Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: 1k9HpnhfSr1TOZEmYOaOCcqWAKTeLbG5mvz4jThzgzM=
Subject key identifier: B6:D4:6D:02:99:F7:05:41:C9:64:80:53:14:53:02:F4:C0:DF:97:A5
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 0194BD4EB47C8CDFABB392B782AA0069D799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: VWJHpzHrp9So/OOcDZo+J1uK8ezEBJrfUWNS5sEweGY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:7c:8c:df:ab:b3:92:b7:82:aa:00:69:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=b6d46d0299f70541c9648053145302f4c0df97a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:b5:ac:7e:25:4e:d3:a2:b0:d8:ff:f2:34:
bd:bf:24:9d:6d:8e:2a:9e:64:f4:0d:44:b5:17:ab:
99:52:4a:39:f2:39:75:b9:a1:d1:a3:6f:24:a8:fc:
52:b4:95:2b:19:fa:dc:f3:de:98:f8:68:c7:24:86:
12:55:c1:b8:48:7b:51:b0:10:64:f1:83:8a:ae:6b:
31:aa:3a:40:28:ff:b4:e1:de:b3:52:ba:58:ec:47:
a0:b6:24:ed:e2:85:58:ad:aa:df:d6:64:3d:ab:a6:
58:a0:be:28:ad:ea:4f:2c:e4:1c:f3:03:75:8b:f4:
67:d6:58:02:ac:c3:cf:57:74:79:48:05:40:eb:28:
9d:43:be:bc:d5:22:bc:dd:e9:ac:e6:87:6a:54:d1:
3a:a1:44:fd:49:87:94:58:e7:1b:92:4a:36:77:22:
19:25:35:ae:a3:c5:ad:9b:43:76:6d:03:8b:38:42:
fc:50:46:eb:88:1f:25:a5:aa:13:c9:25:43:3e:82:
5b:9b:8c:a3:3c:36:87:53:cd:ee:13:1d:78:9f:d2:
55:49:34:cf:9a:a1:25:69:40:fa:36:af:b3:9d:02:
57:af:e0:2c:4d:30:3a:da:80:8a:a6:66:f5:09:df:
5b:52:a6:f8:b4:5d:89:d3:e9:69:67:38:94:8f:43:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D4:6D:02:99:F7:05:41:C9:64:80:53:14:53:02:F4:C0:DF:97:A5
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:61:77:d7:18:b8:06:d3:0c:d4:55:45:7a:63:d7:eb:41:8a:
d8:95:67:4d:35:0a:b3:e4:f2:c5:e7:c9:2c:f7:ed:20:df:af:
61:c1:50:a5:25:26:49:88:52:65:bf:2c:80:44:76:4d:f6:a0:
af:0a:f7:f4:0e:40:97:91:ad:ca:2d:7f:8b:1b:4f:84:d6:27:
0d:f9:3b:d5:41:72:28:0a:a8:a3:16:02:f2:ca:3d:c3:f9:3c:
af:ce:46:79:0c:da:00:eb:5f:4b:84:1d:24:09:e7:2e:54:54:
3d:30:b8:74:28:08:0d:11:fc:67:a2:0f:6d:1c:75:cf:15:38:
f6:3c:58:25:94:ec:40:2d:11:54:f8:9e:1c:a2:8d:fe:d3:cd:
b7:35:33:74:2d:92:d7:10:07:f5:dc:4c:49:0e:e1:81:e1:2f:
33:10:ff:3d:09:38:7d:1c:68:21:e0:7d:d5:f8:d8:d3:3d:ed:
b3:2f:7c:4b:72:6b:03:6d:e1:27:b6:f3:9c:6a:e2:4e:f2:05:
14:79:a1:0c:d9:66:b7:02:69:73:6b:d7:00:15:6f:c1:ad:1e:
a9:f5:3d:a7:5a:9c:8a:5f:08:89:82:1a:6d:8c:ab:4b:20:b8:
88:dd:30:ce:98:96:e9:7f:40:24:98:d2:d9:72:53:f0:56:09:
a0:79:de:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:16 2025 by rpki-client