Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
File: Xxza2jmCQOZ-T4JugInSWxJJBAE.mft (raw, json)
Hash identifier: 1gVB1ONwoGHZ5VmCn69OXWzN+6nH/9DzWAMaP+Q0t8U=
Subject key identifier: 96:79:FC:19:D5:D9:95:B8:76:6B:AD:DF:DF:56:B3:B1:C2:12:D9:32
Authority key identifier: 5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
Certificate issuer: /CN=5f1cdada398240e67e4f826e8089d25b12490401
Certificate serial: 0191D63B90E51D8A9DA83981F406B14AD24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
Manifest number: 12A9
Signing time: Mon 09 Sep 2024 10:01:53 +0000
Manifest this update: Mon 09 Sep 2024 10:01:53 +0000
Manifest next update: Tue 10 Sep 2024 10:01:53 +0000
Files and hashes: 1: UzJEfYrK8k3REzILsm6rUTr9YhI.roa (hash: DqkUqMmpONDMcOkVpzft4tQW2Xpc9j0ICc+uIFw5SQQ=)
2: Xxza2jmCQOZ-T4JugInSWxJJBAE.crl (hash: 4sflLWCObIN+kgx9AfsT5OUeH1qwreoPI8i3gGX+n+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:3b:90:e5:1d:8a:9d:a8:39:81:f4:06:b1:4a:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1cdada398240e67e4f826e8089d25b12490401
Validity
Not Before: Sep 9 10:01:53 2024 GMT
Not After : Sep 10 10:01:53 2024 GMT
Subject: CN=9679fc19d5d995b8766baddfdf56b3b1c212d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:e2:a0:b9:96:b6:9d:9f:e4:14:77:b9:24:
1b:a9:74:3c:06:2f:20:66:8c:e9:60:c3:ee:96:76:
3d:f6:13:83:8f:82:03:b4:a1:f7:10:6f:1b:d4:f3:
dd:3d:08:ea:7c:52:6e:88:00:0b:60:a3:a6:5a:04:
3e:dd:41:e2:34:10:49:31:6c:78:40:74:67:a9:8c:
ac:52:e7:61:f7:5b:7f:fb:a0:cc:3e:1e:41:95:f1:
79:91:5f:f2:90:ba:f8:6a:72:fb:d0:38:b6:37:09:
01:27:00:da:75:71:48:d7:87:a4:ec:97:fc:f3:73:
ab:c7:5f:4b:1d:a4:d7:3e:e9:f1:49:7e:72:29:c0:
7b:14:58:97:85:87:28:48:51:c5:85:4e:b6:7c:9c:
23:70:f2:5e:fe:5b:8a:b3:94:e5:9f:66:71:43:4d:
6e:3c:76:9b:d7:3c:2c:e5:1a:b3:15:f5:98:c5:80:
6e:91:63:cc:90:30:0b:4e:a7:60:04:05:8d:af:b9:
9d:b2:e4:b5:3c:ef:56:09:c5:47:77:05:88:03:dd:
87:1b:26:dc:06:af:0c:5c:6c:5b:cd:45:0d:65:c2:
73:0e:ad:1c:80:5f:38:86:8d:f0:91:88:63:9d:76:
cd:78:f8:74:8b:89:53:b7:83:81:6f:68:69:de:5e:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:FC:19:D5:D9:95:B8:76:6B:AD:DF:DF:56:B3:B1:C2:12:D9:32
X509v3 Authority Key Identifier:
keyid:5F:1C:DA:DA:39:82:40:E6:7E:4F:82:6E:80:89:D2:5B:12:49:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxza2jmCQOZ-T4JugInSWxJJBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/490ae5-32dd-4457-9407-0e00152dd9e1/1/Xxza2jmCQOZ-T4JugInSWxJJBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:14:e9:bb:50:5d:a9:52:4e:c9:ef:cb:e8:74:e0:32:fa:e8:
29:f9:33:16:79:55:c3:79:5d:50:50:14:7e:34:7f:43:45:35:
da:f8:e0:f3:af:57:37:84:82:64:38:8a:e3:79:ae:e0:7e:85:
7b:87:ae:2c:01:c2:f6:0d:2e:c7:ac:4a:94:ef:bd:da:20:69:
c8:5c:df:57:96:ed:18:c2:be:33:d4:78:51:d4:a8:cb:a6:78:
bf:15:a9:3f:5d:34:ae:a5:65:de:5a:7a:10:6d:cb:9a:ef:e1:
c9:ae:ea:cd:17:c5:8e:86:3a:aa:a9:0b:0c:93:c4:7a:40:19:
75:35:d8:be:7f:d9:4d:8f:06:72:e6:6c:29:f7:23:4f:a8:d6:
89:ef:9a:2c:fc:ba:3e:73:18:41:c6:74:c7:bf:1a:c1:b2:1a:
b3:43:18:23:3e:68:01:1c:21:bf:f7:c7:d0:59:22:82:51:d2:
c1:92:d3:e5:10:61:fc:a7:e0:b8:f8:ed:49:8f:37:21:d1:2c:
2b:f7:0e:ed:7d:5b:67:46:16:d4:62:4b:65:df:33:09:97:36:
66:a9:0e:ab:ad:57:d5:af:1f:a2:41:19:36:73:19:3f:5b:31:
c0:e6:06:8c:a0:03:21:5b:d1:ff:8e:ea:f9:dd:92:d1:bc:6c:
a9:82:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:17 2025 by rpki-client