Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft
File: X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft (raw, json)
Hash identifier: sYfOKJjO+DXz0x5GBLCBWVAEn4eTOZFs+r1TFcuA3YQ=
Subject key identifier: 3A:4A:49:F3:7B:7D:25:EC:9A:ED:CE:AD:D9:AC:7C:C3:AB:3B:38:F5
Authority key identifier: 5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
Certificate issuer: /CN=5f42797958de5e06336106f6dd0d623be2a5eb1a
Certificate serial: A3DDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft
Manifest number: D4
Signing time: Tue 28 Jun 2022 08:21:51 +0000
Manifest this update: Tue 28 Jun 2022 08:21:51 +0000
Manifest next update: Wed 29 Jun 2022 08:21:51 +0000
Files and hashes: 1: A9yRjVKeXWyjqzmwXO0QBEZPFeY.roa (hash: HEbXdzMK0DH4BDaJQSgnHs/RmF7/p2bo5FUkVyJDin0=)
2: X0J5eVjeXgYzYQb23Q1iO-Kl6xo.crl (hash: IOjmUY0sABn1O+6geUf8EKQeCmMlW43sqTN3IFZ/Nrg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10739157 (0xa3ddd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f42797958de5e06336106f6dd0d623be2a5eb1a
Validity
Not Before: Jun 28 08:21:51 2022 GMT
Not After : Jun 29 08:21:51 2022 GMT
Subject: CN=3a4a49f37b7d25ec9aedceadd9ac7cc3ab3b38f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:84:49:5c:42:49:9e:a4:b5:35:16:27:b0:
c6:97:d5:14:bf:e8:9d:c3:50:93:92:af:bd:2e:d1:
b7:6e:d5:0b:86:8c:d1:01:0b:96:88:de:d4:f2:7b:
47:ef:7b:32:87:00:19:82:da:03:9a:7f:b6:78:ee:
38:db:68:91:18:70:19:fe:ed:18:64:e1:34:4d:f2:
a1:05:0c:77:72:11:4a:d3:c9:ab:c1:38:d7:f0:c9:
16:9b:a9:e1:c9:7b:fe:1b:5a:65:0c:94:c7:26:9b:
96:5d:bb:d0:b0:31:91:0d:ae:03:d7:1f:f1:66:f0:
bc:1d:34:02:0a:0f:6e:7c:eb:88:90:37:3b:3d:8c:
18:50:6c:0c:58:72:a1:84:59:28:b3:a0:cb:6a:3e:
87:ca:29:5e:06:93:6c:38:7a:d4:6b:c8:bc:b0:f9:
2b:42:63:18:5e:6c:77:29:a9:00:f6:03:cf:3d:be:
97:a1:ed:f8:4d:d8:8c:7c:32:6f:f8:1e:3c:6c:41:
9b:61:f1:eb:5a:f6:65:c3:80:97:ca:c2:dc:65:62:
2f:44:76:14:6d:37:af:82:da:45:27:2d:e6:f8:73:
5c:dc:45:96:70:7d:4d:b2:bb:20:75:69:74:4d:1c:
cb:8f:d3:46:24:40:43:35:f1:d1:77:34:2e:ff:fd:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:49:F3:7B:7D:25:EC:9A:ED:CE:AD:D9:AC:7C:C3:AB:3B:38:F5
X509v3 Authority Key Identifier:
keyid:5F:42:79:79:58:DE:5E:06:33:61:06:F6:DD:0D:62:3B:E2:A5:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/076ece-6498-460f-8365-613d53415a8f/1/X0J5eVjeXgYzYQb23Q1iO-Kl6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:f2:65:4f:4f:fb:31:8f:3f:f9:90:43:61:66:94:77:2f:
0f:0c:4e:52:6b:ed:c0:76:52:87:7e:b8:2c:55:56:a5:f4:59:
c5:e7:8e:41:82:9d:a7:b0:6f:bb:8a:e0:8c:95:86:9b:ac:f5:
37:93:b9:6e:82:28:69:28:d8:33:d4:a6:96:79:58:86:6d:fe:
48:08:e5:1b:cb:a2:d2:b7:69:c1:27:27:88:72:96:53:9d:3e:
ce:02:58:d4:85:3e:bd:e8:1d:0c:d1:20:27:d1:d8:99:49:2f:
41:42:b6:f3:b8:af:61:bd:4e:8c:7d:94:cc:4c:3f:3e:16:d4:
4b:ae:0f:03:c9:fe:42:5e:ff:79:a3:bf:d5:fb:d1:92:e7:66:
41:89:0d:8d:b8:ff:e3:d9:39:3a:2b:9f:74:c6:b0:33:18:08:
93:ef:8c:f2:6f:6d:fb:5c:91:21:78:cc:86:df:5b:ae:34:0a:
58:fe:ce:86:ae:e7:f3:4b:bf:99:23:8e:a3:a9:96:4c:dc:12:
d5:31:27:94:d2:af:9b:17:3b:d8:50:78:f7:ac:e3:6a:59:2e:
cb:0b:58:2b:6e:47:c6:5a:38:ce:08:63:79:51:8b:73:ec:26:
6c:c6:05:11:4b:ca:cb:8c:57:18:c0:df:17:88:8f:ec:64:a4:
0b:7b:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:50:10 2025 by rpki-client