Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.mft
File: xVamx4HLpM5byxQvtCr9iBqfpmc.mft (raw, json)
Hash identifier: wgQxFtPXDHKpm+jYYEfxth9RelRwGb18iijatnuCht8=
Subject key identifier: 49:C7:AB:A0:52:69:42:6F:0E:6D:63:8C:3A:41:49:25:B9:36:17:0E
Authority key identifier: C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
Certificate issuer: /CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Certificate serial: 018B45E0D622AD28638A5EA85451F5D23809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.mft
Manifest number: 0F43
Signing time: Thu 19 Oct 2023 03:00:44 +0000
Manifest this update: Thu 19 Oct 2023 03:00:44 +0000
Manifest next update: Fri 20 Oct 2023 03:00:44 +0000
Files and hashes: 1: SQUAN5WYovx12eWa8CdrB2tmkjg.roa (hash: uSjmKjfohlh26tejPFdpoQCfYsw5Y2rIWuQYJf2/zsc=)
2: xVamx4HLpM5byxQvtCr9iBqfpmc.crl (hash: oFVye3FiRgd25CiOOPguZjbpWGw5p8498HTw9qhoBKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:45:e0:d6:22:ad:28:63:8a:5e:a8:54:51:f5:d2:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Validity
Not Before: Oct 19 03:00:44 2023 GMT
Not After : Oct 20 03:00:44 2023 GMT
Subject: CN=49c7aba05269426f0e6d638c3a414925b936170e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:59:d7:de:89:8a:15:51:bf:de:85:76:43:
7f:af:38:a0:4a:b8:99:6a:d4:88:bc:59:ef:36:43:
77:f3:02:8a:94:64:cd:db:2e:b3:13:1a:5c:98:03:
8e:f7:6b:8e:93:74:fb:8a:c0:bf:da:7f:91:ed:10:
7b:d3:a6:05:1a:4b:7a:1b:7d:d2:4e:a5:38:60:18:
6a:c1:87:2a:6a:30:7c:28:fe:2a:28:01:12:db:63:
5f:c4:1b:b3:1a:4e:ac:d1:0c:cf:f5:31:d8:e3:d7:
6c:83:f4:59:f7:48:fb:61:83:a7:5d:8d:2c:92:46:
d1:a6:8d:36:d8:53:8b:04:f1:26:3c:0e:f7:e7:4e:
3c:be:d9:f2:40:42:9e:31:57:1c:e7:d5:83:80:aa:
8c:ad:d6:6e:7a:b9:53:a9:80:16:58:79:71:33:7c:
9f:88:d8:c9:42:37:49:a2:e2:42:2f:93:39:6e:0b:
1c:2e:28:11:bb:60:db:c0:95:3e:8a:09:42:ac:67:
b9:9d:ec:82:c7:ac:a1:20:fc:25:96:99:e2:92:56:
d2:46:6b:1d:23:b9:3b:59:f9:71:59:03:4d:32:5e:
4a:c1:8d:cd:eb:a9:2b:88:50:34:a8:73:6a:22:f7:
85:99:3f:44:b8:57:ed:3a:61:ea:e4:73:49:6e:b4:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:AB:A0:52:69:42:6F:0E:6D:63:8C:3A:41:49:25:B9:36:17:0E
X509v3 Authority Key Identifier:
keyid:C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:29:15:73:ca:5b:3d:d3:65:94:57:e4:ca:10:d6:65:b9:
a5:c5:b7:7b:fc:0e:fc:84:1f:7a:8b:01:6b:38:6b:07:7d:eb:
40:d3:1b:53:6a:4e:4e:3f:0f:0d:39:57:50:4c:d7:e5:91:e8:
29:bd:4d:5f:d2:68:f8:98:d5:5b:88:d1:83:73:17:6b:7b:e5:
8a:c5:1e:34:42:7c:2a:0a:cb:12:7f:67:d8:ec:9d:9d:7e:fb:
c5:88:48:72:be:09:aa:79:f0:04:04:50:38:2f:75:85:57:db:
4e:bb:27:66:dc:56:1b:c2:d5:11:3d:2a:ad:c8:24:2e:0d:6d:
df:72:a5:1a:ba:d5:14:bb:f6:58:aa:eb:eb:a6:32:49:a1:bc:
d8:c2:61:93:09:45:72:26:51:17:29:b8:78:2c:26:cc:56:b2:
a3:b1:fe:71:26:c8:16:42:93:ff:0c:d0:2b:c4:7d:cc:37:06:
77:34:c8:ce:3f:14:a9:9a:1a:5c:0b:85:30:bf:47:3a:de:cf:
aa:0b:1b:f5:43:76:b4:ab:b8:58:4f:f9:5e:ff:01:2c:88:60:
f3:66:d9:8d:d7:28:67:57:cc:0e:cf:1f:24:56:ce:52:13:2c:
85:16:00:da:17:83:dd:56:0c:a3:bf:06:88:4d:6a:6e:df:3c:
b9:22:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:46:17 2025 by rpki-client