Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json)
Hash identifier: tvwJKKRpnvNCVDYZKL0h985jyrDyOfX1I/YVBqXmf4w=
Subject key identifier: 15:C3:10:A0:EA:DD:DC:5D:BD:04:A4:CB:D3:33:42:51:A7:5A:41:72
Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d
Certificate serial: 0194BC3C8A3731CE0E768AA2C7B692558912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
Manifest number: 0868
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: OhN7xuUMCcyu4j1ASW9WmAbHSXnpucHthvMiCh+onDE=)
2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:37:31:ce:0e:76:8a:a2:c7:b6:92:55:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea68c853810d0320b156844f29317701b58610d
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=15c310a0eadddc5dbd04a4cbd3334251a75a4172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:b8:fc:05:19:34:7d:a4:ea:cd:f1:f8:74:
99:cf:3b:bd:79:44:91:4a:f7:f4:1e:71:ea:68:80:
b0:3a:94:e7:06:f8:7c:ac:f2:5e:51:a3:16:c9:6b:
7a:80:8e:db:6d:32:b9:0a:1a:79:37:e0:ce:60:20:
65:3d:65:95:af:45:35:6d:0a:bb:99:8b:44:23:83:
94:6e:d8:8f:b4:e8:0d:83:7b:78:fa:e3:e6:7d:89:
0b:a8:d2:fb:a5:41:a9:fd:b8:e0:93:4f:c9:05:18:
89:66:76:ab:e5:ef:df:70:7c:78:01:a1:db:58:0a:
b6:31:00:5a:4a:9a:bc:52:f6:1d:78:6c:27:05:c8:
9c:89:d9:93:d4:8a:45:7e:bf:a7:d3:74:85:7a:10:
7a:af:77:ff:07:01:d6:5c:4c:a8:6f:d2:4e:55:14:
90:09:04:e3:17:97:64:97:d0:9e:97:fd:6e:14:f5:
f1:81:84:cb:e7:cf:b0:5b:c3:91:9f:b2:f6:49:1b:
dc:b4:70:18:7b:cf:6e:a9:42:cb:4e:93:59:1e:50:
87:c3:d1:99:4d:62:49:d5:2e:36:8b:3e:be:bb:76:
d9:5c:89:80:75:20:78:98:02:c0:b7:4d:9b:3e:1c:
2a:05:82:fa:b6:eb:b6:7d:ec:6d:e8:b5:8b:cd:cb:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:10:A0:EA:DD:DC:5D:BD:04:A4:CB:D3:33:42:51:A7:5A:41:72
X509v3 Authority Key Identifier:
keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2a:b1:49:f3:e7:bc:b7:4f:5b:f9:af:19:f1:a6:9c:2e:43:
f4:98:55:c0:3c:f1:93:22:dd:4d:11:e5:87:a1:d3:4c:bf:14:
f2:aa:61:3d:2b:13:42:dd:84:4c:db:38:4d:32:c5:62:14:29:
c9:20:fc:b4:30:36:fd:2f:61:47:2d:60:4a:2c:34:a6:a3:a5:
c5:81:4f:7f:cd:90:4c:ac:a0:41:b6:73:a8:86:0c:ee:01:0b:
4f:8c:f4:f7:e5:b6:68:db:4f:13:0a:f5:46:5f:1c:6e:f4:82:
c5:af:db:93:53:33:07:aa:e8:e6:74:ad:58:aa:a7:e6:f0:d9:
96:ae:ad:ce:c4:9f:29:87:5c:2c:e4:98:88:7f:78:ab:2b:70:
72:aa:92:54:55:75:35:3b:5c:33:cf:f2:33:63:b2:59:74:c5:
c5:c4:fd:67:ac:a7:fa:d9:a4:57:29:e7:7c:2b:14:09:41:54:
1f:7e:bf:e1:a4:0a:70:49:ad:65:31:6a:b3:e2:6c:ae:ce:56:
e6:de:6e:11:27:b1:fd:ad:2c:ee:53:bc:b6:6e:3d:dd:ad:66:
24:cb:2b:07:2f:bc:17:ff:97:97:9c:85:13:c4:d6:5a:94:03:
2e:b5:be:5e:8a:b8:41:05:91:9b:50:36:1e:bc:ce:33:ff:10:
b4:99:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:22 2025 by rpki-client