Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: eoT0qj1wQZi1GRLFfyRrq9z+Wbiuegj8Rom3UhDAFPE=
Subject key identifier: 33:D3:A1:5D:D5:BF:79:69:6B:99:23:74:2F:88:98:AD:D4:B7:D7:F4
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0194BBCE0635A70674B8FD8969A949419441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: Lw9VGW4c/iWuwlAslrR/egX/455CdbIbwvRC4MCEmng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:35:a7:06:74:b8:fd:89:69:a9:49:41:94:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=33d3a15dd5bf79696b9923742f8898add4b7d7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:01:4d:33:e6:ac:c5:85:fd:b5:39:97:33:
6f:86:c3:0d:f4:6d:5f:c6:0f:51:12:1e:5f:d2:b4:
fd:9c:ed:0c:83:9a:da:15:5d:17:86:4b:59:4a:25:
ad:ec:85:40:66:8f:bd:23:7f:fa:a7:73:52:fc:1b:
79:44:b5:93:27:a7:78:62:1c:c1:83:91:dd:bd:26:
07:a3:a4:5a:ac:00:09:8e:e5:d9:dd:1e:78:3d:4e:
cc:33:aa:35:db:58:fc:bc:21:3d:75:a6:cb:30:d9:
88:7d:ec:e7:14:24:5a:38:82:b4:0e:1f:80:a1:c3:
12:b1:18:fa:70:3e:95:f6:80:4e:90:2c:87:ad:cd:
45:19:07:e9:57:49:9d:81:59:50:54:8a:77:1e:87:
7e:43:4c:21:14:a3:38:3c:f6:fb:f8:23:7e:05:b5:
aa:1b:57:78:1c:40:aa:e8:69:07:dc:d9:70:15:3c:
d1:74:a9:5f:56:d5:3e:d8:8c:a8:2b:11:0b:56:f9:
bb:ea:5a:c3:d1:4e:bd:42:79:dd:36:04:96:b1:d8:
73:f0:e9:b6:1f:6a:f7:3a:ed:fc:3b:13:df:8d:53:
66:f1:86:5e:4c:f2:02:ea:15:64:74:49:95:4a:d8:
ac:9d:26:95:dc:00:f4:00:ee:f1:b6:d8:99:5e:9c:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:A1:5D:D5:BF:79:69:6B:99:23:74:2F:88:98:AD:D4:B7:D7:F4
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:6a:c9:4b:c0:a0:59:b0:50:35:83:54:c5:33:7f:72:86:
db:86:70:ca:55:ba:3d:2e:48:58:a0:e3:06:a4:bb:c1:f9:2e:
64:1d:9b:55:04:ea:9a:71:42:40:37:20:f7:c7:78:94:27:c7:
f1:21:78:53:10:00:4c:89:5e:e9:a8:e1:dc:34:c1:75:3d:67:
f4:f8:89:ab:b6:90:d1:b9:66:90:e6:7c:f7:26:ce:3b:52:a8:
a2:ea:11:c1:9c:b8:37:8a:48:5c:ea:92:7b:6f:78:ae:7b:b7:
1f:a6:19:09:d5:b9:88:de:50:53:91:49:ce:df:c4:d2:3c:c7:
c0:68:c6:31:4d:15:6a:2c:e0:ba:9b:52:41:61:93:19:64:88:
9a:3f:99:ac:66:f2:38:89:58:cd:e5:02:5a:d1:90:11:d2:e0:
a6:16:3e:d3:15:14:de:f3:70:ad:29:fe:9f:8c:48:a9:d8:90:
7a:f2:68:22:3a:79:6a:33:59:a9:76:e2:52:5a:e4:e6:c3:0c:
79:70:f9:89:93:36:ef:35:6f:97:f9:d2:f3:a9:ba:4a:3f:0f:
a9:d6:56:7a:a8:7a:d0:a7:7e:32:66:64:4a:e3:44:18:ad:0a:
c5:1d:9a:ff:87:bb:78:57:57:ea:7f:f9:9a:11:63:ef:ce:21:
2d:65:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:45 2025 by rpki-client