Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: /GrjJhn+5VpfHpwhFDL6R/PAArwAiX0HVoUUcAi3G5s=
Subject key identifier: 0A:B9:C6:A4:C2:0F:10:C9:13:62:32:AF:C7:8D:B4:A7:48:5A:FF:3C
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 0194BD4E79E213E08E278CEE81E7FCFF01D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: Ncjyog8MF3WbF2yJkOiT3QGNrY0.roa (hash: mac69omVU5l4vKMkEn8yNVakFQh8bBKDgGibhl+5Pew=)
2: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: THBwiQ8P2S3ahWnZd5oY3qKEdH0GjhsmdIWH2ckG4I4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:79:e2:13:e0:8e:27:8c:ee:81:e7:fc:ff:01:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=0ab9c6a4c20f10c9136232afc78db4a7485aff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:24:47:c9:d3:a1:9b:8f:55:30:f3:30:dc:
82:a6:90:f5:56:c4:68:d5:32:b3:8a:28:39:5f:b4:
f9:3c:eb:3a:20:d0:a1:33:00:f3:45:85:d6:cf:93:
f4:92:f5:68:58:7d:02:98:78:a5:16:1a:78:24:b4:
2a:95:02:7f:86:6f:2f:85:5b:32:44:36:6e:5f:01:
ea:18:d8:01:a1:15:d6:ba:be:dd:91:5d:00:2d:c8:
14:ab:75:01:1f:ab:d4:02:c1:6d:6b:b6:3b:9f:f2:
50:f1:21:70:fc:a1:17:ce:7f:0e:34:b3:b1:c5:c2:
6f:ef:44:8c:63:96:db:3a:69:44:30:64:c3:e3:ea:
69:db:69:85:ac:8a:69:32:6f:df:50:a7:a6:e3:af:
21:29:f9:3c:eb:b2:0f:40:1b:6d:15:2d:d8:05:d9:
71:21:bb:f0:c6:36:3d:69:8a:0e:92:0a:9e:60:c9:
3c:60:46:4e:52:06:9c:45:3d:9a:d5:c8:f3:2b:7b:
6f:fc:3b:71:73:6e:ce:f6:f7:2f:a9:d2:95:3a:59:
52:6b:f3:23:e1:93:4a:6f:77:19:13:02:50:ba:ed:
54:83:04:9e:32:64:06:a9:c0:b4:e0:58:04:58:6e:
16:14:ed:db:b1:fd:fe:74:a1:43:14:68:84:23:92:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:C6:A4:C2:0F:10:C9:13:62:32:AF:C7:8D:B4:A7:48:5A:FF:3C
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bd:e7:c4:24:96:19:74:aa:cc:d2:65:4e:09:4b:cd:10:1c:
98:4a:ea:a4:56:55:62:ed:17:ef:cd:4f:d4:80:ea:6b:c4:8f:
39:6e:da:83:96:60:af:92:cd:f0:27:5e:63:25:ea:0c:44:a4:
21:bc:37:4c:61:ac:fd:18:38:37:93:63:d9:49:0c:dd:cb:5c:
87:65:e3:db:5e:54:6a:1b:fc:c6:78:9a:d1:c7:76:68:ac:c2:
88:76:bc:55:de:07:3e:46:94:e6:0e:38:18:3e:71:e7:7d:fc:
38:15:ae:48:6b:01:98:98:89:7b:52:84:12:90:f1:83:9a:4e:
7f:d2:3b:d6:09:d6:24:ae:32:48:a3:ce:ed:24:c3:db:fe:f0:
65:67:de:a8:18:c4:92:25:7f:de:2f:a6:65:7d:81:bf:c6:58:
7f:64:1d:72:14:dd:3a:35:59:2e:9d:f1:4f:8c:f1:96:86:40:
1a:2b:a3:aa:8b:cf:6c:d2:eb:28:0e:4f:15:6a:9e:15:19:9d:
fe:b7:2d:b2:47:16:34:5a:d1:44:e2:5b:05:5a:b8:15:36:e3:
1a:c0:8e:ac:d2:80:86:48:96:60:84:c3:d9:e7:0e:7e:f5:8b:
72:87:91:e0:5c:02:27:d7:f4:a7:89:17:68:91:bd:3e:66:c6:
38:44:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:55 2025 by rpki-client