Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: NfbYXiayv48U28jqYo9OOaeBNOAm2UQGmiJxYcDYw0Y=
Subject key identifier: D4:BA:F4:56:AB:C6:86:BE:79:F8:56:0B:18:62:56:DC:54:A5:A0:FA
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0194BCE080C4261B68027F7139B5DBA515DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0305
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: BI17rjABA76SOlvogh6SdQMJxIo.roa (hash: pnRs5Mj2fHfyWrcxdf27va/C0JvgLkooHE205X5FWag=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: hrYVzP+Mb0YPr2J7uyvo89bLc3rOX022gyTZsF0OTDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:80:c4:26:1b:68:02:7f:71:39:b5:db:a5:15:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=d4baf456abc686be79f8560b186256dc54a5a0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:b5:08:c4:05:6e:65:67:78:db:f4:7e:a3:
c9:74:24:4a:58:5d:11:74:87:7b:75:1f:c6:6d:f7:
09:70:17:56:af:f6:a4:d6:e6:0e:9c:1e:cc:8f:f4:
a4:72:91:77:6d:87:b9:a7:cf:50:d7:72:77:50:f5:
63:8e:da:95:17:79:74:bd:ac:bb:62:1b:50:28:a6:
88:28:2d:d3:2d:4b:97:af:44:1f:27:0d:5a:37:2d:
52:54:c7:45:bd:23:49:33:0a:49:19:b2:b2:db:92:
4b:9b:67:b3:cc:c2:ed:51:0f:fa:1a:6b:40:f3:33:
ea:09:54:d1:7e:46:9b:0c:40:cb:10:59:cd:8b:3e:
53:d3:b6:a0:c1:93:b0:6d:f6:86:3d:b6:78:7d:60:
30:c4:04:a6:ac:05:79:b2:bb:ea:d0:3b:c8:f6:bb:
fa:8e:52:e4:2f:46:6d:b2:2a:26:d6:ae:18:44:be:
af:af:b6:2c:aa:46:e7:13:31:28:67:43:71:2a:51:
2a:c5:db:81:a7:4f:78:c7:a6:00:b4:47:d8:57:b4:
f6:a8:b8:5a:8e:fc:74:f2:26:71:a1:15:61:1b:9d:
5b:e8:db:b3:28:92:a7:9c:d1:78:57:b5:5b:07:2d:
77:f7:ad:e5:3f:53:a0:fb:16:6a:22:f0:e1:84:b6:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:F4:56:AB:C6:86:BE:79:F8:56:0B:18:62:56:DC:54:A5:A0:FA
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6a:a9:84:bf:4d:52:f7:39:f3:63:29:d5:97:72:a6:f8:c0:
39:3a:12:a9:5e:e9:87:d0:c5:c2:b2:ea:fe:35:d2:52:d9:d4:
4b:55:c8:b7:e1:0a:8b:f0:b2:45:a8:26:c9:74:0f:a9:9a:e9:
d7:dc:d5:d9:a0:b4:af:53:1f:5e:98:32:c9:44:2e:dd:60:08:
82:14:b5:02:3a:b9:93:2b:8b:51:27:53:34:f2:bf:29:12:74:
9d:8d:c0:98:bf:a1:e7:3c:da:13:05:28:f8:45:41:aa:9b:ab:
2a:84:b4:69:2e:85:c6:f4:79:cd:28:f3:b6:46:fe:c4:de:e6:
96:fa:76:86:ce:b4:c6:6a:40:28:6c:0d:53:ae:6e:b0:96:5e:
c7:13:6c:60:62:21:2b:26:6d:7a:3a:82:e1:3a:1c:25:ae:89:
ff:ef:0e:e1:5d:9f:94:2f:6d:15:56:34:78:c8:de:f9:c2:e7:
97:8a:d0:09:9d:0f:c5:3a:8b:e6:f6:b6:44:56:e6:70:d6:36:
83:40:a0:53:f7:37:2e:66:c1:7c:9e:6d:ea:95:8c:d3:d4:e1:
5a:07:56:3a:06:df:24:27:7a:f3:78:8a:84:63:fb:10:a8:94:
fd:76:28:15:e0:bf:0a:8e:42:19:5b:57:15:e6:be:99:1d:38:
59:d6:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:18:07 2025 by rpki-client