Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: AhbkbXnHaL0aH4heNHPHhVSSKK0rKJlA0hIQC/iqTHg=
Subject key identifier: 8F:26:13:D6:B1:64:B2:38:18:82:5B:E5:F7:55:B8:8F:A7:AD:33:7D
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 0194BC3C3A99E7AAB894977ADF1EDDCEAFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: TJhADK6ORbJMDoUVqFI9VqSMJfo1/GJRnJ113C2ai2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:99:e7:aa:b8:94:97:7a:df:1e:dd:ce:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=8f2613d6b164b23818825be5f755b88fa7ad337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:d9:c1:1e:99:fa:8f:ed:d7:eb:8c:f9:1e:
29:f1:e9:e1:2f:91:0a:b2:f5:42:ce:13:da:53:03:
46:70:25:f4:01:8e:6a:78:30:21:51:59:c8:e4:4e:
91:98:3e:ec:4f:68:70:c5:3b:f0:40:b7:12:6a:16:
bb:d0:da:81:5f:00:49:ce:4a:f8:b7:d2:3b:98:17:
e7:03:50:ad:c6:07:00:81:02:34:fe:78:d8:72:cb:
f3:e3:17:a3:5e:6b:ef:2c:f4:b2:5c:f4:ef:70:e4:
75:1f:99:82:8d:ab:8f:53:1f:b6:21:67:fb:c9:40:
c1:ba:72:af:f5:09:7c:4a:95:63:29:7c:48:d2:c3:
4d:a2:7c:c5:24:30:41:75:6a:1c:d7:50:f6:60:f1:
87:56:d2:d3:5a:1d:f4:f8:51:7b:53:7f:03:33:35:
63:f2:33:67:bd:9f:19:99:2a:d7:fd:ee:24:02:99:
e9:d0:a7:15:67:5f:84:ab:89:e4:f8:1b:61:23:e6:
ea:a1:06:e3:1f:9a:91:b0:fb:72:a0:09:4f:3c:3d:
f9:f1:07:87:b9:b0:dd:77:08:38:32:38:2a:d6:7e:
29:d0:22:b1:46:44:6d:10:64:eb:6e:f1:e1:d1:58:
e0:8d:34:64:ae:c0:b6:21:cc:c1:a3:2b:79:a9:9c:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:26:13:D6:B1:64:B2:38:18:82:5B:E5:F7:55:B8:8F:A7:AD:33:7D
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7e:e7:16:9d:4d:62:52:aa:94:f8:83:e6:80:68:7e:22:6e:
14:a1:1f:1c:d8:02:17:23:bb:e1:78:94:df:dd:54:08:49:63:
69:67:d7:68:72:90:09:99:9c:71:5a:0d:c6:c4:98:86:ad:4c:
91:23:bd:71:04:93:7c:86:81:54:f1:38:a8:cc:67:04:d7:f1:
80:5f:d6:8a:0a:90:04:a8:84:24:0e:64:a3:ac:c1:10:a8:8f:
b2:6c:63:bf:8d:28:93:57:7a:c1:c0:31:bb:30:f7:9a:31:80:
53:a8:83:a0:f6:9f:f0:9c:a5:a4:fb:a4:f4:cc:0f:a7:18:62:
3a:e7:6a:03:a8:66:bb:21:b4:8a:d1:a5:76:eb:34:22:ec:58:
15:4f:a2:e7:78:3d:ee:1a:48:67:f8:40:d7:af:a1:3d:f4:26:
bc:7a:10:31:b9:a6:90:b7:a9:ff:c7:4d:87:1e:4d:da:11:92:
58:a9:4e:1e:64:c0:90:30:07:d0:e4:3e:e3:dc:73:a5:82:dc:
0c:cf:0e:76:f5:8e:73:6e:f2:1d:47:cb:2f:19:92:27:ff:ff:
f6:97:c1:87:36:eb:cd:53:c9:f3:ad:ad:a4:bc:6b:45:9e:a5:
81:a1:04:99:fd:b3:fb:f7:c6:59:31:2a:42:3f:be:5d:4a:dd:
a4:0f:ef:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:32:53 2025 by rpki-client