Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.mft
File: XUO1gNpuFwDZmqq5vIuatyN9R4k.mft (raw, json)
Hash identifier: efGdcv8XqWvfcVPpy1LxjHGOoSzWXhIBWJV021cqqDI=
Subject key identifier: F7:FB:A6:76:D3:89:60:95:0D:7F:81:B3:C3:83:89:C6:0F:B7:89:74
Authority key identifier: 5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
Certificate issuer: /CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Certificate serial: 018A15D9CD93F3304D694AE7363CC914E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.mft
Manifest number: 02BC
Signing time: Mon 21 Aug 2023 02:08:29 +0000
Manifest this update: Mon 21 Aug 2023 02:08:29 +0000
Manifest next update: Tue 22 Aug 2023 02:08:29 +0000
Files and hashes: 1: XUO1gNpuFwDZmqq5vIuatyN9R4k.crl (hash: jHBdWKMSRQXoOa1jT3wZzhZjVpvUEfgF0wsIK1W6A+M=)
2: eLXGzf0CaSsExzYyt7zcPKhL78I.roa (hash: osmbQ3f2X5eQMwtxU/isAlcqNjdJtkamS85eO+cseeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:15:d9:cd:93:f3:30:4d:69:4a:e7:36:3c:c9:14:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d43b580da6e1700d99aaab9bc8b9ab7237d4789
Validity
Not Before: Aug 21 02:08:29 2023 GMT
Not After : Aug 22 02:08:29 2023 GMT
Subject: CN=f7fba676d38960950d7f81b3c38389c60fb78974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:f5:57:a6:cf:61:ca:41:d6:12:53:2b:d3:
fa:38:39:91:b3:fe:e8:14:8a:e6:4e:4a:e1:95:ea:
8a:3e:c4:63:25:e8:07:70:6a:1f:0b:21:a0:26:2d:
20:eb:71:35:3b:26:75:71:69:e3:77:43:f8:d5:93:
19:bb:27:b8:37:03:44:79:99:81:18:eb:85:d8:c2:
d2:41:c2:04:16:9f:e0:61:38:54:0c:7f:83:eb:d9:
27:85:28:21:06:aa:2e:a0:5c:cd:2d:2d:14:5d:95:
25:2b:90:93:24:93:92:10:3e:50:5c:1e:ad:8d:b6:
fa:97:24:84:5b:2e:91:2f:3f:1d:21:9f:25:46:26:
89:3e:6e:38:7d:3e:27:56:37:88:f0:c3:eb:34:79:
29:0b:f9:2c:0e:c1:6f:77:f4:74:e0:d6:29:03:5c:
81:76:b3:63:b9:cb:5c:50:9c:ef:59:b5:77:50:86:
7e:1a:8a:f5:de:33:a0:90:97:b6:f8:3e:57:42:f4:
1f:46:c5:12:9b:99:f1:6c:35:48:68:c3:2d:5d:51:
16:f5:b3:8b:ae:5c:9a:56:40:7b:47:48:4b:b7:ef:
51:d9:f4:d0:fe:5b:b1:43:56:8b:a7:e8:f1:b2:e5:
28:c1:4f:f0:73:c8:c1:76:4b:fc:39:f6:ba:fe:8d:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:A6:76:D3:89:60:95:0D:7F:81:B3:C3:83:89:C6:0F:B7:89:74
X509v3 Authority Key Identifier:
keyid:5D:43:B5:80:DA:6E:17:00:D9:9A:AA:B9:BC:8B:9A:B7:23:7D:47:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUO1gNpuFwDZmqq5vIuatyN9R4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/69ac58-1a85-4ae6-bba9-4cd5f0b1adb4/1/XUO1gNpuFwDZmqq5vIuatyN9R4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0c:a7:b5:49:f7:73:70:65:37:e0:ed:30:c2:a8:02:b6:b2:
f1:86:3f:8d:ab:b1:d2:f4:5e:fa:65:a9:4d:6d:4f:39:bc:31:
d7:a6:cf:57:d8:7a:1f:93:f1:dd:e5:14:5c:27:d5:7d:2c:f2:
d5:97:14:cd:02:3c:f2:2c:75:41:41:fa:07:4a:7d:f6:4d:f0:
5b:8b:bc:57:da:69:2b:23:f2:ea:67:d7:a5:c3:95:19:b9:6a:
60:78:61:35:ab:ba:14:13:4f:8e:72:63:05:d0:72:7d:da:0d:
2a:6f:cd:7e:b9:e3:6c:e1:f4:e6:5a:97:72:12:b6:ec:ec:c7:
5b:76:b9:f7:b8:ff:e0:b5:e6:45:e5:a1:8c:e3:e9:1e:c0:6d:
6d:91:ed:b4:5f:2e:10:1a:31:58:1f:d0:92:9d:f5:c3:53:64:
61:8c:66:e5:d7:0b:71:5c:77:1c:2b:7b:08:bc:0e:9d:db:2f:
07:17:0f:02:4e:62:ea:6d:39:9d:1f:68:ac:51:8a:f1:dc:f2:
61:30:d5:5c:0d:ac:6a:59:c3:30:cf:35:9d:20:3b:fc:f5:19:
7b:57:73:35:2b:8b:f1:ea:6c:02:d3:dd:2b:3a:f8:81:ae:1a:
aa:a6:7f:6f:5b:ab:e9:fa:59:a3:a5:92:d0:2e:e1:8a:7e:4f:
89:c3:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:43 2025 by rpki-client