Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/56c214-2041-4296-80c4-22cf1ca982b4/1/XOSzlU0sbOVoIFK1NNVf7bfylz4.mft
File: XOSzlU0sbOVoIFK1NNVf7bfylz4.mft (raw, json)
Hash identifier: RxH6yDNC1Iyr5pE9gAgC+0EIsRaO0bLTKjZQVQdo/Fw=
Subject key identifier: FA:52:F4:DF:AB:17:52:AA:F4:7B:3B:74:6A:8C:1F:D3:D7:89:61:C2
Authority key identifier: 5C:E4:B3:95:4D:2C:6C:E5:68:20:52:B5:34:D5:5F:ED:B7:F2:97:3E
Certificate issuer: /CN=5ce4b3954d2c6ce5682052b534d55fedb7f2973e
Certificate serial: 0184BDC076CDC466CB167C49411E71067D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOSzlU0sbOVoIFK1NNVf7bfylz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/56c214-2041-4296-80c4-22cf1ca982b4/1/XOSzlU0sbOVoIFK1NNVf7bfylz4.mft
Manifest number: 04E0
Signing time: Mon 28 Nov 2022 10:20:17 +0000
Manifest this update: Mon 28 Nov 2022 10:20:17 +0000
Manifest next update: Tue 29 Nov 2022 10:20:17 +0000
Files and hashes: 1: XOSzlU0sbOVoIFK1NNVf7bfylz4.crl (hash: G2z54lcDoPQGx+6F7T7OdZbl5Q0SPtgwrSpicUQUhLM=)
2: u9E48-vRNvLko4sPiku6M9tCz58.roa (hash: S3SpfIjTBhm3do7qPtQtN2uRKvrUY0wZszk4tnLRJyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:c0:76:cd:c4:66:cb:16:7c:49:41:1e:71:06:7d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce4b3954d2c6ce5682052b534d55fedb7f2973e
Validity
Not Before: Nov 28 10:20:17 2022 GMT
Not After : Nov 29 10:20:17 2022 GMT
Subject: CN=fa52f4dfab1752aaf47b3b746a8c1fd3d78961c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:6d:29:2a:53:5d:78:21:26:e4:22:e7:27:
97:e2:fa:31:67:b5:72:28:ad:f6:6d:5e:6b:0f:2c:
ab:4a:36:58:ab:77:8e:08:17:91:81:c1:a4:6c:b0:
4f:57:02:f5:e2:93:8f:d2:d2:5b:a7:8a:44:3c:32:
7f:8f:33:6d:8e:ef:95:bf:f2:3c:a1:98:24:92:d1:
2a:9e:f0:27:31:45:6e:09:c8:41:ca:63:6f:b0:19:
86:19:cc:54:da:dc:20:be:ad:a1:e2:95:72:17:ff:
c5:ff:c6:68:3d:ac:52:58:6c:98:9d:ec:a8:27:80:
4e:13:fb:d3:64:1b:ee:cb:77:fe:a4:13:ec:18:6b:
70:c2:89:71:66:63:70:c5:ef:e1:9f:78:5d:6e:57:
91:05:d7:b2:8d:10:57:88:08:00:d4:24:c9:0a:0a:
59:73:9d:a6:fc:ca:e7:ee:79:eb:76:72:0c:d8:5f:
c7:58:57:f0:45:01:e2:8b:a6:ee:24:1a:34:39:1e:
d9:38:b5:e3:fe:0c:39:9f:cf:7f:40:88:9e:63:c8:
11:63:d5:dc:bb:a2:b8:a6:9b:1d:af:8e:0d:11:c4:
c6:40:d4:87:26:dd:c5:b6:fb:95:e8:0d:87:28:e5:
2c:73:34:73:c5:df:cd:0d:6c:74:8c:89:e8:f9:c1:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:52:F4:DF:AB:17:52:AA:F4:7B:3B:74:6A:8C:1F:D3:D7:89:61:C2
X509v3 Authority Key Identifier:
keyid:5C:E4:B3:95:4D:2C:6C:E5:68:20:52:B5:34:D5:5F:ED:B7:F2:97:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOSzlU0sbOVoIFK1NNVf7bfylz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/56c214-2041-4296-80c4-22cf1ca982b4/1/XOSzlU0sbOVoIFK1NNVf7bfylz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/56c214-2041-4296-80c4-22cf1ca982b4/1/XOSzlU0sbOVoIFK1NNVf7bfylz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:16:49:fb:7f:84:a7:22:c3:90:74:de:0e:b8:cc:65:28:
5b:fd:13:bc:b4:32:1e:7c:8b:6d:2f:89:00:e1:1b:58:8a:48:
15:1e:5e:75:2b:0e:ce:88:37:01:7c:d1:1e:2d:87:3d:ea:4c:
e5:77:cf:35:33:3a:83:ff:ef:66:f1:a3:14:7f:1b:e4:e6:ed:
8d:2b:f4:86:39:2c:f2:48:29:61:be:33:ef:4c:78:70:a8:2e:
91:26:66:4d:a3:96:ca:94:6e:d9:d1:42:13:35:13:82:bc:8e:
5d:0f:97:f1:61:4f:e1:86:5a:82:73:07:7f:7e:c7:53:29:a9:
d4:e1:39:0d:cb:32:4a:04:c6:dc:0e:86:92:7b:3c:a2:26:9b:
45:22:a6:ac:fc:ce:f7:8b:a2:96:ee:fe:62:ce:d9:c9:cf:6a:
8d:a0:0f:09:22:38:42:62:1d:92:03:fe:5a:2b:e7:77:f2:cc:
64:13:a0:f2:da:37:d3:c3:21:b7:1e:63:8c:f0:97:2f:71:0b:
73:d4:21:47:87:3c:dc:e3:cd:72:4d:d1:6b:46:05:40:81:9a:
91:e9:bb:4e:37:8b:29:44:a0:f5:5c:84:3d:c6:57:42:26:20:
d6:4c:09:04:60:20:f7:8e:29:6a:c8:2f:36:bc:4c:0c:10:dc:
e7:73:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:07 2025 by rpki-client