Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
File: XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft (raw, json)
Hash identifier: bRBCo9XYVJToRxtNP9S0wgm/fv5jbtYnkasjABAcCWc=
Subject key identifier: BE:C7:31:57:B9:E4:9F:89:65:8F:7D:7D:EB:4B:67:A4:42:3B:63:2B
Authority key identifier: 5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
Certificate issuer: /CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Certificate serial: 018BAE60E14340A5646D8D042E4CECFF402C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
Manifest number: 0866
Signing time: Wed 08 Nov 2023 10:01:06 +0000
Manifest this update: Wed 08 Nov 2023 10:01:06 +0000
Manifest next update: Thu 09 Nov 2023 10:01:06 +0000
Files and hashes: 1: XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl (hash: smPSA4DuCRKM0hsqS1vpDOrvxC9WdDaW8NaH4NAn7zA=)
2: oRbUu1bK3dbruG2tW5kHZrQ4dMY.roa (hash: ubcnA1GeF1FtZ2wuCUMGUZhaMTK7fCZ7FOIPhtihutw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:60:e1:43:40:a5:64:6d:8d:04:2e:4c:ec:ff:40:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Validity
Not Before: Nov 8 10:01:06 2023 GMT
Not After : Nov 9 10:01:06 2023 GMT
Subject: CN=bec73157b9e49f89658f7d7deb4b67a4423b632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:3e:c2:69:a8:2a:69:cb:13:d8:b6:a0:cb:
a5:0d:a9:c2:7f:22:3d:5c:d6:a0:1f:de:a2:34:a1:
97:64:85:df:4d:67:ba:78:e7:1f:0f:6f:13:e4:32:
72:5b:71:71:6c:23:17:4a:5b:3e:7e:d7:2a:ce:db:
6a:c6:ab:02:47:d4:b7:13:b3:9e:25:b0:ed:2a:73:
30:e9:66:c2:8e:20:0e:b5:42:23:87:04:b2:27:ad:
dc:4c:96:0f:ce:3e:ce:1b:9d:dd:d2:af:a1:c4:a3:
3a:72:1c:9e:ff:a2:2e:bf:93:95:6e:a1:4b:bc:63:
4c:80:f7:1f:1c:34:92:14:29:70:ee:2a:09:7e:fa:
46:87:54:4a:66:81:bd:24:16:23:e3:6b:c5:d3:d2:
5c:c6:94:aa:23:c4:ab:1f:47:80:6e:cc:b5:30:2e:
cc:07:25:42:c5:2c:27:8c:87:7c:d8:b0:82:9f:59:
e1:60:80:ea:c1:b6:34:3b:e5:1a:05:a5:d9:5b:54:
fb:f7:c4:b6:54:fd:8c:c1:19:7c:e2:da:df:cf:a8:
50:2f:25:7a:9f:15:65:62:43:72:a7:db:aa:20:3c:
1a:93:eb:00:fa:6c:76:3f:a9:66:99:ce:c5:e2:18:
2d:0f:5b:0b:60:29:a8:24:fb:fd:c5:3c:7b:59:9a:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:31:57:B9:E4:9F:89:65:8F:7D:7D:EB:4B:67:A4:42:3B:63:2B
X509v3 Authority Key Identifier:
keyid:5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c3:ed:b5:16:e2:ab:db:2e:11:27:06:6d:e2:e9:bc:ac:32:
75:25:e4:49:34:4b:a2:65:08:5c:67:65:4c:53:6b:f0:5f:e7:
64:67:10:b7:01:e7:be:a4:3b:68:a5:ce:ef:1b:73:4d:ff:88:
a8:1b:b0:f0:4d:ee:42:b8:4c:e5:0d:3e:76:4f:6e:cd:1f:64:
85:78:81:c6:bc:58:15:f2:39:5c:ac:d7:f7:23:70:09:75:5c:
2e:8d:9b:fb:16:ef:9b:47:bb:2d:6b:7e:3e:ee:8d:f5:08:e0:
f8:b0:a5:e3:d3:72:2d:e3:c0:4f:67:6e:fd:e8:5f:47:97:33:
60:09:14:18:d1:55:0b:fb:0c:64:91:44:a9:9a:35:df:57:7c:
0d:70:cc:06:be:7a:4b:5f:a8:86:e3:c8:9a:c2:96:7f:a5:29:
37:36:0c:22:f0:0a:88:4e:d5:05:57:7a:37:4c:f1:72:75:e0:
b8:29:d8:56:05:17:6d:7b:a7:34:33:3c:6f:4d:9e:22:d1:75:
f7:44:cf:36:fe:7b:63:12:6b:b9:fc:a5:b6:17:4e:c7:bd:d5:
9b:54:6b:e3:de:fb:27:09:87:82:8d:00:73:85:ba:d9:b8:9d:
bd:45:f8:e5:c9:77:d4:3b:9a:01:fb:bc:2d:21:6b:ec:2f:9c:
d0:a3:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:40 2025 by rpki-client