Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.mft
File: XJ8BmFo_QQ-SNw1mAKFO54OwROk.mft (raw, json)
Hash identifier: dWW1PvsXBBjesnQAYaDeGadsQjOT7h/ZPmobiTwnQE4=
Subject key identifier: 27:F8:A3:C1:E3:33:B7:7C:FD:EF:0F:E5:6A:6A:46:E9:AF:E4:B2:34
Authority key identifier: 5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
Certificate issuer: /CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Certificate serial: 01893D4EDE9FB9D9B3367D6A29C94B103504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.mft
Manifest number: 0847
Signing time: Mon 10 Jul 2023 00:58:46 +0000
Manifest this update: Mon 10 Jul 2023 00:58:46 +0000
Manifest next update: Tue 11 Jul 2023 00:58:46 +0000
Files and hashes: 1: 2uzectWSfr_L-FRbTP9BDTiyENE.roa (hash: BfsA8X8OddqzIPXNH0dSCyb8OMTXpOiu7Hl2n2K2c68=)
2: K9Fb6Pn1AHpGxh2AZw7cQ7hwTqI.roa (hash: VCxgcx/ZYF4zNLJnfglNTlLIzeWeHT96SqRsakuMnqQ=)
3: XJ8BmFo_QQ-SNw1mAKFO54OwROk.crl (hash: cQ64ShCCw0ko4WJ2teE8leVGadxBGmrdBcWPXbjp9bE=)
4: wZFu4QpysnhwXmeOGUITyXMUwX0.roa (hash: QOtxU6F9cIhkUWQCjXiJMqMs2KZKsa3NYqiwbesvoyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3d:4e:de:9f:b9:d9:b3:36:7d:6a:29:c9:4b:10:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Validity
Not Before: Jul 10 00:58:46 2023 GMT
Not After : Jul 11 00:58:46 2023 GMT
Subject: CN=27f8a3c1e333b77cfdef0fe56a6a46e9afe4b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:e1:ff:19:f1:9d:0f:22:03:06:a0:d9:d7:
f2:fd:b1:2d:90:ee:b3:e1:c3:e8:a9:c7:3f:8e:b7:
bc:22:da:41:da:b9:4d:db:5c:60:1d:c4:31:c4:b3:
0b:d1:15:9e:60:72:19:23:06:10:ac:4b:b4:71:b3:
6f:4d:7f:5a:0d:83:de:ce:63:d8:f3:ab:1a:44:cd:
9e:d5:5e:d7:cb:42:f5:f4:c8:11:dd:6a:d3:b2:2b:
78:67:99:27:93:57:59:75:32:ee:dd:63:79:e0:d2:
72:46:15:df:20:67:c9:6f:92:78:4c:6d:bc:8b:c6:
d7:75:05:87:9f:49:46:fd:1b:50:8d:ac:be:1a:d9:
e4:08:67:c2:de:93:56:cd:a5:ba:89:91:6c:37:82:
50:57:23:a6:9c:60:3e:35:db:d2:bd:e6:42:92:70:
35:dc:82:f5:eb:0d:aa:6b:0d:c9:c1:06:58:a0:7d:
0d:3f:22:83:1d:8d:0b:77:48:1d:85:83:c3:3e:d8:
20:ec:6a:57:5a:c7:d9:14:19:88:2a:e3:a2:b6:cb:
d2:a4:cb:fe:9f:36:5b:f7:0f:d4:b6:56:a4:7c:09:
13:aa:68:e1:bc:cf:ff:be:6b:39:e6:12:75:d5:81:
8a:ce:a6:9c:c4:36:4d:4e:41:31:15:ba:37:23:d9:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F8:A3:C1:E3:33:B7:7C:FD:EF:0F:E5:6A:6A:46:E9:AF:E4:B2:34
X509v3 Authority Key Identifier:
keyid:5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:18:42:0e:ff:53:83:ee:5b:ce:25:52:04:7f:0a:bb:d7:
ba:48:d9:ff:3c:28:15:85:b1:9a:f3:a6:b9:72:a0:e1:b8:64:
52:8c:16:5b:af:f3:73:aa:b4:c8:96:f3:ea:0b:ce:93:e8:8a:
b7:98:b5:3e:0e:26:f2:11:9e:a0:e2:4a:1f:2a:52:18:15:3e:
85:06:85:ad:37:7c:1a:b6:2c:7f:26:e0:f5:31:67:28:88:fc:
63:c1:08:eb:35:ab:01:3d:10:6c:4f:ff:22:3c:3a:25:37:e8:
bd:18:69:4b:36:1f:54:6f:a8:4c:ab:22:e9:9f:81:7b:ad:17:
af:6c:21:c7:fc:2b:a6:fb:28:04:d6:84:3b:23:58:23:42:5e:
12:38:34:43:01:1e:d6:05:66:6d:31:80:71:f9:93:24:42:17:
02:d1:60:40:e7:ab:33:4e:70:58:9b:1e:c1:16:45:6a:8a:de:
0f:4f:54:9b:51:01:8b:e6:f6:4c:3c:ec:b9:9a:d3:58:4e:f8:
fc:c2:2f:a3:38:c8:06:ea:20:b3:9c:4a:f3:e5:d9:32:c5:22:
02:7a:5d:9d:7e:f1:85:4b:31:2b:3a:00:40:10:f3:77:ca:61:
52:1d:8e:ac:63:aa:f4:40:ad:c4:1f:7f:93:ad:e7:8f:56:74:
a3:ef:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:11 2025 by rpki-client