Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.mft
File: XfU2RYQ-bSiD3I-cT0FcHq279go.mft (raw, json)
Hash identifier: UwPsjT6ARs3KGTiRu4yyh3r0BZFfy4jn1r2tTluXH9s=
Subject key identifier: 1F:A5:39:CC:69:71:9A:D0:64:A7:83:95:17:71:86:45:F7:75:02:70
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Certificate issuer: /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial: 018A25DD30854D0FD1C6B5BD56B25F1C11D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.mft
Manifest number: 0CCC
Signing time: Thu 24 Aug 2023 04:46:07 +0000
Manifest this update: Thu 24 Aug 2023 04:46:07 +0000
Manifest next update: Fri 25 Aug 2023 04:46:07 +0000
Files and hashes: 1: 1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa (hash: ugBZ6xSbRGY+1IcSG9pM1xES6ma58HW31MSkxtobsTU=)
2: 364XfRm5Qp2acLnn7kV5mPUT6jc.roa (hash: X4pWNSaiTyxYlV6iQTA+Qq30gI0jesVBhUyP54lFDYk=)
3: 7LYGv9F2z56TRW_PMz4FHHAWAH4.roa (hash: PGkOP2etEuZhznD/MZez5c1CwYiGGu9cThFVCZq9sRo=)
4: MTajk7TX2-BwtJRUryAy3wSgQwc.roa (hash: wh/E4k38CEt+ApDkJFlNWqr4LBWDuvMrmqXSKBsy084=)
5: Tv8m3NbvN46eSPGdlvHKb5EYyUg.roa (hash: teMx76RdXVOaw2w5fHFZK8/S6S0G9YUZ2uCiFBW4G+g=)
6: XfU2RYQ-bSiD3I-cT0FcHq279go.crl (hash: enlDTjUKssCfr0yyHUOlIZgpXpCtf9vDBh0I20tCse4=)
7: XvM2T1MZe_oJv8iQR92SDRZVM64.roa (hash: oQSLp5xte3sGT2GXaERQvZufCgr9Nggm/kIdJXLv6s4=)
8: i0heKQYC68HogZJByIaL7PS3Exc.roa (hash: /xhu4voN/cV7zme14HmZjNuupigQz3N00GEESd0+nwA=)
9: lRCTVxuqjzW6VChocoafd78yWtE.roa (hash: ZyYX4tyE5NPiY+hiZL/sx0eHc1gAVT1nP1Zp7WByqMc=)
10: sETV06CmqeVkml3lUTH8JW2AeMk.roa (hash: QTN0hubnb4h0WEQeUPRpgVKsPmhVtwT9oBHlD6W5uYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:dd:30:85:4d:0f:d1:c6:b5:bd:56:b2:5f:1c:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Validity
Not Before: Aug 24 04:46:07 2023 GMT
Not After : Aug 25 04:46:07 2023 GMT
Subject: CN=1fa539cc69719ad064a7839517718645f7750270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:0d:6e:b5:b0:0f:ac:e7:a0:57:44:c1:b4:
30:4b:42:11:7c:ff:72:fc:09:0e:6e:07:6f:eb:91:
b9:f7:09:4c:8e:f5:86:4f:f6:da:af:9f:23:5b:89:
b1:d5:52:09:2c:b2:52:b1:02:c1:18:b4:c5:5c:53:
93:9c:12:23:94:26:40:c8:3c:ba:60:3a:c2:4a:28:
ab:d9:71:2c:0d:0f:17:f0:73:e2:c7:d0:03:89:0d:
2f:f1:06:07:48:0e:b1:fe:f9:fe:b3:67:07:26:40:
ad:b6:d5:b1:43:82:3f:5c:a6:df:02:55:a8:d6:7a:
b5:e9:af:26:12:1e:17:6b:ad:5e:78:f7:ac:fd:f9:
ff:83:b7:65:0a:33:f2:c6:00:e0:ca:1d:fb:28:c9:
bb:39:d4:cf:ad:40:7e:f1:14:3b:fb:2d:b2:22:4b:
91:a9:8f:4b:30:67:d2:5e:a3:3d:9a:70:74:f8:71:
fc:7b:95:22:2b:30:0f:af:1e:a0:46:fc:e3:a7:13:
91:71:99:ed:74:d1:82:5f:8f:a1:aa:1f:73:cd:36:
6f:ac:e2:ad:3c:01:c0:85:8d:bb:33:9d:06:38:cb:
f6:76:09:bf:5a:bf:cb:02:35:60:1c:84:94:fd:e5:
3e:d3:95:8b:54:96:36:59:ce:96:84:ba:45:5d:c4:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:39:CC:69:71:9A:D0:64:A7:83:95:17:71:86:45:F7:75:02:70
X509v3 Authority Key Identifier:
keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0d:d4:cf:f3:75:bc:fb:98:ef:a2:52:54:ac:a8:7f:05:7c:
25:75:70:12:e1:30:1f:8b:cd:e1:76:32:79:36:07:79:7a:6a:
06:f5:ed:b3:6b:e9:a9:ce:d9:c7:70:64:33:f2:4e:d5:bd:9f:
b3:98:b5:d7:5f:d7:1a:41:2f:10:c6:af:04:d1:0e:98:f7:5d:
93:07:4a:41:f5:46:ff:73:1a:7c:6d:b4:77:e6:13:a9:6c:f0:
30:e7:30:3f:3d:76:22:03:c5:4b:4c:35:69:0e:40:4b:a4:ac:
2f:d3:b3:60:d6:5c:10:5d:d0:24:9b:d5:aa:38:ac:34:2f:e3:
1d:c1:50:28:80:99:c5:52:2b:68:30:25:bc:0c:c5:af:6c:fa:
7d:74:2d:fa:c1:e2:cd:a0:e5:1b:f7:ab:43:ea:82:94:93:37:
32:3b:56:af:5f:93:2a:8d:50:b4:87:c4:3b:9a:e6:4a:dc:dd:
38:3d:34:fc:28:3c:b5:5a:8d:f0:45:2e:e1:a9:3f:1a:69:6f:
18:fc:73:3f:fc:de:28:02:cf:d2:be:ca:fb:a1:85:61:e9:a3:
84:1f:be:17:5c:d4:a3:50:44:0e:09:59:ca:31:3e:43:b8:94:
f4:a8:95:9d:c0:2b:11:63:fa:78:4d:94:00:20:07:00:f6:67:
01:2f:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 13:01:39 2023 by rpki-client on console-fra.rpki-client.org