Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.mft
File: H2YR1NFhntpHrE740ktD5s9Lxpg.mft (raw, json)
Hash identifier: d8cJrHTJXv7EihW0VZlIuJoqdRwf7huZB/5TvqfqLFM=
Subject key identifier: 86:37:09:89:C5:71:28:5A:80:90:7F:01:D2:15:F3:F8:F3:57:46:66
Authority key identifier: 1F:66:11:D4:D1:61:9E:DA:47:AC:4E:F8:D2:4B:43:E6:CF:4B:C6:98
Certificate issuer: /CN=1f6611d4d1619eda47ac4ef8d24b43e6cf4bc698
Certificate serial: 01840D0CBE9341AEAFE6D3F2C98D8A16637E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2YR1NFhntpHrE740ktD5s9Lxpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.mft
Manifest number: E3
Signing time: Tue 25 Oct 2022 02:50:49 +0000
Manifest this update: Tue 25 Oct 2022 02:50:49 +0000
Manifest next update: Wed 26 Oct 2022 02:50:49 +0000
Files and hashes: 1: H2YR1NFhntpHrE740ktD5s9Lxpg.crl (hash: WlsKQZCDF8zaU2U0yEzt0Goelb79cdvRY4uS8oE7XZI=)
2: SQgxUcH86Ex7iD4byzUmndBW1eU.roa (hash: RnwgJ7z7SNvPeEYaW898fgFZgo3afGkrKW1PqHvks/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:0c:be:93:41:ae:af:e6:d3:f2:c9:8d:8a:16:63:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6611d4d1619eda47ac4ef8d24b43e6cf4bc698
Validity
Not Before: Oct 25 02:50:49 2022 GMT
Not After : Oct 26 02:50:49 2022 GMT
Subject: CN=86370989c571285a80907f01d215f3f8f3574666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:7b:ec:31:57:9d:3a:70:64:f1:cc:4f:e1:
a9:e0:fe:83:d4:fb:ac:dd:4b:43:20:31:42:99:1f:
87:db:85:83:30:91:e6:f6:28:81:f7:e6:c1:03:80:
71:63:53:9a:3b:09:ff:42:1d:f2:92:0f:fd:e8:49:
ee:cb:80:a5:a9:7a:e9:d5:a8:79:9d:ea:9f:e4:f5:
77:35:7f:21:21:ab:dc:dc:18:2d:37:46:a2:e6:c2:
b4:d7:ca:ff:e0:f3:80:0d:06:75:60:cb:0b:39:ed:
28:c5:ee:bb:cf:a5:55:9b:a3:e0:db:ef:22:00:80:
48:da:a9:79:da:aa:8b:0b:60:ba:cd:14:5a:3b:7d:
be:af:49:33:93:13:16:98:e5:3c:22:ee:fc:02:74:
85:b8:b0:34:89:6e:6e:0e:ea:be:01:ee:04:34:cc:
6e:95:7c:ed:d5:d0:87:f4:39:db:5a:06:cd:03:f5:
07:2c:82:53:ab:fe:87:f4:cf:a4:95:ea:6e:66:79:
91:2c:d0:48:1b:3b:27:d3:69:62:54:7b:f1:03:f7:
76:e8:a4:8a:fd:67:1d:5d:5f:4f:d1:3a:87:15:75:
51:54:8b:3e:ed:cd:52:8b:5f:84:c1:e8:55:91:d8:
b7:58:97:af:92:bf:d8:d6:bd:58:fb:ca:7f:9d:56:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:09:89:C5:71:28:5A:80:90:7F:01:D2:15:F3:F8:F3:57:46:66
X509v3 Authority Key Identifier:
keyid:1F:66:11:D4:D1:61:9E:DA:47:AC:4E:F8:D2:4B:43:E6:CF:4B:C6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2YR1NFhntpHrE740ktD5s9Lxpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f11aa4-fbec-4e19-a8f0-0bb312db0684/1/H2YR1NFhntpHrE740ktD5s9Lxpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:80:c8:74:40:e1:46:19:68:b6:9e:d9:1f:16:e9:95:b2:
51:43:d6:da:93:02:a5:cd:8f:10:16:90:da:55:e0:34:be:f6:
e4:f8:3e:9a:3a:cc:d1:e8:bf:e7:c8:c2:4b:5c:c5:74:bc:4d:
99:e2:a3:a4:09:4d:a0:03:78:f0:23:e5:d4:33:32:13:1c:ff:
56:28:a9:e7:c6:7d:8c:bb:86:2a:8c:22:4b:28:62:8e:29:5b:
ae:6e:f7:00:a6:ba:b3:2d:1e:60:b3:ed:83:23:7b:65:24:66:
ed:db:9c:14:6a:fc:2c:05:d9:ff:7f:e2:0e:96:a4:2e:fc:40:
19:57:1d:d2:f0:f5:bc:73:0d:f8:bb:92:66:a1:7a:1f:0a:f3:
91:15:05:e0:ba:2c:e7:e3:4f:a0:e5:dd:a7:19:26:ff:34:0a:
39:45:bc:71:14:ee:ce:b8:74:44:06:76:87:2d:48:f3:32:52:
24:a9:ff:bb:02:4a:48:ef:ac:63:da:21:d1:44:52:5c:76:d6:
92:88:c2:b1:39:b5:46:8b:a0:7b:59:cd:7a:6b:58:31:dc:87:
98:d7:c2:31:4f:f8:a3:a7:f1:df:61:b9:f7:ac:ed:fb:89:bc:
35:98:0f:39:5d:9b:51:fa:25:10:78:57:69:7d:0e:2a:8d:d9:
08:3c:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:34:11 2025 by rpki-client