Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/xbpa_ZUDqVnAIiMFjb2YivK4hnc.mft
File: xbpa_ZUDqVnAIiMFjb2YivK4hnc.mft (raw, json)
Hash identifier: WUGl08L66SWkrOtBQYF9UcNN3nIrmAYgfcU9EUR4/IY=
Subject key identifier: F5:96:93:8D:EF:1F:EF:9D:A7:1E:BE:3C:DF:EC:DA:4A:4D:17:BF:54
Authority key identifier: C5:BA:5A:FD:95:03:A9:59:C0:22:23:05:8D:BD:98:8A:F2:B8:86:77
Certificate issuer: /CN=c5ba5afd9503a959c02223058dbd988af2b88677
Certificate serial: 0187B7659FE7F482AA9B85130B1BBFB5DD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpa_ZUDqVnAIiMFjb2YivK4hnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/xbpa_ZUDqVnAIiMFjb2YivK4hnc.mft
Manifest number: 09BA
Signing time: Tue 25 Apr 2023 07:51:43 +0000
Manifest this update: Tue 25 Apr 2023 07:51:43 +0000
Manifest next update: Wed 26 Apr 2023 07:51:43 +0000
Files and hashes: 1: xbpa_ZUDqVnAIiMFjb2YivK4hnc.crl (hash: GpCJ9ZLOdfn5rN26dsNz4XeB9anhsSFB4PqtocMOKJE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:65:9f:e7:f4:82:aa:9b:85:13:0b:1b:bf:b5:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba5afd9503a959c02223058dbd988af2b88677
Validity
Not Before: Apr 25 07:51:43 2023 GMT
Not After : Apr 26 07:51:43 2023 GMT
Subject: CN=f596938def1fef9da71ebe3cdfecda4a4d17bf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:f2:9e:b2:d7:66:0d:82:90:f6:a5:4d:bd:
40:9e:d8:1c:4c:22:3e:81:d3:c6:38:51:06:54:13:
d4:53:2d:2f:c2:a4:ac:b6:55:5f:2a:82:0c:c0:00:
c3:dd:2c:9a:84:cd:16:ba:20:e9:b4:b5:c7:0c:30:
d9:06:6b:3c:a2:eb:ff:b4:eb:1b:f4:39:a6:05:ae:
99:12:29:f6:9d:5b:38:a0:38:2f:c4:f6:51:97:64:
5d:64:2b:dc:4f:07:94:be:85:af:eb:ee:48:29:26:
bb:e1:9e:7c:8d:49:63:49:bf:6e:95:e5:22:20:f3:
a6:1a:3f:59:12:cf:4d:8a:6f:6a:5b:4b:1b:9c:0e:
f8:64:fc:c0:f6:a1:a9:12:f8:e0:48:10:c5:dd:1f:
ec:21:fe:5f:44:55:8e:6e:38:04:19:20:41:ec:cf:
c9:8d:28:18:32:50:67:08:c3:22:fc:b3:74:6e:0f:
b4:b9:12:21:d1:1a:78:85:2b:e2:97:66:7e:17:ae:
f9:dc:92:dd:9a:68:dd:6f:0b:d6:be:49:10:54:c4:
43:29:98:2b:17:e3:09:4a:85:cc:bb:46:c3:0c:15:
50:34:92:c9:f1:44:5d:89:59:2a:cb:7c:a8:30:c7:
78:da:6a:48:ff:df:27:a9:12:33:4e:28:0a:9a:a1:
a9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:96:93:8D:EF:1F:EF:9D:A7:1E:BE:3C:DF:EC:DA:4A:4D:17:BF:54
X509v3 Authority Key Identifier:
keyid:C5:BA:5A:FD:95:03:A9:59:C0:22:23:05:8D:BD:98:8A:F2:B8:86:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpa_ZUDqVnAIiMFjb2YivK4hnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/xbpa_ZUDqVnAIiMFjb2YivK4hnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bac81a-8dfd-4f13-be52-0b8059004191/1/xbpa_ZUDqVnAIiMFjb2YivK4hnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:97:a9:ec:76:e2:18:df:4a:06:cc:31:a3:57:6e:6f:49:
99:8a:37:fb:aa:3b:48:9c:73:29:88:30:84:9a:5a:6b:c7:99:
c1:80:07:88:25:61:9a:5e:50:5e:6c:8c:da:fe:dc:69:50:0b:
45:e4:4b:44:98:8a:bc:27:82:56:16:26:dd:de:42:dc:d1:8e:
fc:d4:6c:17:3c:9d:17:d5:f7:25:88:02:27:d1:06:ec:72:d7:
1f:c5:75:e7:bd:ea:e0:86:15:0b:b8:2b:71:d0:8f:99:c2:56:
a8:da:ec:a2:14:e7:03:72:9f:37:af:5d:dc:20:68:88:d5:16:
97:7d:9a:52:30:43:c7:28:db:03:42:25:23:74:1b:ac:bd:3b:
6a:ae:d8:74:1f:d0:41:e8:76:74:83:0c:f8:1d:af:c8:af:65:
e6:24:db:54:ea:22:ee:10:0f:c8:f5:6e:f1:c5:da:84:f6:b0:
34:3f:ff:df:8f:e9:2f:7e:39:7a:7f:eb:7b:f5:45:9c:80:21:
c8:40:9a:bb:9c:1b:30:54:dc:ec:1d:0f:e5:32:df:df:37:cf:
94:b8:d2:d2:2f:a1:00:d3:dd:7b:9a:bd:40:46:7e:0e:5a:81:
67:86:98:db:d9:36:fa:ab:c3:d7:96:df:d3:c6:a0:78:2f:5c:
ca:f8:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:03 2025 by rpki-client