Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.mft
File: XDGUkgh3QjDPjq_cXytIslDvMI0.mft (raw, json)
Hash identifier: 8n2OAJpvfTMfZagT85NcI7Cbt3q2bGqluyNqeCq1+Ak=
Subject key identifier: B3:68:27:85:5C:30:9F:4E:D7:E5:9F:65:A2:00:7B:22:CD:2C:81:05
Authority key identifier: 5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D
Certificate issuer: /CN=5c31949208774230cf8eafdc5f2b48b250ef308d
Certificate serial: 07FA50C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDGUkgh3QjDPjq_cXytIslDvMI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.mft
Manifest number: 08C5
Signing time: Mon 28 Mar 2022 02:50:21 +0000
Manifest this update: Mon 28 Mar 2022 02:50:21 +0000
Manifest next update: Tue 29 Mar 2022 02:50:21 +0000
Files and hashes: 1: XDGUkgh3QjDPjq_cXytIslDvMI0.crl (hash: 4wCCM2oxQoeJ9CVHmrTcOloGEexm1MTESPdC1Va4ut8=)
2: YRJ6jz0KCXIMyUxPIKpRAAG1OMI.roa (hash: I9mdxnuVIKS2qDzDLyFtxMcUCMUnmYCjHV2qMH7UbJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133845187 (0x7fa50c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c31949208774230cf8eafdc5f2b48b250ef308d
Validity
Not Before: Mar 28 02:50:21 2022 GMT
Not After : Mar 29 02:50:21 2022 GMT
Subject: CN=b36827855c309f4ed7e59f65a2007b22cd2c8105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:ab:94:86:72:e3:f1:3b:11:c6:99:b1:03:
df:2f:4e:3f:b2:e4:f3:b7:d0:19:aa:50:79:19:9b:
d9:f0:3c:50:ab:c3:f8:5b:5d:ec:c4:6a:8d:f2:ea:
a3:a8:be:d0:29:6e:0a:72:8f:31:aa:b6:c4:cc:dc:
39:e2:cd:c5:3f:b7:59:20:eb:1e:ce:12:8e:ae:f9:
cb:5d:08:be:00:ed:c6:6e:df:c3:82:8d:94:bd:93:
4b:b9:50:22:40:a9:9d:aa:0e:70:24:29:1d:0c:bb:
b8:3e:d1:71:a0:72:a4:0b:67:f2:f0:97:55:a9:86:
c0:68:4d:2f:00:ca:57:2b:11:dc:50:86:a4:aa:97:
7e:90:f8:b4:77:9c:07:1d:26:87:96:25:93:54:be:
74:04:d3:8f:8d:04:63:f0:27:1f:9f:4f:f9:31:1f:
08:09:95:28:56:74:64:6d:d3:ad:32:67:fc:ba:dd:
75:c1:70:fd:43:79:12:ba:fc:06:d5:74:2f:07:19:
a8:6d:6f:d1:94:b3:9b:db:bb:0e:e0:30:1a:05:8d:
09:50:e1:96:76:4c:af:be:cf:e1:e6:82:a7:58:58:
18:84:70:5c:e8:e1:ef:c9:c6:ff:b8:7b:61:95:9e:
95:2a:12:57:d1:41:b4:80:1e:4b:ea:7b:03:2c:77:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:27:85:5C:30:9F:4E:D7:E5:9F:65:A2:00:7B:22:CD:2C:81:05
X509v3 Authority Key Identifier:
keyid:5C:31:94:92:08:77:42:30:CF:8E:AF:DC:5F:2B:48:B2:50:EF:30:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDGUkgh3QjDPjq_cXytIslDvMI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/88e8c7-f02b-45c5-9d8e-bf3e80e7da57/1/XDGUkgh3QjDPjq_cXytIslDvMI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:fd:4c:81:b3:47:1d:ba:4d:aa:db:6c:08:30:ad:16:1a:
62:59:12:25:38:ba:5b:9e:91:5a:fb:e8:47:c9:f5:f2:c4:ff:
4e:1d:8d:46:bf:76:fa:74:22:cd:f4:da:07:c1:56:e6:23:de:
66:90:48:5b:5a:bc:e1:e0:b2:42:7c:06:55:13:90:92:1d:bf:
d6:80:f7:95:d6:b0:ec:84:30:29:86:5e:d3:c4:ce:4a:75:58:
42:19:84:db:d7:4e:b5:09:96:4e:40:13:b4:92:1d:04:94:1c:
55:d3:48:37:02:fa:16:bf:50:ca:02:e0:1c:6b:58:7e:96:3c:
49:e7:d7:7b:6a:32:91:bc:cd:c0:d7:13:ab:f1:4e:c5:0a:5c:
2e:5e:ac:d2:63:d3:30:cc:13:51:c2:10:10:31:11:cb:c8:14:
66:95:c2:df:47:34:60:24:b2:62:e6:ae:d6:11:10:5a:25:56:
cd:a4:c1:55:66:4b:21:48:50:26:2b:60:59:43:17:58:4c:ac:
1a:e9:d5:2c:21:cd:d8:7b:5f:18:03:f1:16:dc:77:cb:36:f8:
72:e3:92:5a:69:28:47:71:a3:d0:74:a8:ce:b7:01:f8:63:10:
9e:97:d4:31:7d:46:2c:4b:89:e3:19:53:70:38:55:62:83:d8:
2b:3f:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:37 2025 by rpki-client