Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: p+eZeQuwozOGGjyQEIZ42D/+HsUsk3FIZ1wHOUjV9dE=
Subject key identifier: 05:08:8B:A0:6B:66:05:F7:FC:63:1C:3B:65:ED:4E:44:D8:B7:BD:C8
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 0194BC04E023B988D4F4BF528ABA7BF5FE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: VfJY8NdFtg19WZ+7e0n5Gs003fMvVGZyiRU/+hP8DLs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e0:23:b9:88:d4:f4:bf:52:8a:ba:7b:f5:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=05088ba06b6605f7fc631c3b65ed4e44d8b7bdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:15:44:2f:05:5e:0f:38:22:37:d5:15:3e:
60:f1:9d:7a:cc:de:bf:9f:2d:49:8a:88:1a:db:d7:
4e:5f:d1:6f:d5:ff:0c:10:ce:e3:46:8a:db:3e:4f:
68:a2:53:a0:a6:37:7b:ee:49:b8:f0:4a:18:c0:bb:
0c:a3:fc:4e:c4:ec:c3:06:1c:6d:6e:4f:d9:0e:01:
ff:36:9c:60:c8:40:9b:51:a9:2f:bf:b0:0c:c1:17:
7d:5b:b7:d6:c2:69:eb:0e:51:53:9d:4e:e4:e9:9b:
0b:d5:2a:b1:cd:32:cc:b9:d4:cb:d5:cf:d5:a4:4f:
30:54:41:68:17:ed:e6:b6:b7:3c:17:d2:02:d2:10:
33:11:9f:92:fe:ff:0b:2f:e0:a6:12:21:67:de:29:
f9:d7:4d:37:bd:26:db:f4:6c:bb:c2:9c:b8:e6:6d:
dd:ec:5b:90:3f:50:5d:70:86:c7:ab:4d:2f:b3:03:
d4:7a:21:8b:5d:05:29:76:63:69:b0:6e:b4:22:39:
47:78:d6:6d:ed:54:96:71:e5:08:6f:31:50:b0:c9:
7b:61:c5:e9:0e:48:c4:9b:ff:72:39:13:67:57:63:
f3:08:5b:47:2c:e8:82:05:38:57:67:8b:e1:4a:16:
18:49:33:11:cb:68:ac:c9:7a:2e:ed:c7:42:20:dc:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:8B:A0:6B:66:05:F7:FC:63:1C:3B:65:ED:4E:44:D8:B7:BD:C8
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e1:a7:45:83:58:91:ea:0a:65:76:a3:a2:56:e0:2a:8e:52:
19:1e:69:5e:81:af:51:06:1f:fb:85:c6:c2:61:b2:32:fa:70:
18:c2:76:a0:6b:06:26:5a:4f:e3:9c:32:3e:37:af:dc:ec:19:
18:46:20:55:40:1f:3a:17:46:58:d6:30:ff:fa:72:ca:e5:81:
dc:7c:be:cd:6f:6f:10:6a:2f:c9:96:6c:48:3a:47:60:8a:5f:
fa:6f:8d:7a:c0:2e:1c:26:52:4c:f3:55:36:2b:04:53:6c:f1:
08:b4:0b:5f:b3:7d:e0:34:de:88:c8:a8:e4:65:f4:b7:da:7b:
ba:d4:c9:95:3e:70:b7:c8:87:44:4e:c2:61:7d:e6:9d:a4:b4:
d6:32:8b:6c:8e:79:fc:4d:95:42:f7:60:d6:8a:9e:9c:7a:97:
08:03:be:a5:88:0b:f9:1b:eb:cd:59:8e:49:7f:36:ee:99:88:
af:62:50:19:e9:e0:00:e1:ed:80:79:f6:47:dd:09:3e:9d:a3:
ae:c9:91:b0:85:87:5b:2f:c0:56:5b:91:4d:80:0c:7a:32:eb:
db:ab:e2:60:82:7a:06:8e:c2:93:1e:e2:96:20:f7:fd:5d:46:
87:0c:c0:cf:68:1e:e9:b4:6a:b7:8c:a3:e8:b2:7b:bd:d6:19:
d5:cf:7a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:28 2025 by rpki-client