Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.mft
File: XDijHHmn23Fyba447J1tLRoh_ZE.mft (raw, json)
Hash identifier: 0KsdXQRiHSysjCF9S7GZuVE7VBxgEtYrKzTiUiXbiA0=
Subject key identifier: BB:B2:45:9F:F1:DD:95:FE:14:D8:80:71:FC:A2:82:EF:2B:FB:E0:9A
Authority key identifier: 5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
Certificate issuer: /CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Certificate serial: 018C3E24E7D133FF4AD3F8918BF1F361DEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.mft
Manifest number: 0D0F
Signing time: Wed 06 Dec 2023 08:00:55 +0000
Manifest this update: Wed 06 Dec 2023 08:00:55 +0000
Manifest next update: Thu 07 Dec 2023 08:00:55 +0000
Files and hashes: 1: CiU3GpUb_49wbuaCG2KEyrph9N8.roa (hash: FIPMLLbtxZF+pb1D9bMTWdczb6Sah26SvnFSD3QrDJI=)
2: XDijHHmn23Fyba447J1tLRoh_ZE.crl (hash: dnTJlUbgUVdmgBszrrG/fsPSKe9tFEFyCruPy/2OH2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:24:e7:d1:33:ff:4a:d3:f8:91:8b:f1:f3:61:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c38a31c79a7db71726dae38ec9d6d2d1a21fd91
Validity
Not Before: Dec 6 08:00:55 2023 GMT
Not After : Dec 7 08:00:55 2023 GMT
Subject: CN=bbb2459ff1dd95fe14d88071fca282ef2bfbe09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:10:fe:8d:f3:75:90:d2:6f:ce:54:09:58:
3e:c7:d5:64:58:2c:98:a7:0e:93:e1:86:16:51:51:
71:c2:8f:2d:d8:49:ad:c3:5d:e1:24:13:f8:4d:07:
a7:1b:c7:45:2d:36:8e:f5:d5:05:d3:45:3e:8f:37:
e5:17:8d:a7:41:d9:50:5c:b7:72:17:6d:b4:98:ac:
64:2c:d7:61:10:20:0c:64:52:37:8f:5c:3f:fe:ea:
39:17:61:da:4e:54:2a:dd:7f:cd:1b:e8:b3:10:1d:
a1:85:17:be:d6:61:dd:99:d9:50:cb:81:17:68:ae:
dc:54:4c:29:26:5f:2b:1f:fc:9e:05:7e:55:a3:4f:
9f:ea:04:ac:b6:7a:c2:f1:9b:55:ae:98:57:70:73:
ac:ac:14:01:8f:af:27:ee:e8:58:57:88:64:34:47:
7c:20:14:27:d0:85:ef:63:42:3c:bc:ac:6c:e4:7a:
8b:58:97:ad:e5:6f:4b:4a:28:6f:31:ee:c7:e7:75:
94:b7:af:ed:ef:bf:c9:86:28:ef:ad:0c:03:be:23:
b8:36:8b:86:9d:b2:96:c1:c5:8a:8a:8e:05:a0:2f:
ac:5c:b1:0b:33:7c:12:08:18:70:8e:62:8e:99:46:
22:d2:46:ed:ea:be:60:79:93:86:f2:11:5a:3b:91:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B2:45:9F:F1:DD:95:FE:14:D8:80:71:FC:A2:82:EF:2B:FB:E0:9A
X509v3 Authority Key Identifier:
keyid:5C:38:A3:1C:79:A7:DB:71:72:6D:AE:38:EC:9D:6D:2D:1A:21:FD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDijHHmn23Fyba447J1tLRoh_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/79f78b-8229-4f2d-a158-a525136fe644/1/XDijHHmn23Fyba447J1tLRoh_ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9f:78:11:a6:ff:ab:25:84:20:a9:ce:16:6d:74:71:14:63:
83:ca:16:7b:1f:3e:bd:8b:bc:5f:e0:bb:7a:02:73:bc:a8:d2:
a2:d2:a6:1f:26:8c:ef:d2:4c:31:89:6d:16:90:76:24:66:d5:
32:95:58:dd:4b:f5:16:20:e8:f1:fc:bb:8d:fb:4a:09:f0:05:
4d:8d:5d:ec:ab:3e:c9:78:dd:df:11:de:55:03:97:c9:51:0b:
5b:31:36:13:25:2d:1d:b2:ef:57:0f:84:ae:fc:3e:1c:6b:ba:
ab:5f:c7:b9:c8:1f:2d:79:9a:1a:da:18:63:75:26:48:24:ae:
52:6e:5f:01:95:49:32:3d:42:59:b5:37:97:ce:42:9c:37:90:
6b:3d:b6:2e:f6:5d:57:0e:18:51:8b:21:54:d1:e9:91:a0:4f:
0d:db:ec:d7:a6:17:ec:48:c1:f6:b9:73:10:92:e4:51:4e:38:
09:b7:7b:c1:3b:40:45:dc:1b:79:96:06:d0:e3:3c:ea:20:58:
d0:ec:8f:2a:47:9c:1d:02:5d:db:e8:e5:0e:c3:06:15:64:59:
a5:fc:72:80:4e:a7:a9:9a:de:88:9d:41:08:53:26:61:15:2d:
29:eb:37:2b:4f:13:a5:26:62:c3:dd:57:49:c8:3d:64:3a:b2:
8e:bd:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:31 2025 by rpki-client