Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.mft
File: XkMemyXoicA208PlA4SPd_HOyZs.mft (raw, json)
Hash identifier: 5BZwPKO4/TEP0fIw1IA1pQXZdl6eTGKnq9cREF8pYOM=
Subject key identifier: 0B:2D:F8:E8:C5:E2:D2:16:20:25:0A:D5:46:12:90:BF:04:A7:59:6C
Authority key identifier: 5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
Certificate issuer: /CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Certificate serial: 018BD348FE8D801BA0434DE5A876E2042BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.mft
Manifest number: 0F8B
Signing time: Wed 15 Nov 2023 14:00:58 +0000
Manifest this update: Wed 15 Nov 2023 14:00:58 +0000
Manifest next update: Thu 16 Nov 2023 14:00:58 +0000
Files and hashes: 1: 1tx64x0RNBM3kGHptMbc7c8PUAE.roa (hash: J7iUMgVacvWls4pL85+YLSTPtdcV470vauCVr+dDJqU=)
2: XkMemyXoicA208PlA4SPd_HOyZs.crl (hash: 5nTrJZ6PxYnUNQFTM2NgBr3fxmkZyERIlr9zRNesTEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:48:fe:8d:80:1b:a0:43:4d:e5:a8:76:e2:04:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e431e9b25e889c036d3c3e503848f77f1cec99b
Validity
Not Before: Nov 15 14:00:58 2023 GMT
Not After : Nov 16 14:00:58 2023 GMT
Subject: CN=0b2df8e8c5e2d21620250ad5461290bf04a7596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:06:21:d0:e4:1f:2e:98:0c:5b:75:34:4f:
95:8a:79:c0:67:c2:eb:f7:33:93:0f:79:f6:d8:e5:
55:28:5c:ce:92:93:f6:69:64:f9:86:6f:ae:56:93:
a2:b3:c9:d5:0f:19:da:e1:0d:01:72:ae:df:4a:68:
b0:ab:a7:f5:12:b3:0e:af:05:18:63:13:18:65:ea:
05:ab:e7:15:2d:0b:16:e4:27:ad:f9:e3:65:d2:c0:
96:93:51:d2:f7:3a:36:74:75:34:e0:d2:98:1b:14:
23:14:c4:1d:c3:c7:a9:90:94:94:54:ca:30:f5:64:
51:ca:5f:12:27:2c:16:ff:4f:ae:0a:1f:be:0a:44:
f8:82:ef:c4:e0:a7:86:1b:c8:5d:4c:c6:ae:bf:0d:
dd:59:f0:24:85:64:89:93:3f:b9:96:58:ce:ce:54:
f6:f5:c1:d9:a2:9d:05:dc:0e:e4:f9:dd:59:e0:4e:
b4:d8:d9:f4:99:8c:af:5a:86:4d:52:d4:e6:3a:cb:
78:76:d9:5d:53:b8:b3:ae:e3:24:66:9c:f6:98:56:
4d:9a:eb:4d:d9:dd:d4:f6:fb:6e:dd:a8:bc:f4:68:
1c:1a:63:34:7a:2c:74:0f:9b:20:f1:cb:0f:26:2c:
94:7f:e3:e4:9c:b7:c1:63:60:75:e6:f0:59:62:4e:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:F8:E8:C5:E2:D2:16:20:25:0A:D5:46:12:90:BF:04:A7:59:6C
X509v3 Authority Key Identifier:
keyid:5E:43:1E:9B:25:E8:89:C0:36:D3:C3:E5:03:84:8F:77:F1:CE:C9:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkMemyXoicA208PlA4SPd_HOyZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cf5fe4-be5d-40c6-83f4-0cd8186e729e/1/XkMemyXoicA208PlA4SPd_HOyZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b8:19:66:94:a2:c6:0b:82:dc:24:f5:58:06:71:36:23:5e:
58:e0:4b:19:b9:44:26:c3:9c:77:c8:b9:77:0b:54:b3:c4:ab:
13:40:17:36:8c:11:c8:2a:9d:4c:a9:74:d7:23:53:bd:b0:be:
e5:d4:b3:3d:07:5f:71:39:00:11:ab:30:cc:65:a1:c4:b2:85:
8e:46:28:6f:9a:ab:15:e6:24:36:7a:50:a4:bf:ac:64:d9:a3:
d2:c2:3c:76:1e:bc:f3:72:a6:af:a4:4e:be:14:61:a6:bb:24:
cd:b5:46:92:09:43:15:c8:7a:b8:e2:4d:87:78:d6:71:3c:45:
40:59:40:21:ee:79:f1:8a:56:ca:b3:11:ad:89:11:f6:27:5e:
45:ba:19:df:48:e4:2b:e0:c1:ed:f3:87:cb:6f:5a:7a:87:ea:
6c:2e:0e:13:60:4d:35:1a:17:46:f6:96:7d:71:f2:51:4f:95:
3d:63:d1:7b:f5:2c:ec:58:e2:bd:00:3a:b6:b7:ec:e2:04:8c:
7f:f6:b9:a8:d1:ca:29:fa:de:83:2a:89:71:10:e2:70:b0:9e:
fa:46:3a:ba:50:f2:e9:58:48:30:76:f8:9f:2e:fe:fa:f8:a8:
16:89:02:fa:e5:2c:39:91:41:46:6d:0d:33:c9:09:75:07:12:
02:be:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:54 2025 by rpki-client