Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/xzCPqkcQ7-I9LYRLTw3LCszETOs.mft
File: xzCPqkcQ7-I9LYRLTw3LCszETOs.mft (raw, json)
Hash identifier: kVyM5D8g4Z2SaVK0WjOjbu/cR09Q9TFbZHArQ29gA3c=
Subject key identifier: 42:A4:61:15:46:78:56:4B:BC:C4:3B:4A:5D:E3:03:B2:15:C8:64:A2
Authority key identifier: C7:30:8F:AA:47:10:EF:E2:3D:2D:84:4B:4F:0D:CB:0A:CC:C4:4C:EB
Certificate issuer: /CN=c7308faa4710efe23d2d844b4f0dcb0accc44ceb
Certificate serial: 018B3C7038EBEA2AA6C48E2072FAA7A48687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzCPqkcQ7-I9LYRLTw3LCszETOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/xzCPqkcQ7-I9LYRLTw3LCszETOs.mft
Manifest number: 06C2
Signing time: Tue 17 Oct 2023 07:01:09 +0000
Manifest this update: Tue 17 Oct 2023 07:01:09 +0000
Manifest next update: Wed 18 Oct 2023 07:01:09 +0000
Files and hashes: 1: HDl9_auEdIMAtW5Vgp9PlrZ-ncA.roa (hash: XdufU6Syv6lNAmyQ6eCOlWjFJdwORbVLVmmmgTVe8Mo=)
2: tPXrcnPGGXZ_cBTK1eMqQlMOZhE.roa (hash: E6v/80ni2JdyTMaZQClZxGMBiSDAjB0Uhj1LNdVeEHY=)
3: xzCPqkcQ7-I9LYRLTw3LCszETOs.crl (hash: OXhTQWqDij/EriJjjgYkKp5G0d7WLnPNBoh2sNanoec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:70:38:eb:ea:2a:a6:c4:8e:20:72:fa:a7:a4:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7308faa4710efe23d2d844b4f0dcb0accc44ceb
Validity
Not Before: Oct 17 07:01:09 2023 GMT
Not After : Oct 18 07:01:09 2023 GMT
Subject: CN=42a461154678564bbcc43b4a5de303b215c864a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b8:7a:96:e7:d1:3d:2d:b1:61:be:7a:8f:d8:
63:ca:fc:34:59:79:de:82:8c:68:f4:c2:d2:e2:de:
e2:be:71:b9:d3:aa:7d:a0:cb:f9:0b:72:83:1d:51:
7b:0e:68:c1:59:2e:5d:d1:bf:71:07:37:8c:99:3d:
14:51:6b:c5:e4:b2:a9:cf:5c:f8:71:56:d6:22:c7:
5e:76:c6:72:44:11:ed:3b:58:e5:d7:83:f4:8b:13:
c4:c5:d4:ef:7b:b9:b6:02:61:74:42:e3:9b:67:f8:
40:3d:cd:53:f7:dd:e8:85:f9:79:71:93:98:4e:b9:
14:70:c3:92:a6:b9:7c:9d:c7:50:60:9f:3b:8c:aa:
4e:71:fc:a2:8a:99:a2:13:7c:5c:ae:7f:79:8b:33:
39:d5:a6:7b:eb:b5:f7:43:86:26:b7:42:99:c8:3d:
3a:96:8d:70:3a:94:c8:eb:a1:18:48:97:44:1e:68:
ae:e8:8e:72:7e:61:85:fa:df:4a:87:ce:d2:97:55:
8d:b3:85:6a:ae:97:fd:b3:41:d9:ef:d2:63:72:e3:
79:a9:af:ca:db:8a:09:1d:f2:4b:a3:b4:af:af:77:
e5:40:b7:16:e4:26:ed:1a:9e:6c:92:21:68:49:a1:
2f:98:48:43:b0:a6:6b:d5:25:00:ce:51:f0:89:79:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:61:15:46:78:56:4B:BC:C4:3B:4A:5D:E3:03:B2:15:C8:64:A2
X509v3 Authority Key Identifier:
keyid:C7:30:8F:AA:47:10:EF:E2:3D:2D:84:4B:4F:0D:CB:0A:CC:C4:4C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzCPqkcQ7-I9LYRLTw3LCszETOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/xzCPqkcQ7-I9LYRLTw3LCszETOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/xzCPqkcQ7-I9LYRLTw3LCszETOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:37:c0:ab:96:d0:77:56:5a:01:67:15:4d:2e:cd:b2:fd:
d0:04:83:7a:94:b0:6e:4f:e4:ef:04:ff:32:46:47:51:99:e8:
d3:1c:99:fe:59:34:96:67:39:c0:5a:27:f2:70:7e:7e:9c:fc:
6f:0d:b5:d9:83:59:b3:ac:99:7f:3f:41:13:34:52:02:89:c6:
c0:6a:af:45:36:c7:1f:1a:c8:e4:8f:6e:ef:c4:77:db:ca:14:
36:b2:a0:58:e9:f1:53:50:db:0d:df:b9:6a:70:96:1a:40:3c:
6f:36:71:eb:d1:43:22:bb:97:39:31:cd:c5:76:55:2a:07:f2:
6c:48:ae:29:5c:0e:7b:16:1e:48:2b:0d:81:92:86:3f:6d:4f:
d0:e0:8f:32:c1:97:37:d5:e6:20:c4:14:31:98:38:6c:89:27:
47:ea:3b:46:74:d2:d4:02:e6:40:14:67:60:c4:ea:e9:b5:b8:
3c:33:b4:a9:77:30:d5:41:c6:86:07:57:96:bc:32:0e:3c:df:
6e:13:0b:a7:72:1b:18:b5:f9:fb:3d:fb:c0:6d:71:bc:9a:b4:
9f:fa:43:3b:18:f6:72:42:34:24:4a:84:1f:6c:cb:a7:e8:bf:
45:ec:b3:51:ca:8f:a6:32:05:d1:17:a1:5f:09:4a:0e:ed:1a:
3b:d9:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:10 2025 by rpki-client