Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.mft
File: xs0xb3nSzT9_nMQreVaY69xPrQ8.mft (raw, json)
Hash identifier: qzuHHPaMzjV4WIf/QlVLeAqYrIflWw3s8FY1zMODkdU=
Subject key identifier: B6:99:3D:D2:08:4E:0A:35:D9:71:DE:91:55:ED:7B:C5:F2:24:3F:30
Authority key identifier: C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
Certificate issuer: /CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
Certificate serial: 01896D07740FA8390888655CCF5C67D087B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.mft
Manifest number: 078C
Signing time: Wed 19 Jul 2023 07:22:32 +0000
Manifest this update: Wed 19 Jul 2023 07:22:32 +0000
Manifest next update: Thu 20 Jul 2023 07:22:32 +0000
Files and hashes: 1: HKyZ3OL-oxsK0TL6Bz-SDSGrG5I.roa (hash: yQWg4gGKuMWRUqrHDzSUSowbdj0qBk4TVpjkJXI7whQ=)
2: xs0xb3nSzT9_nMQreVaY69xPrQ8.crl (hash: cgrlH6ytyqRcyP3oi4X2Mt8ZT4maAoXgzKTETuBI4j4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:07:74:0f:a8:39:08:88:65:5c:cf:5c:67:d0:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cd316f79d2cd3f7f9cc42b795698ebdc4fad0f
Validity
Not Before: Jul 19 07:22:32 2023 GMT
Not After : Jul 20 07:22:32 2023 GMT
Subject: CN=b6993dd2084e0a35d971de9155ed7bc5f2243f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:9d:3d:00:a9:8c:8b:51:cc:5f:0d:2b:43:
ef:6b:10:c9:d3:da:5f:c9:45:74:e0:08:6f:67:85:
65:6d:2f:67:90:9a:b8:0a:84:03:86:47:5c:ce:66:
e8:9b:81:ad:2d:30:80:b0:2d:c5:32:8b:62:70:b4:
6e:30:64:d4:37:d3:57:91:93:de:10:8a:30:0a:81:
4e:25:c8:9a:16:71:50:47:f9:53:d7:bb:85:1e:36:
69:51:26:09:c6:b7:07:1f:96:57:38:17:c9:08:61:
e3:b8:96:ed:b0:c7:aa:5a:2c:21:bb:25:e8:d0:1c:
27:a8:8e:19:fd:47:11:ab:dc:ca:9e:37:f0:c1:70:
56:17:58:d1:73:72:c6:5c:ad:2c:f5:7b:8f:7f:37:
06:0b:1f:94:6b:05:a9:e0:b8:b9:fe:8b:29:5c:cd:
ae:f9:a5:16:46:81:57:e2:13:3a:ca:51:64:be:93:
e8:42:ef:81:80:d7:f1:12:f3:f0:ff:67:5f:27:95:
ee:ec:10:d5:3c:3b:e9:78:da:1f:07:fa:c1:ca:31:
b1:a0:33:51:9b:1b:7c:c8:c3:76:2a:2f:04:a9:a2:
c1:12:0f:f6:4d:33:da:5f:b4:67:9b:0a:9d:64:1f:
14:b7:54:08:61:e1:70:33:58:9a:1e:ac:9f:e7:2d:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:3D:D2:08:4E:0A:35:D9:71:DE:91:55:ED:7B:C5:F2:24:3F:30
X509v3 Authority Key Identifier:
keyid:C6:CD:31:6F:79:D2:CD:3F:7F:9C:C4:2B:79:56:98:EB:DC:4F:AD:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs0xb3nSzT9_nMQreVaY69xPrQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a50a5-a1bf-4eaf-94ba-3844c0150a36/1/xs0xb3nSzT9_nMQreVaY69xPrQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ea:c6:6d:39:f7:ff:b3:63:47:5f:8a:7f:cf:c3:87:22:05:
41:2c:a6:a7:b5:b5:dc:fb:53:8d:bc:32:0e:c0:fc:2c:7d:cf:
9e:81:38:96:d1:3e:ab:62:96:ec:cf:f6:bc:cb:f4:a2:3a:3c:
92:93:15:91:84:95:75:9d:28:3a:fb:1f:62:d5:27:89:fa:c2:
a1:c9:d1:aa:25:b5:6b:ef:51:9c:2c:41:fa:c2:83:9a:3a:8b:
5e:68:49:33:71:c3:ce:95:d5:0d:a8:23:6d:40:68:84:19:60:
a9:60:61:61:9d:4a:0d:e1:96:08:90:4a:b1:d0:b2:b7:d6:5b:
be:06:f6:f0:10:f7:ef:2f:d4:a3:a1:8d:a8:79:8d:46:85:87:
74:0e:73:93:06:fc:fa:29:52:1b:30:7b:db:a2:08:5c:c7:07:
83:22:f5:df:cc:50:21:da:28:4e:99:a0:fd:4b:7a:c2:5b:36:
b2:c2:c6:41:d8:fd:50:fc:f0:db:eb:81:ad:e0:c2:b3:9b:ae:
bf:01:2a:72:7f:f9:39:fb:34:ea:70:3e:29:65:37:ce:3b:73:
eb:98:5a:6a:78:e9:8c:8f:56:1e:8c:93:ad:2b:6b:2b:82:8a:
aa:6b:54:26:4e:25:7f:d1:3d:ee:43:3d:2e:2e:09:2b:6c:04:
78:78:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:27 2025 by rpki-client