Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json)
Hash identifier: JBYHlumW6A0Rje6Y2iRv4rJYxNox+7n0eqTDI/wWVDA=
Subject key identifier: B7:D6:D4:03:ED:5D:02:98:5E:8F:A3:E1:F4:60:2A:83:40:F8:82:7A
Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Certificate serial: 0194BD4EC6709666A0BA7616400F7CAA7289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=)
2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: rGi8Y8BGSfY585wGNmY8xpVktO3egBr27er4DUnVnpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c6:70:96:66:a0:ba:76:16:40:0f:7c:aa:72:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=b7d6d403ed5d02985e8fa3e1f4602a8340f8827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6d:9c:f7:8d:e6:3a:7f:30:42:0f:de:10:db:
e1:2c:67:71:e0:c6:d2:c6:34:cc:42:77:27:06:78:
c0:b8:ad:6b:25:6a:3f:fb:8c:df:12:5c:f3:5f:c9:
9b:b3:ed:dd:0b:86:9c:f3:b8:0e:ee:01:92:94:e2:
1c:7e:f9:fb:75:33:7c:34:8e:73:c7:7a:10:51:56:
df:3d:6c:13:2b:2a:06:a7:15:d6:dc:34:0c:32:82:
b0:ae:ae:26:7b:6c:18:24:9a:9d:5c:f6:23:1a:dc:
e6:e1:08:58:e6:25:60:44:2b:48:dd:75:41:0b:11:
2f:35:f4:68:8e:e4:9f:18:12:27:a0:5f:e9:c5:b4:
f0:20:bb:89:be:2d:41:a2:ed:57:ba:1c:00:38:d4:
f4:61:51:26:27:9f:b0:44:a5:e4:72:80:7b:97:b9:
89:69:a9:83:ff:4a:f5:35:a7:04:ad:d5:86:3e:4e:
10:08:1c:3d:e0:83:c1:40:dd:36:eb:9a:12:4a:cd:
06:d6:b3:f6:f3:ad:d3:b7:c6:52:3a:2c:59:62:11:
bd:d9:77:c0:bb:ba:27:16:b2:43:04:90:ef:19:af:
39:7c:f7:5f:ae:5b:cd:ea:eb:ae:b9:42:52:d5:7a:
a2:05:81:c9:ed:a9:c8:ef:64:8d:63:67:55:b4:c6:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:D4:03:ED:5D:02:98:5E:8F:A3:E1:F4:60:2A:83:40:F8:82:7A
X509v3 Authority Key Identifier:
keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:50:76:ef:11:1f:7d:4e:c2:67:a6:b5:e3:5c:b9:27:54:e5:
8f:09:fb:e0:dc:0f:41:b5:75:a0:3a:2c:66:11:4d:c9:32:24:
6a:56:70:40:c7:83:68:75:2c:b2:7c:a5:db:bb:da:1b:ec:4a:
8c:c0:da:23:36:9a:4e:f9:7d:1d:f2:3a:52:53:6e:19:72:a1:
e6:5b:37:b6:9a:41:95:22:bf:93:35:9b:b3:08:00:66:b2:80:
40:7b:43:ca:24:1f:33:e7:94:64:4d:32:9c:b2:eb:ef:ed:ec:
6d:5c:97:59:09:cd:ab:ef:79:a3:bb:55:9b:71:8d:bf:91:6c:
94:27:3f:eb:b7:67:af:11:35:66:cb:55:1b:e5:83:41:ff:8c:
0e:c8:98:a5:19:49:d0:0d:17:6d:56:fb:1c:ba:80:75:78:6b:
35:8c:28:32:27:f4:c9:bb:6a:d9:ab:05:55:23:6d:b3:49:95:
43:2b:a5:d4:f7:c3:f7:ee:d7:cb:43:35:48:44:2b:51:8e:82:
3a:e3:a4:eb:6e:4f:1c:77:74:ac:7a:3f:05:7e:44:10:b0:ff:
be:94:14:7f:52:be:6d:75:c2:a8:b1:9d:d6:c6:f6:d7:2d:2b:
ef:f5:b2:63:08:69:66:0b:10:bc:8b:a2:d3:a3:3f:5e:09:61:
55:b2:e0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:16:22 2025 by rpki-client