Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: 0K54LaTByJYyFCsXDipx9QOfCgXJBcHH+ft52o+BeFo=
Subject key identifier: 02:60:B4:6F:F1:E4:43:F4:7A:AB:A5:62:1D:D7:B4:AF:6B:20:04:02
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 0194BCA9F18C4D9D28FCB9517D76C034238E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 0C91
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: VV1NWhkreltyyX4xmmubXMUURr1v2j3q1RseuhnI/Dk=)
5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:8c:4d:9d:28:fc:b9:51:7d:76:c0:34:23:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=0260b46ff1e443f47aaba5621dd7b4af6b200402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:c3:3c:63:29:53:3b:31:74:f7:f0:4a:1e:
fe:9e:9f:a9:d6:cf:64:d8:9d:63:6e:50:39:8b:94:
79:b2:50:c7:af:e7:f7:fd:c1:b1:99:ad:23:72:a2:
e8:e4:5f:20:a8:1f:80:80:ed:06:9a:47:c1:b5:32:
f6:ca:08:50:0d:cd:f4:ac:1e:5d:c3:24:38:43:64:
da:3c:32:97:62:f5:22:67:7b:b0:02:fa:20:f9:f9:
df:8b:e7:b7:f5:bf:49:33:35:6b:e3:e3:9c:aa:ff:
27:24:6f:e3:a8:27:d3:c8:00:15:9b:f8:2c:98:5b:
2a:17:93:a1:8c:9b:f5:fd:2e:dd:0b:57:18:a7:6b:
66:68:7e:8e:57:30:7e:8f:9f:ff:f8:98:37:c3:64:
14:98:2f:89:cb:92:52:51:3b:a1:0f:1a:10:12:c7:
e4:01:c1:1a:e6:41:e7:fd:a6:7b:7a:d4:ae:5d:27:
9c:af:02:20:d9:7e:07:e0:40:48:95:9b:01:0b:13:
b7:70:17:62:76:0e:7c:91:9f:32:90:61:4e:ad:c0:
f5:4f:f2:74:19:bf:44:8c:94:1f:02:e1:fd:30:cb:
48:d9:82:40:84:10:bb:28:9d:60:fb:3d:33:22:32:
4a:f0:1d:34:cd:84:a5:c4:e3:d3:3d:10:6d:8b:e7:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:60:B4:6F:F1:E4:43:F4:7A:AB:A5:62:1D:D7:B4:AF:6B:20:04:02
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:81:ca:11:69:82:62:98:ef:82:f7:80:70:90:48:7d:f8:
c8:92:b9:02:75:c6:39:4f:28:85:05:19:fd:69:df:35:49:30:
db:e7:80:c7:8e:57:e4:07:40:8a:65:19:5d:76:e3:67:c6:62:
88:d9:8e:05:8b:4b:b5:31:49:fc:c3:78:f2:1b:5d:11:9e:af:
13:3b:bf:48:a7:db:28:a2:b0:f6:20:d7:4d:59:e4:3f:59:35:
82:f8:de:f1:8f:9a:57:de:d3:2c:c1:c8:cb:52:04:d3:4a:ce:
4a:e1:d5:ad:c9:d5:3e:6c:ad:3b:39:13:2f:d6:bd:a7:77:18:
30:dd:b3:ad:60:a6:6b:24:ef:47:24:56:b2:f2:1f:6c:9c:75:
c9:54:40:d2:3c:88:44:a6:e8:af:8b:bd:df:2b:b9:d0:83:6b:
a1:aa:9c:d3:3d:a5:d8:1a:8d:df:eb:b3:79:ba:86:a0:ca:2a:
d5:2b:e4:4b:94:73:3d:6d:9d:6f:2b:91:9e:bd:4e:bb:b6:86:
19:9a:6d:a4:fd:99:d5:af:fc:e9:80:30:47:93:53:6f:df:55:
d8:ab:ce:43:8f:02:75:ab:a0:7d:f5:fa:f9:de:4e:47:f7:11:
33:eb:c7:d3:42:9f:e4:53:49:1c:9c:fd:0e:b3:e1:b3:da:b5:
f5:f0:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:44 2025 by rpki-client