Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
File: XVn0kNO2myLh4nwya69yMRBW3bg.mft (raw, json)
Hash identifier: /mWqpYAte9tJFoor8LmBI/sCI6uw/Rx58ldyQ0xBSY4=
Subject key identifier: 16:0C:17:65:B4:C0:72:C1:89:85:2C:DE:67:FF:EB:20:C3:B6:1E:C2
Authority key identifier: 5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
Certificate issuer: /CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Certificate serial: 0194BC72C6F5B96E99329D64F7BFF948AF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
Manifest number: 08B4
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: VRTGeEzF5FtK76qOfPyLSRNqkOo.roa (hash: pOO7nnFTp0Qht5tDg13SMXctJEqxWl0GtVbovHy2WzY=)
2: XVn0kNO2myLh4nwya69yMRBW3bg.crl (hash: qKUKhR5Tab7pxKHpuuAo/stHZv0+uITOW1d39o7ddHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:f5:b9:6e:99:32:9d:64:f7:bf:f9:48:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d59f490d3b69b22e1e27c326baf72311056ddb8
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=160c1765b4c072c189852cde67ffeb20c3b61ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:46:85:d2:b2:2b:de:5d:d8:f2:41:00:7d:
9a:21:71:20:26:27:77:7e:df:be:70:73:3b:e0:66:
bb:55:10:19:2b:28:f4:52:30:5f:ef:40:18:7a:a0:
8e:ed:78:69:f3:ae:37:cf:12:7a:19:ec:ab:1c:cb:
5a:06:7d:92:67:12:28:e4:22:47:6d:71:e9:c5:84:
2f:0e:eb:6a:2d:89:3b:ec:cc:70:93:12:3a:b9:4d:
50:43:c9:2b:2e:22:9e:0e:94:57:23:92:ee:f0:67:
26:44:2f:09:bc:4c:0f:98:6a:8f:96:00:60:98:0a:
5a:30:78:96:25:1b:a6:55:02:49:55:50:49:76:03:
f9:6e:b5:81:6c:84:e8:54:da:fb:f3:36:8c:5b:37:
0b:ff:3a:00:25:af:8c:6b:3c:30:9a:2a:25:83:6c:
5f:f3:4a:98:98:4f:b1:1a:94:22:04:8d:54:0b:ba:
3a:38:82:30:82:ee:78:13:bc:20:49:2b:a5:4b:a2:
d8:40:5c:ab:7f:99:94:be:f6:56:19:16:4c:db:f1:
d4:cd:f8:c0:e6:af:59:80:80:52:0c:f9:b4:bd:86:
26:b5:52:d9:e9:af:a6:cf:b6:e7:44:49:0c:f2:9f:
ad:ac:a5:ac:69:34:96:17:cd:e1:54:69:7b:b7:be:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:17:65:B4:C0:72:C1:89:85:2C:DE:67:FF:EB:20:C3:B6:1E:C2
X509v3 Authority Key Identifier:
keyid:5D:59:F4:90:D3:B6:9B:22:E1:E2:7C:32:6B:AF:72:31:10:56:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVn0kNO2myLh4nwya69yMRBW3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2aeb79-3582-4ebf-b19a-79348e8366bc/1/XVn0kNO2myLh4nwya69yMRBW3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:79:5c:7a:b0:40:86:05:0b:00:c7:bb:38:b4:74:ce:97:91:
44:49:95:ac:17:78:c6:9e:ff:40:6a:55:c9:90:9b:c0:52:fe:
e1:8d:3c:3b:19:36:51:16:1b:b5:41:86:90:f7:80:aa:8e:6c:
7f:7b:be:dc:d0:1f:fc:9d:d0:d7:dd:5a:25:34:ec:e7:23:ff:
2f:d9:d9:60:74:8f:0d:f2:68:f5:45:a4:9d:83:5f:2f:df:6e:
60:d0:73:62:99:14:33:d1:c2:c0:2d:f0:0c:03:85:79:9e:3f:
91:17:30:90:41:d1:0d:af:a7:79:e4:b7:ac:75:86:40:66:0f:
66:6e:4b:64:2a:2a:ea:b1:62:3a:e0:5b:32:f9:0a:1d:66:bd:
8c:99:fa:c0:49:d0:32:57:d4:d8:c2:22:4c:6b:ec:76:d9:90:
b5:4d:c0:0b:2a:49:a0:e0:7e:0f:6b:d7:97:c1:26:d5:09:24:
01:5b:00:99:ac:3e:ad:f7:04:69:88:62:8a:0a:cd:23:8b:93:
52:07:bf:f5:fe:14:fe:04:3d:8a:0f:83:98:8a:70:63:94:c3:
e0:eb:b1:df:ca:05:54:ae:bc:81:4d:66:b0:d1:24:39:87:fe:
68:95:82:f6:27:3b:d4:d8:d8:ca:19:45:b4:f4:21:29:9c:81:
2e:96:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:52:57 2025 by rpki-client