Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.mft
File: xGOEhedcTYo2AYyjbXiTIRBIYSc.mft (raw, json)
Hash identifier: LkTkWv2DAyZDwx9hkPEHWXhrSrjmKePBvS8Nve3FDDQ=
Subject key identifier: 41:42:D3:56:98:5B:FD:1B:30:15:FB:8A:75:D6:4B:8C:3C:76:09:69
Authority key identifier: C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
Certificate issuer: /CN=c4638485e75c4d8a36018ca36d78932110486127
Certificate serial: 0182C9A9BBAABD45D3D1D9C55F99637B6FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGOEhedcTYo2AYyjbXiTIRBIYSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.mft
Manifest number: 0936
Signing time: Tue 23 Aug 2022 07:45:19 +0000
Manifest this update: Tue 23 Aug 2022 07:45:19 +0000
Manifest next update: Wed 24 Aug 2022 07:45:19 +0000
Files and hashes: 1: 2kEetgke8asJUIGjfrkZ-Ow0hLY.roa (hash: Zm68tOecJDyU3dvZDmsOuKad33NnfWTI0Gv1J65logY=)
2: dYEjSfrle7Gwp1DMRxwJLehoxqE.roa (hash: T1+6iVTAnzKClDfTnkaL2Lh+zhV2S+187oMwKS45hNI=)
3: xGOEhedcTYo2AYyjbXiTIRBIYSc.crl (hash: V1tiOV4FWEWhBfxyOhnRM8YRqddKIDUDEe6fLmSCHoU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:a9:bb:aa:bd:45:d3:d1:d9:c5:5f:99:63:7b:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4638485e75c4d8a36018ca36d78932110486127
Validity
Not Before: Aug 23 07:45:19 2022 GMT
Not After : Aug 24 07:45:19 2022 GMT
Subject: CN=4142d356985bfd1b3015fb8a75d64b8c3c760969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bf:be:81:5b:f2:39:d3:66:ea:2e:c5:b1:7a:
f8:ac:52:69:09:74:e1:dc:ad:72:37:10:35:3b:ea:
57:e9:2f:1f:76:5d:f5:b9:18:14:ab:df:6a:a9:87:
b6:b4:75:80:39:f9:bb:75:0b:9f:fd:49:11:65:e1:
f7:9d:7b:22:50:10:44:96:a1:ea:b0:eb:e6:4a:7c:
36:18:eb:6e:17:a9:45:23:28:89:9b:1f:77:40:f3:
09:ea:46:eb:a9:b9:b4:65:09:1e:8f:94:ca:7e:7e:
38:40:c9:e7:11:0b:c0:6e:c5:be:b7:ae:19:0a:2d:
a4:e2:2d:6f:ca:4c:8f:1e:9b:50:3b:44:29:30:5f:
a6:47:fa:1f:ff:9a:c4:e2:0e:c3:6d:f9:36:4a:48:
e5:6b:43:98:65:be:a7:c4:da:13:2e:ca:36:86:4c:
aa:c0:4f:5c:a0:03:6d:9a:26:66:13:d4:45:54:85:
d2:f9:59:25:d4:27:d9:79:04:b0:34:32:6b:d7:b7:
cc:db:62:b7:9c:16:c7:10:64:30:94:5a:25:3f:3e:
55:68:44:7d:88:b0:47:47:91:eb:63:5f:aa:cb:0e:
d4:86:2a:71:42:3d:ac:3c:30:39:53:58:ab:e1:63:
ab:bd:eb:2d:4b:b4:73:a7:9a:b1:13:87:b6:92:7f:
82:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:D3:56:98:5B:FD:1B:30:15:FB:8A:75:D6:4B:8C:3C:76:09:69
X509v3 Authority Key Identifier:
keyid:C4:63:84:85:E7:5C:4D:8A:36:01:8C:A3:6D:78:93:21:10:48:61:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGOEhedcTYo2AYyjbXiTIRBIYSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/4c1b8b-aa6b-4eb1-b913-605341a393c3/1/xGOEhedcTYo2AYyjbXiTIRBIYSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2b:9e:4e:8d:de:8d:75:5d:7d:03:b3:96:30:68:49:66:a1:
ef:fa:af:c6:73:8c:af:ee:d0:fb:37:cb:e4:ea:3b:73:c0:15:
3d:12:07:ee:21:55:6c:2c:60:b5:f1:d1:d1:ab:d2:4a:3f:3a:
04:b7:bd:7f:13:89:2c:c5:b9:da:25:b0:38:fe:10:d4:64:32:
f8:ec:02:8d:7b:ee:eb:61:05:96:3f:31:85:2c:ab:5d:47:92:
9a:65:4d:41:97:e4:0c:b1:18:5c:39:3a:e2:09:88:65:f1:ce:
91:a5:ad:2b:25:83:96:89:b4:48:28:ae:72:f4:ca:73:5a:0b:
49:5f:63:eb:bb:48:6e:14:e3:b4:a4:6c:e7:63:27:d0:c2:be:
45:9f:09:c9:ca:73:58:1a:f1:df:f4:6d:f1:1a:e5:80:4a:3d:
3b:d4:6a:ed:93:05:8b:b7:a0:fd:a0:4c:c6:3c:c1:e4:90:85:
29:10:a9:ab:6d:75:16:70:16:4d:6c:47:14:af:87:16:1c:16:
c7:2d:bb:c5:6c:43:ab:c7:88:bd:6f:c7:ef:f8:e6:9e:f2:7e:
d1:18:ca:1a:df:14:3c:b7:24:75:17:0e:94:50:da:d6:6a:57:
7f:e0:cb:09:a6:bb:a9:7b:58:9e:33:99:3e:0b:6a:c6:1b:9c:
94:a5:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:31 2025 by rpki-client