Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/XhtD1aI4u6cm_uUF5YTae5tdV2o.mft
File: XhtD1aI4u6cm_uUF5YTae5tdV2o.mft (raw, json)
Hash identifier: XnWe7IYKfA32pV14K46ZhrIKsImcv3sYmLea38zPu3s=
Subject key identifier: 83:CA:87:46:59:41:E8:30:C7:C3:26:FA:9E:DF:77:A9:2B:2B:22:77
Authority key identifier: 5E:1B:43:D5:A2:38:BB:A7:26:FE:E5:05:E5:84:DA:7B:9B:5D:57:6A
Certificate issuer: /CN=5e1b43d5a238bba726fee505e584da7b9b5d576a
Certificate serial: 0184F0ABB31B8540AB859B6F87291FA7741A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhtD1aI4u6cm_uUF5YTae5tdV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/XhtD1aI4u6cm_uUF5YTae5tdV2o.mft
Manifest number: 01DB
Signing time: Thu 08 Dec 2022 07:38:14 +0000
Manifest this update: Thu 08 Dec 2022 07:38:14 +0000
Manifest next update: Fri 09 Dec 2022 07:38:14 +0000
Files and hashes: 1: E9xp2aoH3K7X6SREZ9vv42UHfy0.roa (hash: vWpGgmZrVjRBKxfD/C8tGxw+SDcJUfDh7685+kxparQ=)
2: XhtD1aI4u6cm_uUF5YTae5tdV2o.crl (hash: SSl9ePKu/rbxx8VN5v9nNXl5SHJGhToAEOPAddyDfF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:ab:b3:1b:85:40:ab:85:9b:6f:87:29:1f:a7:74:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1b43d5a238bba726fee505e584da7b9b5d576a
Validity
Not Before: Dec 8 07:38:14 2022 GMT
Not After : Dec 9 07:38:14 2022 GMT
Subject: CN=83ca87465941e830c7c326fa9edf77a92b2b2277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:e5:35:56:0c:8c:dc:9c:09:d2:61:e1:6f:
e9:6f:e0:2f:1c:0d:2b:93:9e:cf:63:8f:94:87:5d:
cd:b4:d0:17:97:87:60:72:97:1f:14:2a:91:fa:d8:
8f:4e:33:bc:d5:57:72:48:32:47:cc:5b:54:b5:1a:
ce:68:49:c7:24:12:1d:81:8d:7e:34:74:64:78:6d:
ca:a9:50:91:76:cc:2f:d3:fd:83:5b:b1:4f:42:c2:
19:9f:92:45:e1:4f:a0:ee:e0:f3:02:fe:4e:e8:8a:
6c:1c:72:dc:3d:74:bf:4b:0c:96:66:93:4d:98:db:
d0:2e:e3:57:48:8e:65:44:3f:24:0e:dc:57:4c:ca:
c3:76:9b:e4:9b:a5:93:1b:62:07:95:00:04:2a:e0:
ff:cf:29:43:69:73:21:3c:91:0d:2a:42:38:90:53:
a6:66:43:34:89:bd:f2:c9:63:b9:77:4d:a9:3a:c9:
87:a8:90:7d:a3:13:a2:18:07:a4:0f:1d:c0:ae:fd:
f3:95:d2:8a:e0:32:04:5f:11:ad:10:6b:bc:b0:c9:
b6:15:06:88:34:74:84:22:75:c4:d0:21:4f:67:42:
a8:3d:ce:ac:e6:b3:48:cf:bc:ea:3e:7d:62:e1:50:
5e:61:7f:8f:3a:54:b1:5e:bc:96:2f:2a:f3:66:f1:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:87:46:59:41:E8:30:C7:C3:26:FA:9E:DF:77:A9:2B:2B:22:77
X509v3 Authority Key Identifier:
keyid:5E:1B:43:D5:A2:38:BB:A7:26:FE:E5:05:E5:84:DA:7B:9B:5D:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhtD1aI4u6cm_uUF5YTae5tdV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/XhtD1aI4u6cm_uUF5YTae5tdV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/XhtD1aI4u6cm_uUF5YTae5tdV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d2:14:d2:b1:95:1a:da:6e:77:e9:a3:b5:99:1a:c9:3a:9d:
89:5c:14:a5:0d:ef:3f:b8:e8:15:9b:1a:4d:34:e8:bc:c2:40:
dc:3b:a8:a2:cd:55:58:8c:82:76:74:d9:96:66:df:8e:c0:c6:
02:ee:2f:b6:79:77:d2:77:dd:f1:05:e1:ad:28:bb:2a:60:83:
90:8c:6f:b9:41:ac:f7:d7:30:df:99:28:36:95:f4:94:a6:70:
2e:e0:f5:60:96:08:65:79:6a:53:22:01:b6:bd:ad:c7:32:40:
5f:e7:c0:53:82:4d:4c:8e:93:9f:8d:be:98:1c:dd:d7:a7:a3:
04:3d:86:e3:cd:3a:99:be:50:89:6d:04:7c:cb:d0:e0:12:40:
7f:b2:ed:1b:b1:5e:18:c3:30:32:e6:2c:c6:78:d9:db:d7:e8:
14:a9:2c:8e:10:f9:57:7a:f7:fb:97:4c:15:cb:28:93:ee:55:
aa:18:ab:ab:13:c4:59:ba:0e:65:1c:a0:cc:cd:08:5b:b1:c5:
79:1d:44:06:b2:56:e3:ca:37:0b:5c:69:5e:bf:68:d2:f8:d7:
d7:43:5f:ba:56:50:83:45:2c:fe:1a:ac:5e:f6:18:eb:02:98:
7c:b9:19:60:8d:a5:3b:8c:bc:39:8f:ee:f5:e1:90:bb:ed:43:
d6:3d:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:49 2025 by rpki-client