Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/xaSi1LACOgq-9jdd_bO0nBtCJCY.mft
File: xaSi1LACOgq-9jdd_bO0nBtCJCY.mft (raw, json)
Hash identifier: 9tvWLD+U34/5TO5nvOgLwExq2rO++5oIxjrGN+BVc/I=
Subject key identifier: E5:9D:1D:11:49:B5:01:B9:2F:65:57:F9:C9:1A:28:85:05:B3:EF:1D
Authority key identifier: C5:A4:A2:D4:B0:02:3A:0A:BE:F6:37:5D:FD:B3:B4:9C:1B:42:24:26
Certificate issuer: /CN=c5a4a2d4b0023a0abef6375dfdb3b49c1b422426
Certificate serial: 018B89AF21BE6EC2B5A4B191A87ABFDB1E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaSi1LACOgq-9jdd_bO0nBtCJCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/xaSi1LACOgq-9jdd_bO0nBtCJCY.mft
Manifest number: 01F7
Signing time: Wed 01 Nov 2023 07:00:37 +0000
Manifest this update: Wed 01 Nov 2023 07:00:37 +0000
Manifest next update: Thu 02 Nov 2023 07:00:37 +0000
Files and hashes: 1: rhdUKwQ7sWFTOVcT1CGWVE7BPqI.roa (hash: KsaXslucjZ5c0DKoxHv9vwgZWKB1AJwoKAt9T2U+tBw=)
2: xaSi1LACOgq-9jdd_bO0nBtCJCY.crl (hash: CZLlsa06AyWZE1Hhc+Zf9NMpWsFX+E/aLhXTtrL7egc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:af:21:be:6e:c2:b5:a4:b1:91:a8:7a:bf:db:1e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a4a2d4b0023a0abef6375dfdb3b49c1b422426
Validity
Not Before: Nov 1 07:00:37 2023 GMT
Not After : Nov 2 07:00:37 2023 GMT
Subject: CN=e59d1d1149b501b92f6557f9c91a288505b3ef1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:5f:02:db:ce:53:94:2f:6f:52:82:86:9b:
f9:0b:78:6f:00:6d:f1:ee:fd:18:64:4e:41:01:d9:
71:bd:bd:f2:bc:c9:3d:af:27:e5:c0:b2:e4:d2:a1:
b5:fc:88:41:31:5a:42:89:b7:f1:01:3f:6e:48:34:
4e:6b:07:66:19:11:4a:44:67:ac:16:85:3f:cb:88:
11:a3:f1:01:3a:3c:22:1b:dd:81:ce:7e:a5:c0:cc:
77:4f:46:d7:ba:7b:a9:10:b0:3e:50:bc:85:9f:89:
b7:29:13:ca:22:19:f1:79:e2:93:9a:2b:56:13:61:
8f:5d:8f:e9:eb:77:03:88:72:42:3f:3b:2c:0b:35:
e1:60:54:93:e1:f4:60:23:5c:18:95:5e:40:98:87:
7b:96:a9:0e:96:7f:40:58:1c:dc:75:11:04:25:4f:
16:88:f5:ae:c9:c8:ef:dd:30:ff:40:5e:9d:1a:61:
ff:6f:e7:42:8d:87:83:7d:a8:7d:e5:7f:3a:e2:fd:
8c:30:88:03:a6:d2:05:2d:ab:f7:dd:85:14:9d:ee:
3b:2f:0d:ef:77:c3:d1:71:00:b0:7b:44:62:53:33:
4a:16:e2:ee:03:1e:86:6e:54:d6:75:93:6e:e9:e4:
11:4a:f5:e0:23:4d:14:86:2b:4d:bc:58:71:3e:91:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9D:1D:11:49:B5:01:B9:2F:65:57:F9:C9:1A:28:85:05:B3:EF:1D
X509v3 Authority Key Identifier:
keyid:C5:A4:A2:D4:B0:02:3A:0A:BE:F6:37:5D:FD:B3:B4:9C:1B:42:24:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaSi1LACOgq-9jdd_bO0nBtCJCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/xaSi1LACOgq-9jdd_bO0nBtCJCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e0326a-9bdb-4289-841b-47704e17d31c/1/xaSi1LACOgq-9jdd_bO0nBtCJCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:89:05:78:5b:e9:67:f9:e4:a8:63:73:5f:84:db:c8:ed:0f:
f5:55:fa:07:35:a0:8a:4d:48:06:c9:29:84:27:ad:67:e8:35:
eb:94:f4:f0:a1:8d:67:3c:93:32:ef:98:ac:c1:e2:6f:40:48:
98:b6:c4:31:63:f9:bc:48:a6:14:8b:da:5d:d5:23:ad:af:07:
e6:85:67:ff:7d:63:f5:7d:e6:12:33:e9:a8:a9:26:fb:3f:c8:
3b:bb:9b:fb:4a:28:db:0f:02:92:23:99:1a:b6:78:d5:0b:bc:
6e:d3:7f:d3:fe:50:e1:7a:af:58:db:ce:f3:d0:4a:0f:f1:3d:
f1:97:23:af:e9:52:6a:9e:b4:df:14:bb:19:8d:6b:62:19:90:
b6:c7:b0:93:5a:9f:55:0e:57:23:4b:2e:49:2a:02:87:23:1c:
f8:79:d5:f8:01:4b:f0:8d:23:df:05:44:81:41:28:7e:d4:89:
ee:e7:9d:c2:f4:15:70:ac:95:78:33:f1:90:97:2d:89:93:ec:
6f:7a:a0:e8:e8:91:b9:de:69:5d:6f:33:85:e4:65:9f:b5:26:
3f:6d:39:9e:51:cd:6f:fb:a5:88:dd:39:75:06:82:fa:4b:0f:
40:2d:28:51:60:b3:99:37:8a:a7:f8:72:87:32:2b:99:85:c0:
ec:c6:e6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:18 2025 by rpki-client