Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
File: HyWFKHQzHAGkNVXn47crpqgL6F8.mft (raw, json)
Hash identifier: p4TQXrG9lVS7qYJeSITqon0Cbf/dUq/YF1n6e2j6ShA=
Subject key identifier: 40:BE:D2:AF:AA:B6:C8:0A:62:31:F0:E9:BC:78:E3:1A:68:22:22:37
Authority key identifier: 1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
Certificate issuer: /CN=1f25852874331c01a43555e7e3b72ba6a80be85f
Certificate serial: 018CEE869BD4D34B5F6372EE3E765AD80339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyWFKHQzHAGkNVXn47crpqgL6F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
Manifest number: 0812
Signing time: Tue 09 Jan 2024 14:00:48 +0000
Manifest this update: Tue 09 Jan 2024 14:00:48 +0000
Manifest next update: Wed 10 Jan 2024 14:00:48 +0000
Files and hashes: 1: 4R9-YIOtROM59N_DLyva_ZtuWpk.roa (hash: xlZmjZiAWjpSTsCbbZS57KHRLG9lDo3jyXRb9vCA/oU=)
2: HyWFKHQzHAGkNVXn47crpqgL6F8.crl (hash: 0y6gJyynjOGKRztQBk0kekSVlgEjxri8UNt8ao3Je1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:86:9b:d4:d3:4b:5f:63:72:ee:3e:76:5a:d8:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f25852874331c01a43555e7e3b72ba6a80be85f
Validity
Not Before: Jan 9 14:00:48 2024 GMT
Not After : Jan 10 14:00:48 2024 GMT
Subject: CN=40bed2afaab6c80a6231f0e9bc78e31a68222237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:da:f3:ba:66:59:a2:78:8e:97:66:28:95:
6c:db:35:d3:8e:72:55:c4:99:e8:1c:94:96:53:3e:
9f:c7:d3:2c:2e:9c:4a:a2:6f:9b:91:9f:c2:c8:1a:
ce:56:05:af:8e:20:82:4d:a0:d3:44:97:4c:b3:0f:
ab:73:27:5a:95:bd:35:5b:fb:54:d9:00:01:63:b7:
6f:1d:6d:25:7e:2b:93:db:fe:69:33:af:57:63:f1:
01:d4:04:7a:ee:ad:e2:4d:25:5f:53:04:12:e0:2d:
e2:45:e1:49:c0:cf:be:62:60:5c:2e:cd:b0:f2:43:
9f:fc:8e:c9:dd:d7:b7:82:4f:7d:9e:e9:78:4f:5b:
c0:6b:da:c0:9d:72:58:c1:ca:b3:5b:1f:5f:e6:bd:
e9:a4:07:fa:cf:51:95:0d:95:db:9a:bd:2d:18:c9:
19:10:c8:14:22:0d:54:5c:3f:86:19:18:e9:5f:35:
43:a2:fa:fe:c3:82:23:75:49:c7:da:6c:ea:5e:53:
7a:b7:12:0f:9a:81:f8:e6:3d:78:85:f4:c8:85:50:
53:73:99:b5:b8:f9:6f:88:c4:1c:1a:8c:04:b9:c5:
4e:f4:82:b3:bd:81:47:1c:96:c8:6b:fd:70:f7:c3:
c3:b6:88:1c:87:53:fb:96:79:99:fb:27:f4:9e:7b:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:D2:AF:AA:B6:C8:0A:62:31:F0:E9:BC:78:E3:1A:68:22:22:37
X509v3 Authority Key Identifier:
keyid:1F:25:85:28:74:33:1C:01:A4:35:55:E7:E3:B7:2B:A6:A8:0B:E8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyWFKHQzHAGkNVXn47crpqgL6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/84ac9b-0870-4c3f-af5c-637cbad64e03/1/HyWFKHQzHAGkNVXn47crpqgL6F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cd:d7:b4:41:54:53:68:9b:81:0f:8f:41:d9:bc:30:13:47:
8b:a6:33:96:43:70:2d:5b:59:80:21:cc:18:96:b4:2a:98:b8:
c4:da:18:af:53:d7:ba:42:b1:7d:22:ab:b2:61:28:53:08:19:
29:9e:14:70:b8:31:ff:76:f6:f5:0a:d1:82:ce:db:0e:30:42:
b1:d0:e9:58:cd:0f:01:60:12:31:66:e1:f1:b4:38:bd:4f:c5:
1f:8e:93:4f:a1:51:87:92:78:58:6b:78:72:22:32:ea:12:ae:
68:39:6e:2e:51:c2:0c:c0:54:63:63:83:0d:52:a0:10:93:40:
19:29:d6:87:43:b5:13:65:22:81:22:d6:fe:a0:f8:a8:60:89:
3d:6a:67:eb:96:53:22:9b:0b:40:23:50:e1:c1:a9:5b:8f:5c:
de:f8:89:b2:de:f3:21:cf:75:29:f9:40:6a:c0:62:91:8c:f3:
9a:af:e1:18:33:54:d2:1c:4e:2e:e3:9d:dc:de:da:6b:0e:bd:
92:a1:e1:0d:c0:12:bd:21:a7:05:31:2c:22:41:91:7c:f9:f3:
3e:cb:82:95:2a:03:ca:32:57:a9:80:d1:3d:84:c7:f5:70:d2:
85:b5:a6:7d:c0:b3:4b:bc:27:b0:18:ea:4c:77:05:60:13:4c:
4a:b5:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:28 2024 by rpki-client on console.sobornost.net