Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft
File: XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft (raw, json)
Hash identifier: /s9cl8VkEbHuL7M6s0n34xRzMnoL2qrIA8OV2cqHw1Y=
Subject key identifier: 6F:A3:9C:7F:D4:0A:03:8C:B9:FF:FD:C1:EE:71:BF:67:BC:0B:2E:17
Authority key identifier: 5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
Certificate issuer: /CN=5c09fb6905d48eae2be5edf3cbfbca6b5fee9752
Certificate serial: 01860BA26EBCFCA56E539652C66D0A50D73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft
Manifest number: 0C55
Signing time: Wed 01 Feb 2023 06:20:39 +0000
Manifest this update: Wed 01 Feb 2023 06:20:39 +0000
Manifest next update: Thu 02 Feb 2023 06:20:39 +0000
Files and hashes: 1: XAn7aQXUjq4r5e3zy_vKa1_ul1I.crl (hash: evaKjFzL56qXbL4E+9h6I73FCzXUPo5FsiQA4FB2NZA=)
2: yyuBf99BMpfvLJ2WWh_FhBxb2BQ.roa (hash: Y4GdDf6nJDobIIYDVorazhvdDqV2GuMmpjjzqa1uYGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:a2:6e:bc:fc:a5:6e:53:96:52:c6:6d:0a:50:d7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c09fb6905d48eae2be5edf3cbfbca6b5fee9752
Validity
Not Before: Feb 1 06:20:39 2023 GMT
Not After : Feb 2 06:20:39 2023 GMT
Subject: CN=6fa39c7fd40a038cb9fffdc1ee71bf67bc0b2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:2d:f2:f0:fa:f8:e7:ff:b7:8f:3d:f0:8f:
27:a1:f3:91:3b:2b:59:f6:a1:98:4f:af:da:c3:bf:
f1:a8:79:b5:3e:12:a0:90:d7:dc:2b:d1:30:ec:19:
d7:61:ea:75:e3:dd:3b:1f:dc:cf:37:34:c8:00:9d:
0e:37:a6:a7:14:40:cb:24:80:b0:2d:14:85:02:71:
3a:34:dd:4a:ee:27:6e:d7:cd:d2:e0:af:2e:38:b4:
33:4a:1e:ae:e6:f8:8a:39:39:19:1f:29:93:83:0a:
c4:19:9a:b8:83:3b:9b:62:95:35:5a:a8:10:90:e4:
53:50:7a:71:94:ec:55:90:66:32:5d:95:1b:f6:89:
da:a7:81:04:3f:c3:b4:8e:ed:1a:1b:24:a2:03:d0:
65:80:b7:92:32:1e:13:2d:df:3e:47:b9:74:2b:2b:
6d:b7:29:64:0c:c8:aa:09:d5:b6:1e:a4:7c:ca:c4:
fe:c1:f5:4b:91:b8:21:4a:6a:24:72:08:57:39:c4:
7e:3d:bb:05:99:89:ae:be:04:c6:e9:f1:53:56:88:
de:89:72:49:dd:e9:12:02:fa:93:70:c5:f1:e9:44:
cd:3f:7b:1a:2c:dc:4c:f8:55:0c:ba:12:bd:7c:c6:
61:65:d7:58:d9:ce:6b:7d:1e:24:5c:01:21:84:7d:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:9C:7F:D4:0A:03:8C:B9:FF:FD:C1:EE:71:BF:67:BC:0B:2E:17
X509v3 Authority Key Identifier:
keyid:5C:09:FB:69:05:D4:8E:AE:2B:E5:ED:F3:CB:FB:CA:6B:5F:EE:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAn7aQXUjq4r5e3zy_vKa1_ul1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/dc64b3-b6d0-4e17-9d05-4e35fc717eab/1/XAn7aQXUjq4r5e3zy_vKa1_ul1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9d:3e:49:d3:9b:a4:24:5c:61:d1:a0:08:fd:ce:c1:15:08:
83:da:62:1e:2e:15:e8:1b:40:81:14:a4:8d:5c:87:be:45:a4:
70:73:42:62:bd:1e:43:f3:06:f8:70:8e:27:9f:76:f6:b8:9c:
1a:1f:40:ef:80:55:e0:dd:a5:b7:05:28:37:11:70:62:b2:b2:
bb:74:a5:c5:98:5f:29:4b:ad:1c:9e:13:2e:d5:9d:fc:13:f1:
d2:d4:d1:1c:99:c4:83:0d:02:01:bf:0a:48:0c:80:71:76:5d:
8b:85:ad:3a:86:f6:b3:83:e9:25:1d:ef:b1:de:e9:f0:2e:90:
46:77:4f:8a:95:fd:2c:19:ae:38:b1:8e:38:03:4b:60:18:cb:
4d:96:ff:8c:84:90:4f:24:10:e1:90:36:55:95:d3:ed:93:23:
3f:83:ab:25:fe:e6:d9:1a:e9:08:75:1c:4d:c9:55:42:54:c6:
26:f9:c3:c7:b5:05:c4:49:52:fd:3a:0c:67:6f:30:3d:2b:89:
8f:08:3d:cc:be:b9:08:ad:d7:5c:e6:c6:57:ef:63:e1:45:7c:
0d:30:75:81:75:37:57:47:1e:30:57:7b:51:2e:38:8c:34:f6:
67:19:b1:dc:ab:f4:cd:34:c3:e0:74:43:f2:ef:48:0b:ef:5c:
41:8d:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:50 2025 by rpki-client