Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
File: xU6sFR_6npl6ou5g87OBMt7M1Jw.mft (raw, json)
Hash identifier: czxAEG6DUoMEKDb86XWnKKSuPKrW0ejgtIAerA9G9cA=
Subject key identifier: 3E:53:1C:F1:CB:EC:B3:E1:10:82:B6:DC:5E:70:EA:B1:84:87:BD:9A
Authority key identifier: C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
Certificate issuer: /CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Certificate serial: 019395309987C243856D854D8AEF2814CF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
Manifest number: 0BC1
Signing time: Thu 05 Dec 2024 05:00:10 +0000
Manifest this update: Thu 05 Dec 2024 05:00:10 +0000
Manifest next update: Fri 06 Dec 2024 05:00:10 +0000
Files and hashes: 1: RNnQuS8DiVDElTOjHJ54EQ7Qfhs.roa (hash: S7daPWscsZjPCZGVxwKhi9pcQEnMxU38KlU8FVP7jGY=)
2: xU6sFR_6npl6ou5g87OBMt7M1Jw.crl (hash: c9lCVsik3YbEkreB+JsWd7kpo/F1hQST1HQeJmTEjN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:95:30:99:87:c2:43:85:6d:85:4d:8a:ef:28:14:cf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Validity
Not Before: Dec 5 05:00:10 2024 GMT
Not After : Dec 6 05:00:10 2024 GMT
Subject: CN=3e531cf1cbecb3e11082b6dc5e70eab18487bd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:93:1c:57:04:d2:82:bb:51:64:e8:02:43:
03:cb:f3:22:fc:84:7e:3d:dc:a2:13:84:dd:22:75:
63:60:52:ad:2e:50:33:76:04:59:01:b0:53:3f:84:
23:e2:66:12:e7:66:dd:ba:70:b7:8f:28:d0:8d:00:
51:8e:0e:69:80:97:dc:71:97:cd:c9:22:4a:20:8b:
dd:b4:63:07:c7:03:e8:07:f3:1c:01:aa:2f:3b:fd:
33:5c:cf:3e:7b:1c:35:9f:36:88:aa:47:16:cb:5f:
e7:de:82:e1:06:43:3d:2d:75:e7:81:c1:78:f1:2b:
27:17:b3:16:ed:42:4e:dc:b5:6d:5c:c4:4a:fe:09:
4d:29:a2:da:3c:1e:f1:b3:4b:2d:16:21:5c:5c:f1:
8f:6d:76:f4:e3:71:c2:8d:0a:1b:76:4a:ba:73:a7:
0c:7c:de:0e:74:88:3f:fe:63:d5:a5:a3:e4:1c:03:
d3:44:6c:d5:f6:3b:d0:81:01:3c:f0:8a:65:10:7a:
de:a0:63:c4:0e:77:bb:3b:e2:bc:16:30:07:8c:16:
ee:ca:53:d5:c3:da:3b:b5:cb:9c:e2:52:3e:2b:d6:
1c:b6:93:b8:e0:c1:fb:18:06:9f:aa:8e:72:22:fa:
19:00:2a:af:8c:74:53:e3:55:66:58:e1:ed:49:83:
13:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:1C:F1:CB:EC:B3:E1:10:82:B6:DC:5E:70:EA:B1:84:87:BD:9A
X509v3 Authority Key Identifier:
keyid:C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:58:e3:71:53:e9:b0:cc:2c:11:db:e2:da:17:fa:78:43:31:
8d:51:91:b6:e8:38:52:1f:3f:58:89:4a:79:20:b7:0f:f3:5b:
c7:a2:91:df:29:0e:42:e8:63:2b:32:c9:e3:c8:72:2e:e7:20:
fe:fe:1f:46:c4:3e:99:02:79:7e:10:fe:de:67:88:0b:cb:25:
53:e3:67:a6:96:c7:51:51:65:03:a4:26:3e:45:ad:98:df:79:
89:b2:1f:5d:96:4c:24:0a:ac:21:ed:19:a2:ab:fb:62:8e:ab:
c4:b7:d3:ba:b0:10:c8:6c:d0:71:21:9f:02:10:44:2f:2c:29:
06:20:29:41:99:43:8f:78:30:05:e7:f6:c6:21:2c:97:bc:1d:
7c:c2:86:d0:ce:1b:73:dc:cc:89:2e:71:81:20:1d:db:82:25:
67:72:b6:8e:fa:e5:06:17:c5:8c:72:db:d3:77:b0:95:ea:09:
52:d5:27:57:73:3d:f3:fd:2a:8c:24:b8:be:31:3b:2d:75:21:
d0:a9:d0:38:07:6b:99:5d:86:27:4d:8b:0e:f2:03:70:09:2d:
17:63:5a:ba:b5:1b:8c:91:09:f7:7e:8f:a4:89:cb:d7:26:d5:
86:3b:d9:62:8b:c2:0e:3a:d8:85:bb:2f:2d:6a:36:dd:b3:89:
e3:cd:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:25:04 2025 by rpki-client