Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.mft
File: hWjlhXD4ZKNC648L9In1GnCv40s.mft (raw, json)
Hash identifier: +LgfENsFTIDq2miBLWKAg5Nfk/xQOFpzpIKlrwByNcU=
Subject key identifier: AF:CD:D0:9A:38:1A:69:2B:82:02:CD:21:47:0F:DB:E5:1D:E6:7A:EC
Authority key identifier: 85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
Certificate issuer: /CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Certificate serial: 018C396D47D49C379073ED58BAD1AB24AF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.mft
Manifest number: 0544
Signing time: Tue 05 Dec 2023 10:01:52 +0000
Manifest this update: Tue 05 Dec 2023 10:01:52 +0000
Manifest next update: Wed 06 Dec 2023 10:01:52 +0000
Files and hashes: 1: hWjlhXD4ZKNC648L9In1GnCv40s.crl (hash: udtPKYLg0zXF/RcGeva8d1yG+GP74V0W6HtewZAcyrQ=)
2: x6B2XW8Dk_8GPVx8juGRLmkVsYk.roa (hash: TYgAyR4drzQigrjVuYHUQHuI09190cz+ByYujMO2geI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:6d:47:d4:9c:37:90:73:ed:58:ba:d1:ab:24:af:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568e58570f864a342eb8f0bf489f51a70afe34b
Validity
Not Before: Dec 5 10:01:52 2023 GMT
Not After : Dec 6 10:01:52 2023 GMT
Subject: CN=afcdd09a381a692b8202cd21470fdbe51de67aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:8b:c6:2b:8f:c8:cf:f8:e2:bd:e1:bf:6c:
6f:f8:26:41:8a:e0:90:b9:cc:7f:41:37:46:02:2f:
65:c9:bd:14:fd:93:d7:9b:d5:a0:16:46:df:54:13:
96:e6:f8:58:4f:23:1f:92:cc:70:cb:f2:d7:22:bc:
8b:1b:fc:c1:3d:d5:fd:d7:90:0c:42:b0:fd:1e:c5:
0c:56:84:29:5c:c3:97:93:55:4c:fa:7f:8e:75:b4:
56:88:7d:46:68:62:61:c9:6c:8c:79:32:69:63:ef:
d5:e4:87:d4:37:cf:01:36:bb:8b:74:b9:d4:c8:05:
50:04:9d:36:cc:54:37:b3:93:54:e9:8c:5a:69:55:
d7:39:f7:54:44:7a:a5:88:c2:70:46:8d:a1:1e:01:
65:18:f5:17:ab:3b:3f:74:cb:8c:a9:94:7d:15:8c:
49:16:40:12:f6:08:c0:02:2b:c4:f3:4e:72:50:9d:
4f:a1:64:31:54:1c:b2:45:c8:3f:5a:81:5a:fa:40:
ef:42:00:8f:47:4a:26:79:56:c7:74:d2:17:b6:c8:
ab:86:b2:31:3f:87:c5:50:2a:32:c5:11:2f:cf:e2:
31:4e:6b:77:fc:b0:5e:69:8c:de:02:0e:32:6d:4b:
aa:b0:97:3e:00:11:cb:98:13:d3:f7:ac:d4:a8:05:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:D0:9A:38:1A:69:2B:82:02:CD:21:47:0F:DB:E5:1D:E6:7A:EC
X509v3 Authority Key Identifier:
keyid:85:68:E5:85:70:F8:64:A3:42:EB:8F:0B:F4:89:F5:1A:70:AF:E3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWjlhXD4ZKNC648L9In1GnCv40s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fd6360-e788-4e58-a639-8a7fb1d50fb9/1/hWjlhXD4ZKNC648L9In1GnCv40s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1d:dc:5c:c5:e9:70:d6:d3:f2:09:7d:0a:47:99:df:ab:1f:
f0:2f:d0:a6:5a:cd:b6:e4:cd:60:22:bd:ec:7f:57:f7:e1:ee:
44:97:02:d6:dd:be:61:09:e4:37:7e:47:78:87:ff:24:94:04:
de:dd:ec:40:39:e9:db:f7:9c:77:3d:8c:bd:df:81:18:9f:b2:
5a:1c:c3:61:9c:91:37:90:57:77:65:94:fe:e6:97:fd:d9:0c:
08:2b:89:cc:8c:f8:67:71:8b:e5:33:1b:b3:0c:65:53:1a:d3:
42:ac:aa:11:4f:0b:0a:0e:2d:0d:10:a2:0d:fe:c6:29:03:b8:
a2:08:9b:96:79:31:af:9a:48:27:b3:59:af:e9:d6:5b:83:3b:
72:70:e9:eb:c3:21:ae:32:16:4b:ec:1f:d8:69:1e:8e:c6:5c:
ca:1f:84:99:b4:4b:fe:3d:ae:8b:ff:59:ce:d0:32:10:75:0b:
de:18:9d:1f:2a:05:c6:f3:52:b0:40:e5:1c:f0:65:b9:34:a4:
ca:5d:c8:48:9a:14:f2:86:29:44:66:81:a5:75:d7:18:01:8e:
a2:a7:d1:f3:d3:4b:a5:cc:73:d9:7d:3a:b0:88:52:a1:a6:b8:
13:88:85:7b:d3:0d:0c:c0:25:46:8d:36:4d:4f:6c:21:b4:17:
1c:cd:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:26:45 2025 by rpki-client