Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/XZDBy5AErwhTkzY8-AJRgDVvrZ4.mft
File: XZDBy5AErwhTkzY8-AJRgDVvrZ4.mft (raw, json)
Hash identifier: QBGq+u63Zx0pvjAD6l5p4PrWiHYoA35OttrTun0twOg=
Subject key identifier: 05:75:E3:04:9F:ED:23:28:37:A0:98:2E:73:E0:E0:A0:79:81:0C:02
Authority key identifier: 5D:90:C1:CB:90:04:AF:08:53:93:36:3C:F8:02:51:80:35:6F:AD:9E
Certificate issuer: /CN=5d90c1cb9004af085393363cf8025180356fad9e
Certificate serial: 018BF00A11C199AFFB6774C9BDA1E7F794C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZDBy5AErwhTkzY8-AJRgDVvrZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/XZDBy5AErwhTkzY8-AJRgDVvrZ4.mft
Manifest number: 0895
Signing time: Tue 21 Nov 2023 04:01:13 +0000
Manifest this update: Tue 21 Nov 2023 04:01:13 +0000
Manifest next update: Wed 22 Nov 2023 04:01:13 +0000
Files and hashes: 1: DyVyCEFBxJLYyRvM7XsX4dBdsLU.roa (hash: lVUYTgdNXwjZ+ZTF3d4kS4LTgcKMEbkMijY/zgpSPUI=)
2: XZDBy5AErwhTkzY8-AJRgDVvrZ4.crl (hash: VdMac3e4TbTdg6Ew66JScAfNppGSFtTjns/bhAn+V6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:0a:11:c1:99:af:fb:67:74:c9:bd:a1:e7:f7:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d90c1cb9004af085393363cf8025180356fad9e
Validity
Not Before: Nov 21 04:01:13 2023 GMT
Not After : Nov 22 04:01:13 2023 GMT
Subject: CN=0575e3049fed232837a0982e73e0e0a079810c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:88:6e:39:7f:e8:f9:75:ca:91:9f:d6:05:
9b:de:90:46:bd:5f:00:33:5f:aa:33:13:f3:06:aa:
bf:50:8b:c3:ef:88:a8:75:b2:fa:e2:2c:2b:e8:ae:
6b:59:fc:1d:65:43:c9:50:70:0f:1a:8e:f0:a0:00:
42:d6:3d:0c:a0:45:58:f1:3e:64:cd:b1:f7:1a:f0:
8c:f8:ff:27:f9:8a:be:19:c0:66:d1:4e:e9:2e:fa:
f1:07:5b:e3:b1:a0:07:43:2f:fb:82:67:a7:6c:b1:
4a:69:7b:d5:e1:42:c4:ee:82:19:db:df:ba:d1:59:
94:81:a9:6e:f4:05:ee:89:2b:0a:20:c7:0c:a3:49:
90:02:ae:2d:59:a6:48:30:cb:ca:cf:44:25:47:e2:
07:7d:c4:93:a9:bf:3f:36:61:f0:7c:0b:de:c9:d1:
e7:38:9a:78:7a:34:d6:bc:59:26:15:fd:38:cb:cc:
5b:a7:79:ab:84:99:6c:44:59:5c:ee:8a:b8:0c:c0:
e2:eb:01:49:6b:c1:8e:bb:fb:dc:06:07:73:b2:53:
89:5a:0b:fa:5f:2d:cc:12:80:e9:c4:05:d1:27:77:
8c:44:84:11:60:95:77:a0:97:33:2a:31:89:7f:28:
49:ea:fe:bb:20:ce:c9:0f:b3:96:0b:da:a3:4d:53:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:E3:04:9F:ED:23:28:37:A0:98:2E:73:E0:E0:A0:79:81:0C:02
X509v3 Authority Key Identifier:
keyid:5D:90:C1:CB:90:04:AF:08:53:93:36:3C:F8:02:51:80:35:6F:AD:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZDBy5AErwhTkzY8-AJRgDVvrZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/XZDBy5AErwhTkzY8-AJRgDVvrZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f4d2d6-1d9e-4787-b978-38f3922ed114/1/XZDBy5AErwhTkzY8-AJRgDVvrZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:69:b6:9a:37:c0:d5:d9:a2:5e:ea:19:fc:7a:4f:a9:17:19:
9a:3b:c0:be:94:59:0d:1e:e9:f2:c2:33:2c:9e:6f:39:85:e1:
1f:0f:d4:19:ff:2a:56:b1:35:48:47:7d:bb:45:49:d8:0d:53:
c5:e0:59:12:74:ae:f5:e1:4c:9b:05:6c:4c:81:c9:e2:eb:8f:
58:ac:78:ea:9c:08:0b:a7:92:b6:0b:0d:e7:ca:07:23:4c:6b:
6d:35:f4:6e:9a:2a:50:f8:69:e7:91:af:27:1b:08:8c:da:bf:
a8:19:bb:11:d3:2e:53:02:77:63:d7:41:82:e2:7b:ba:fa:55:
44:54:4f:d8:e5:e9:ec:01:69:17:f0:3f:a8:e6:08:de:80:b8:
64:76:6c:f9:b9:ac:f0:e8:12:a9:2f:6a:64:22:e2:0a:bd:e9:
45:ac:d2:38:c3:70:5f:67:7d:af:82:87:07:0e:86:0b:c1:51:
9f:f1:cf:62:cc:ff:37:6a:ad:8a:38:f7:8e:41:c4:2b:f0:91:
32:28:76:2d:1c:0a:6e:ce:6a:e0:3b:35:fe:f3:9e:d4:97:25:
03:f4:d7:e7:e8:36:d4:16:f1:a3:8a:c8:e4:71:66:9c:d3:50:
33:17:66:cb:dc:bc:dd:b3:c3:06:19:00:a4:c6:2c:76:9b:a3:
55:ee:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:58 2025 by rpki-client