:05:0f:ac:6c:72:bd:d0:
bc:6a:37:04:a8:84:94:5a:0e:8d:5e:89:fd:03:d6:74:8b:9c:
ae:fa:f2:e8:ec:9b:90:0a:67:b1:66:f4:f3:7b:85:de:8e:aa:
bd:ba:ef:25:9e:24:1d:97:13:07:4f:fe:58:a6:cb:5b:b4:df:
0d:16:9e:87:a7:39:46:35:da:92:94:0f:9e:3a:11:27:d6:d8:
3c:c2:6d:20:24:a8:96:c2:12:e9:cd:47:db:f4:9d:fb:d3:2a:
c0:3b:9b:22:fb:c1:73:19:2f:37:d1:b5:51:75:78:d3:7f:06:
4c:eb:7e:3b:7b:22:e2:cb:f1:78:23:e8:5a:7d:b1:f2:01:b9:
44:48:76:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:37 2025 by rpki-client