
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: Z8xI4puA0DKaB/Qd8i13v2N+Tu2jU29njQz0+te4DKw=
Subject key identifier: D6:2A:66:49:8D:9F:BD:6D:E7:25:95:F3:69:C4:2C:3B:13:E8:C7:39
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 0194BC3C743AAA686D93749C929C5BFD0C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0A91
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: Mz7SMTIhm22qFgaQEMzcVV7C49sR8xWIpQ7cXbx6Qow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:74:3a:aa:68:6d:93:74:9c:92:9c:5b:fd:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=d62a66498d9fbd6de72595f369c42c3b13e8c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:af:e4:07:65:90:63:3e:af:89:3a:61:e2:
1c:b1:45:e2:60:61:7e:ce:eb:c8:5f:5a:28:d5:45:
c5:60:5d:5b:73:e1:1f:f5:e4:a8:bc:89:dc:ea:22:
94:9b:a9:6e:8e:6c:68:8f:6c:a9:4e:59:d0:c8:7c:
ba:16:12:69:b4:85:fb:99:f1:d4:30:6d:d9:69:8b:
09:67:36:40:1d:f3:e8:5c:c5:f1:6f:bb:6b:50:7c:
1e:7f:a1:44:ba:fb:91:e8:bf:69:b7:32:0d:95:01:
3f:ec:5e:f0:54:c4:73:51:22:91:cf:57:8a:a3:dc:
ba:69:04:75:79:9c:28:ec:d9:60:e8:a5:48:5c:09:
8c:4d:4c:67:7f:8e:48:bb:6f:3b:41:4b:f0:d8:ba:
cb:57:3d:cb:ad:1e:bf:33:4b:08:be:d2:21:60:cf:
9e:fb:9e:8e:09:99:51:a6:ff:2a:94:c2:2b:ea:fb:
2a:65:ff:2b:a3:e4:b6:3a:98:bf:be:cc:4a:7e:28:
f8:7c:96:2a:15:15:4a:f2:cc:83:ab:aa:d3:06:6c:
c9:fb:ed:0e:0b:59:6e:bf:bb:d8:49:09:db:43:8f:
5e:54:05:8e:c8:47:67:29:49:fc:8d:b4:da:3b:88:
07:4a:ac:ea:b7:ab:eb:ef:24:6f:a5:62:06:8c:84:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2A:66:49:8D:9F:BD:6D:E7:25:95:F3:69:C4:2C:3B:13:E8:C7:39
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8c:dd:c6:91:0d:d1:a7:a6:1f:74:2d:6b:d3:d5:d3:18:7b:
37:51:ad:c6:56:8b:e8:23:35:04:2a:fc:7d:b6:16:92:cd:40:
79:76:2c:bb:6b:03:d0:dd:93:28:b3:fd:5c:a3:16:74:6a:f1:
7b:71:a7:c1:40:4c:ed:7e:d6:48:c8:7e:c7:c8:88:ab:ec:72:
69:e2:9a:07:f0:4f:12:d7:99:05:22:e1:6c:f3:91:b0:71:80:
1e:36:eb:f4:80:a2:ed:bd:7a:56:10:55:de:85:3a:61:55:30:
a7:f8:d3:c6:ff:93:ad:6a:26:4a:ff:9e:68:f1:7d:07:85:a3:
39:d5:9b:03:81:9f:e1:f3:ef:27:ae:30:96:f5:01:fe:c0:01:
5a:1d:be:b2:60:b9:d7:e8:e8:c9:68:7f:af:02:5b:3a:6c:54:
ae:23:c5:9c:9d:03:7d:42:0e:26:f7:b8:d8:9e:5e:fc:36:f1:
30:64:64:75:eb:e3:ab:b1:10:b1:10:8f:c8:b4:03:79:ee:38:
b9:d2:3e:b0:a4:15:1a:f3:d8:d1:2e:02:93:94:60:33:02:8e:
a5:80:5e:61:ab:66:a0:49:64:a6:36:c5:8d:f4:fc:2b:8f:7d:
55:3e:a5:6d:a9:25:ab:79:41:3b:5c:d5:31:5d:21:41:5b:58:
9d:64:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:29 2025 by rpki-client