Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.mft
File: XZBhF8rXyBFOpkhbaCuSByVJyi0.mft (raw, json)
Hash identifier: 2M+Kqxug6AB0/shkuatJJ6pB9naRn+GoR5dxATlfjm0=
Subject key identifier: B0:2F:AA:D0:F8:36:65:8C:69:DB:10:1F:7C:B6:57:CE:DC:1E:43:DE
Authority key identifier: 5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
Certificate issuer: /CN=5d906117cad7c8114ea6485b682b92072549ca2d
Certificate serial: 018BB3BE60B978F960271C0FF9DB6F9B600E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.mft
Manifest number: 0894
Signing time: Thu 09 Nov 2023 11:01:20 +0000
Manifest this update: Thu 09 Nov 2023 11:01:20 +0000
Manifest next update: Fri 10 Nov 2023 11:01:20 +0000
Files and hashes: 1: XZBhF8rXyBFOpkhbaCuSByVJyi0.crl (hash: +7JgbIKHLnumAGHIsTpims2XNRojn29eavIiLZWFG5w=)
2: ZoIQAqoNffBdcbBsiYExLv3XFoo.roa (hash: IWowM9/paxcQe1Vuqt4bIil1tW8OX17ucIBeL7hgb08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:be:60:b9:78:f9:60:27:1c:0f:f9:db:6f:9b:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d906117cad7c8114ea6485b682b92072549ca2d
Validity
Not Before: Nov 9 11:01:20 2023 GMT
Not After : Nov 10 11:01:20 2023 GMT
Subject: CN=b02faad0f836658c69db101f7cb657cedc1e43de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:0c:8f:27:33:89:73:48:fd:06:cd:da:36:
d2:3e:5a:2b:c9:98:66:0f:90:5c:b2:79:d4:24:d2:
00:52:5e:3a:5d:57:2c:b3:f2:31:bb:1f:e1:16:21:
ec:63:45:65:9e:a9:5a:50:50:a5:2f:86:02:2d:d8:
52:de:58:d8:36:81:0c:78:31:7e:82:6a:83:e6:0a:
31:b8:b8:9d:08:47:16:e5:18:9a:8c:00:d9:18:ee:
bf:6b:c4:11:55:0f:1e:09:8d:83:0b:61:21:ae:9d:
d7:79:ae:c4:72:64:2c:67:08:e6:ea:0a:2b:7c:c4:
dc:02:ab:40:86:b2:78:00:26:83:00:62:cc:98:44:
93:ee:77:3f:e9:42:56:1f:c4:2a:f1:34:58:04:94:
0e:0c:4b:41:22:02:4f:d5:9f:5f:44:74:b0:7f:2f:
fc:c6:20:dc:b6:d4:74:1b:54:02:f3:79:d1:32:82:
e1:53:4f:1e:2e:b9:4b:38:3e:d2:80:f9:c6:e3:f3:
6d:b9:9b:9b:78:5e:d6:1d:4f:ef:5d:15:5f:09:8e:
4a:66:bf:d6:f1:96:c9:39:cd:63:b1:64:8b:b2:8b:
fe:96:4f:81:40:f1:1b:6b:4a:e6:02:c5:13:28:59:
55:5c:4e:01:1a:45:5d:b6:ea:45:0e:29:bc:63:17:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:AA:D0:F8:36:65:8C:69:DB:10:1F:7C:B6:57:CE:DC:1E:43:DE
X509v3 Authority Key Identifier:
keyid:5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:74:cc:a5:b0:88:77:63:02:4d:b4:dd:42:3b:a5:03:b6:
08:11:9e:81:21:40:c9:3d:20:0d:9e:af:6d:e9:52:c0:c7:c3:
b2:07:fc:49:39:9b:9b:c3:58:61:8e:da:8d:f0:8e:85:cf:64:
de:54:f3:22:b0:4e:08:89:13:bd:06:88:ba:71:4a:58:ce:41:
d3:0f:68:88:a7:1c:c6:c0:81:b1:31:33:61:80:16:dd:aa:f8:
1a:9d:06:58:4e:26:80:8f:b2:84:39:cd:38:64:70:e2:27:6b:
16:96:25:da:f0:c2:45:07:d6:75:d3:78:f2:25:db:5f:94:b6:
27:b4:d6:a3:78:4b:3e:aa:70:4c:15:c5:52:34:04:4a:7d:94:
b1:f3:e1:16:d1:1a:8c:cc:48:c8:0f:11:d3:d1:3f:ca:c2:61:
a1:d6:8e:bc:98:22:84:b6:6a:15:0a:a4:9d:80:16:c5:95:ee:
c0:cc:a9:6e:58:b8:ae:9e:f5:da:01:97:e1:32:07:70:ee:d0:
78:09:85:ea:21:b6:83:09:fb:23:1d:fb:6c:3a:78:bc:86:bb:
c8:67:d7:a1:f0:9a:aa:fd:b2:1e:55:b5:04:95:0b:f4:e8:25:
c6:0a:a3:af:f7:c0:d8:8f:e5:27:01:30:67:de:0d:d1:bf:df:
9f:b6:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:32 2024 by rpki-client on console-ams.rpki-client.org