Manifest
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/47/5C5B39F6776DE17CFD3F013F473840686814D2BA.mft
File: 5C5B39F6776DE17CFD3F013F473840686814D2BA.mft (raw, json)
Hash identifier: MoMXRmrNa8XAFRxdFRM2Y7GHiF/NnHBCh5x5Mt347w4=
Subject key identifier: 84:38:1C:F2:C0:9F:77:7D:A3:61:5D:D6:8C:91:02:25:71:3F:11:9F
Authority key identifier: 5C:5B:39:F6:77:6D:E1:7C:FD:3F:01:3F:47:38:40:68:68:14:D2:BA
Certificate issuer: /CN=5c5b39f6776de17cfd3f013f473840686814d2ba
Certificate serial: 79DFBA085A20871A08785E722962C056335BF62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFs59ndt4Xz9PwE_RzhAaGgU0ro.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/47/5C5B39F6776DE17CFD3F013F473840686814D2BA.mft
Manifest number: 0509
Signing time: Thu 14 Dec 2023 07:28:35 +0000
Manifest this update: Thu 14 Dec 2023 07:23:35 +0000
Manifest next update: Fri 15 Dec 2023 09:59:35 +0000
Files and hashes: 1: 5C5B39F6776DE17CFD3F013F473840686814D2BA.crl (hash: e7F65jQNjwyjqTCEoFcpE4V+gYT7tYELDUsLFJA5J7g=)
2: 3138352e36342e37392e302f32342d3234203d3e2033323134.roa (hash: nNIdhnLLBXCi5v99vbgORljiqO5sxN2YzunoYi1KtiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:df:ba:08:5a:20:87:1a:08:78:5e:72:29:62:c0:56:33:5b:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5b39f6776de17cfd3f013f473840686814d2ba
Validity
Not Before: Dec 14 07:23:35 2023 GMT
Not After : Dec 15 09:59:35 2023 GMT
Subject: CN=84381CF2C09F777DA3615DD68C910225713F119F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:60:05:48:7d:9f:38:10:38:be:4f:d9:a9:
6b:ed:0a:37:43:f5:13:7f:59:45:46:70:9a:17:d1:
42:c9:2e:75:0f:97:99:99:85:48:bc:2f:53:b5:25:
5b:d1:87:97:dd:82:54:fe:d2:f2:90:7d:3e:0e:36:
c5:70:ca:eb:83:6b:17:d1:ee:c4:6b:7b:dd:06:a8:
9a:d7:b7:5a:9e:cf:7e:df:de:3e:f6:99:a8:2a:9f:
be:9a:22:85:5c:64:cb:02:73:d9:15:49:53:ab:bb:
54:a7:fe:f8:77:c7:b9:74:56:4d:f1:8a:c2:7b:fd:
21:1f:03:42:df:6b:e4:c0:97:e1:90:e6:a4:bf:f3:
a7:72:c4:87:e8:1a:d7:1b:0f:1e:14:df:2f:e1:ec:
58:a3:16:3f:b5:c9:d6:74:6c:5d:f4:c8:ae:96:2f:
42:95:b1:8f:be:24:c7:44:dd:d1:4a:51:0e:88:5b:
f6:4c:32:68:24:8d:0d:99:6f:87:49:c9:ab:50:12:
cd:20:ff:f5:27:21:80:5a:26:b1:45:c5:12:50:1a:
41:05:cc:d4:76:7b:48:85:c9:98:8e:3a:11:39:b1:
2a:38:3f:0c:66:1f:98:f4:8a:5e:89:30:0f:7f:dc:
9a:68:ff:9b:35:02:2a:61:9f:f4:04:22:41:48:95:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:1C:F2:C0:9F:77:7D:A3:61:5D:D6:8C:91:02:25:71:3F:11:9F
X509v3 Authority Key Identifier:
keyid:5C:5B:39:F6:77:6D:E1:7C:FD:3F:01:3F:47:38:40:68:68:14:D2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/47/5C5B39F6776DE17CFD3F013F473840686814D2BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFs59ndt4Xz9PwE_RzhAaGgU0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/47/5C5B39F6776DE17CFD3F013F473840686814D2BA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:6a:68:46:ba:e9:39:3f:9f:64:83:f4:ae:0e:bb:1d:df:
cd:5f:b4:5e:bd:7c:90:91:42:1e:3c:58:f6:31:a7:00:dd:1c:
95:62:95:e4:fe:b6:0a:24:99:5c:6a:5c:91:5f:5d:da:3b:73:
11:c4:01:5f:44:49:b5:e7:1b:3a:84:53:80:43:97:cb:22:00:
e8:84:98:c1:0e:5e:bd:a3:0a:3a:98:e7:94:8f:bb:e5:9b:1b:
78:8f:ba:85:48:08:f6:e4:92:8d:e2:39:d2:25:2f:9f:6c:bb:
cf:2c:2a:52:0a:fd:6a:2c:43:d1:27:a4:f2:e5:a3:98:67:a2:
64:02:52:79:27:c6:65:a6:3e:3b:85:c0:83:1b:8a:27:cf:7a:
bd:8f:16:2b:36:ff:00:29:da:bb:50:c6:b2:cc:24:a6:cc:01:
d7:20:0d:81:dc:05:ce:fb:81:e2:40:93:79:b6:9f:4d:1c:04:
68:49:36:d4:48:e3:4c:e8:aa:cc:60:bb:ac:0e:26:37:15:8f:
83:cf:6e:51:89:41:ca:65:e7:1d:b4:26:28:cb:36:83:2f:12:
ef:9d:11:a7:9b:1f:82:49:f6:80:01:92:ef:87:c5:20:f5:73:
83:f3:4d:5c:4f:85:88:3d:5c:6a:cf:c6:29:26:a6:2f:2f:4b:
3c:b8:5a:87
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUed+6CFoghxoIeF5yKWLAVjNb9i0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWM1YjM5ZjY3NzZkZTE3Y2ZkM2YwMTNmNDczODQwNjg2
ODE0ZDJiYTAeFw0yMzEyMTQwNzIzMzVaFw0yMzEyMTUwOTU5MzVaMDMxMTAvBgNV
BAMTKDg0MzgxQ0YyQzA5Rjc3N0RBMzYxNURENjhDOTEwMjI1NzEzRjExOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnmAFSH2fOBA4vk/ZqWvtCjdD
9RN/WUVGcJoX0ULJLnUPl5mZhUi8L1O1JVvRh5fdglT+0vKQfT4ONsVwyuuDaxfR
7sRre90GqJrXt1qez37f3j72magqn76aIoVcZMsCc9kVSVOru1Sn/vh3x7l0Vk3x
isJ7/SEfA0Lfa+TAl+GQ5qS/86dyxIfoGtcbDx4U3y/h7FijFj+1ydZ0bF30yK6W
L0KVsY++JMdE3dFKUQ6IW/ZMMmgkjQ2Zb4dJyatQEs0g//UnIYBaJrFFxRJQGkEF
zNR2e0iFyZiOOhE5sSo4PwxmH5j0il6JMA9/3Jpo/5s1Aiphn/QEIkFIlR2XAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUhDgc8sCfd32jYV3WjJECJXE/EZ8wHwYDVR0j
BBgwFoAUXFs59ndt4Xz9PwE/RzhAaGgU0rowDgYDVR0PAQH/BAQDAgeAMF8GA1Ud
HwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5yb2EubmV0L3JyZHAveFRvbS80Ny81
QzVCMzlGNjc3NkRFMTdDRkQzRjAxM0Y0NzM4NDA2ODY4MTREMkJBLmNybDBkBggr
BgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvWEZzNTluZHQ0WHo5UHdFX1J6aEFhR2dVMHJvLmNl
cjBqBggrBgEFBQcBCwReMFwwWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBraS5yb2Eu
bmV0L3JyZHAveFRvbS80Ny81QzVCMzlGNjc3NkRFMTdDRkQzRjAxM0Y0NzM4NDA2
ODY4MTREMkJBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAg7hqaEa66Tk/n2SD9K4Oux3fzV+0Xr18kJFC
HjxY9jGnAN0clWKV5P62CiSZXGpckV9d2jtzEcQBX0RJtecbOoRTgEOXyyIA6ISY
wQ5evaMKOpjnlI+75ZsbeI+6hUgI9uSSjeI50iUvn2y7zywqUgr9aixD0Sek8uWj
mGeiZAJSeSfGZaY+O4XAgxuKJ896vY8WKzb/ACnau1DGsswkpswB1yANgdwFzvuB
4kCTebafTRwEaEk21EjjTOiqzGC7rA4mNxWPg89uUYlBymXnHbQmKMs2gy8S750R
p5sfgkn2gAGS74fFIPVzg/NNXE+FiD1cas/GKSamLy9LPLhahw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:49 2024 by rpki-client on console-ams.rpki-client.org