Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: Wa80ZfVySGbazmBtCjYWpHLOz2jzkwEl21TckDoRyjQ=
Subject key identifier: 1F:D4:D7:B3:B9:FE:19:8E:A4:FC:18:29:60:EF:93:97:C3:13:D6:59
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 0194BC3C2E8CF568E1F1843E16343745E6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 0FE8
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: 2CabX7AXlfE2MqSe5lBvEjnbV/ntjCyQ5+ey2tptlbI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2e:8c:f5:68:e1:f1:84:3e:16:34:37:45:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=1fd4d7b3b9fe198ea4fc182960ef9397c313d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:c2:64:bf:d5:8a:9a:71:1f:f4:1d:1e:46:
60:48:21:65:81:e6:5c:1d:a3:16:8f:f2:78:41:85:
40:2d:1f:69:57:25:b1:95:f3:b8:56:88:33:30:b1:
d3:06:57:0c:ed:8b:1c:1e:7f:4b:be:04:b6:69:5b:
b2:7e:64:a1:95:b0:e7:73:af:28:8d:eb:b6:49:cd:
4b:68:b5:2d:87:c4:e8:17:c3:28:31:8b:20:52:eb:
73:6b:5f:da:97:b2:3b:23:cc:3f:44:ad:84:c1:59:
e8:54:c8:8c:37:fe:e9:e4:5e:e4:3e:b3:86:fd:0d:
85:bb:f9:11:f5:cd:0e:48:df:ed:33:5a:90:54:86:
4f:e9:cb:73:b8:c5:4a:e2:7f:26:2f:8e:22:9d:87:
3e:81:22:8f:29:bd:7b:13:15:24:a2:a8:8c:2d:89:
f7:4b:d4:5d:90:07:1d:07:77:b0:ff:0f:52:49:8a:
49:ac:92:78:6f:00:2b:cc:01:21:5d:29:6d:10:e7:
19:10:69:98:32:be:57:18:c6:81:99:fc:3d:f5:08:
5d:2e:16:34:cf:99:42:16:9d:44:e9:21:d9:74:e7:
9a:2c:c1:db:f3:63:88:0f:8c:3c:de:92:a6:9b:6b:
62:6a:59:f6:c0:7b:18:96:25:22:d7:78:7a:32:30:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:D7:B3:B9:FE:19:8E:A4:FC:18:29:60:EF:93:97:C3:13:D6:59
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:bf:10:26:91:f1:7d:70:23:d1:43:df:9f:db:3e:df:bb:
84:c6:20:5c:69:3b:62:fd:e9:59:b5:37:ce:91:ee:44:08:71:
ca:9f:68:87:4d:dd:cd:27:51:ac:fb:b3:3f:00:61:d0:10:3d:
be:b6:37:a9:dd:48:cf:b2:37:4e:d3:f4:8b:a1:fe:64:7d:d9:
0c:f2:52:b7:9f:5f:6b:01:f7:aa:3f:e8:0b:ae:0d:36:1e:bc:
10:23:a8:bc:61:f4:3f:ab:1a:6f:91:a5:68:19:49:25:b6:48:
c4:11:7f:eb:08:39:a1:fd:fa:36:24:c5:d6:40:f6:08:db:a5:
76:8b:17:92:b2:10:59:c5:07:15:5c:58:ea:0d:99:a4:c3:c9:
f4:91:d1:1a:68:40:7f:35:f5:92:aa:05:79:35:8e:2f:80:1f:
2a:65:d6:6a:58:45:c6:ff:97:e4:f7:de:a6:02:8d:57:cd:78:
0a:4e:e4:c7:a2:ce:3d:bb:0e:75:df:e9:5c:dd:e4:5b:c1:a5:
9b:1d:18:a2:04:0b:f0:10:7a:96:b5:2e:4e:65:34:49:90:6e:
04:1c:b3:f4:b1:e3:68:9c:5b:cf:02:6b:c0:ec:04:67:b5:2b:
74:de:81:62:df:0a:fb:19:eb:93:33:e4:8e:41:ec:5f:73:9f:
7e:12:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:03 2025 by rpki-client