Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.mft
File: X9NR5espYvwW_BTnxuUbhK0d6LU.mft (raw, json)
Hash identifier: WCcPN0QOPAqTWJETt/62jernujZiOshryOP56W/rP5Y=
Subject key identifier: 9F:BE:49:B0:61:8D:53:6D:66:8E:83:A3:33:7A:24:BD:38:F5:E8:FE
Authority key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Certificate issuer: /CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Certificate serial: 018D76237E2564AC61073666AD375C37525B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.mft
Manifest number: 085A
Signing time: Sun 04 Feb 2024 22:00:53 +0000
Manifest this update: Sun 04 Feb 2024 22:00:53 +0000
Manifest next update: Mon 05 Feb 2024 22:00:53 +0000
Files and hashes: 1: HEf2Qr9JJtBjp-zlAzDX4LWj7KM.roa (hash: wARLGoFr2macLDTgaBEG3lHxaW5BW5y4d8tRIr6sXA8=)
2: X9NR5espYvwW_BTnxuUbhK0d6LU.crl (hash: V0PNSydYyz1/8HitatO5mpkKJ6iQcLXLmCMh45btZDA=)
3: o5-oFJoOpZhwcmNQ2j7XWYcLZtI.roa (hash: DzeiELuj6bmPucATHLyZ618uddjmJCRQnEIQppCTnvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:76:23:7e:25:64:ac:61:07:36:66:ad:37:5c:37:52:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Validity
Not Before: Feb 4 22:00:53 2024 GMT
Not After : Feb 5 22:00:53 2024 GMT
Subject: CN=9fbe49b0618d536d668e83a3337a24bd38f5e8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:5c:24:25:c9:4a:05:14:94:91:9f:8d:89:
cb:d4:98:dd:bb:46:0f:52:41:6c:86:28:9a:4a:c5:
58:d0:77:d0:d0:0d:f9:de:2e:93:a7:5b:f4:fe:fe:
63:e9:9b:2f:59:4d:a9:b3:3b:9e:6d:92:8b:3d:0a:
0e:d0:58:c8:a6:ac:db:6f:62:00:03:6a:9c:e7:a4:
d8:00:99:9b:46:6a:b9:0f:9b:87:25:34:e1:58:3b:
0d:0f:4c:f4:65:4e:59:35:7d:f3:be:27:fe:16:6b:
d5:c9:24:1d:09:57:dd:a0:d5:0c:af:c0:bb:28:0c:
dd:8f:46:51:31:5e:26:7e:c6:57:a2:58:0d:6e:e9:
19:75:58:2b:07:9a:18:31:fd:3d:12:91:07:21:13:
61:91:48:23:2f:77:5b:06:16:98:e6:0f:1b:cd:be:
e8:54:79:4d:63:34:6b:f9:28:80:2b:d1:c1:25:bc:
58:65:0d:fd:42:d8:11:de:65:6c:c7:2e:b3:93:b6:
9f:fb:00:13:e5:7e:f0:bb:57:42:6b:a3:71:e7:83:
f0:7b:bd:55:56:c4:01:d7:27:05:ce:58:fe:6a:07:
81:54:82:44:d5:b5:9d:7f:18:5b:70:c2:8a:3f:bc:
5c:4d:aa:3e:a2:ab:b1:b1:dd:73:77:3a:a3:ab:02:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:49:B0:61:8D:53:6D:66:8E:83:A3:33:7A:24:BD:38:F5:E8:FE
X509v3 Authority Key Identifier:
keyid:5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d9:72:33:11:7a:66:5c:98:94:f3:0b:bd:b4:7d:d5:3f:cb:
f7:f5:26:52:65:ab:58:9e:16:95:35:f4:11:c7:ce:7e:d9:4b:
8c:6e:69:f2:77:ac:05:49:27:4e:8c:c1:5e:38:ae:88:00:17:
dc:84:67:de:05:cd:87:e7:c9:e9:bc:0c:eb:b2:97:63:b6:3e:
62:6d:32:c9:e9:4c:1b:c1:5a:93:e7:57:e6:1d:a1:ea:bb:a1:
ae:69:0b:a7:b9:6e:7f:b8:91:a9:2f:fe:50:27:9e:d7:a8:29:
50:e2:c0:bb:6a:1e:22:84:b6:7c:73:91:ca:83:ab:c3:4f:a3:
75:89:32:7f:3e:80:33:61:c8:e1:8d:53:eb:86:23:30:47:a4:
4e:99:90:bf:59:00:ad:2e:6d:c9:4d:ae:d1:39:e4:46:d1:0e:
3e:ac:d6:3c:90:3a:ef:95:1f:b8:64:79:f8:ae:1f:9d:8e:2b:
fb:da:76:2c:a8:a4:32:f2:d6:9e:8a:49:46:19:ea:56:14:b0:
30:94:19:a1:ac:9b:67:98:39:25:28:99:2f:29:93:7d:e0:28:
38:c0:c0:12:20:4f:f1:08:3c:ce:2e:7c:d6:5a:4d:e2:72:10:
c8:56:b5:b4:2a:8d:74:35:3b:18:51:12:a5:10:f5:ac:32:69:
12:84:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:21 2025 by rpki-client