Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: +n63duNmOnpL4maVKUk1aNkBqFt6wM6Q/QT90oJ+vVY=
Subject key identifier: 3C:67:C9:09:34:3B:DD:94:41:F9:36:94:78:F2:07:6A:6A:B0:3A:5A
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 0194BC3BD54113922363CCF2B1937FAF444E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 1108
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: leHgL4FgrdEOic90MtId57QggtgVISiDUg5VkjTajNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d5:41:13:92:23:63:cc:f2:b1:93:7f:af:44:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=3c67c909343bdd9441f9369478f2076a6ab03a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:ac:f9:e1:28:40:9d:85:50:02:53:96:0c:
69:11:a1:df:ef:f9:60:81:73:e1:2c:8e:21:c2:7d:
97:39:d9:ec:81:5e:a4:bb:20:3a:5f:b7:68:0b:09:
8b:9b:84:e4:5f:3a:96:63:bf:3a:43:6e:58:54:d9:
73:1e:8a:ad:ef:0c:4c:fd:32:d9:a3:ba:0f:74:1f:
8b:d8:bd:2b:3c:b2:7d:06:36:87:cf:dc:27:6e:a3:
d4:7e:f2:be:17:26:19:ff:4c:94:ea:0c:3f:5f:d2:
21:e4:cf:c4:ba:2c:49:08:1b:df:7f:dd:9e:28:d9:
f5:62:7b:b9:2e:1f:59:e1:68:23:a1:3a:2d:e3:3e:
d7:6f:23:dd:da:0a:82:52:a2:4e:19:05:6b:b3:7d:
66:a2:16:c0:02:6a:43:db:cc:af:3d:85:0d:7c:f2:
23:ac:d8:cf:8e:6f:27:ad:31:4d:87:8f:6d:2e:dc:
f4:fa:44:eb:b9:5d:c8:ff:2d:d7:36:89:96:d5:e6:
3c:ad:19:6d:d6:ef:b7:34:c0:d1:77:a0:7a:e1:81:
4f:eb:27:27:37:57:28:46:f6:a2:43:05:84:78:da:
e6:49:e6:4d:89:d2:90:2f:b6:4c:c8:60:c7:44:5b:
94:8a:60:a6:2a:ba:4c:c7:2f:e8:8a:ab:ee:78:16:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:C9:09:34:3B:DD:94:41:F9:36:94:78:F2:07:6A:6A:B0:3A:5A
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:77:a5:f7:77:c8:4d:2a:23:16:8b:d5:cb:37:1a:33:0b:
46:65:75:66:37:e2:e8:4d:bf:74:32:d4:98:da:6b:85:b3:2a:
aa:db:ba:b5:36:ee:54:6c:b3:70:44:ec:e1:4a:d6:51:d9:4b:
93:a2:20:a6:e9:0e:36:55:c8:dc:e9:8c:81:15:b0:0c:9d:8b:
14:15:ad:12:dd:d8:61:6c:81:ec:18:ff:f8:31:87:ab:b2:40:
f3:b5:9e:31:1e:6a:8f:93:95:95:c9:13:ed:f0:4b:61:1e:f1:
40:cc:23:8a:9b:10:31:b8:55:18:e8:64:95:8e:9c:74:9d:85:
8f:07:c1:ef:ac:f0:3e:c4:48:72:94:a8:03:6f:ba:92:4e:b3:
9e:d6:7a:40:2e:92:ac:b9:8f:48:cf:2e:d1:21:05:f4:28:2f:
45:00:ac:2a:e9:8b:04:e7:a5:ab:ce:59:39:7e:ab:1e:22:fb:
1b:47:2d:47:08:3b:0f:cc:f7:ee:e6:cc:d3:7e:16:b8:a4:83:
c3:3e:d8:bf:27:60:bd:60:41:3c:52:f8:a9:cd:da:c2:b5:70:
97:1c:13:9c:cb:80:88:5e:f6:6b:ae:6f:7a:05:60:7c:89:53:
de:d5:ab:c2:0a:43:5c:75:9a:74:3b:3a:90:16:62:93:65:e4:
c1:88:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:20 2025 by rpki-client