Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: 8HJgvRQB9Uyj9FbUYgLrY/usBzmhAbTg37u05gnPUlU=
Subject key identifier: B1:E8:13:A1:5E:DE:32:D2:19:57:5A:65:6E:15:09:85:F4:0E:35:D5
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 0194BCE0AD46C2DA42A605FAC441FEC5813B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: fYT1T9VO+9pPPcPi93VAeb/8UxrHsnwPP9bRqS078o4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:46:c2:da:42:a6:05:fa:c4:41:fe:c5:81:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=b1e813a15ede32d219575a656e150985f40e35d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:b8:bd:24:1b:c3:d4:b8:db:53:95:33:12:
2b:04:39:44:79:79:de:d1:48:71:ea:e2:74:95:ac:
fc:d0:f6:ee:34:b5:be:14:ec:14:0e:f9:67:07:db:
96:84:d8:3c:2e:a5:f4:ce:7f:cb:a1:84:aa:60:5f:
1f:f5:02:c8:9f:40:fb:09:6d:d0:7c:d2:95:1e:86:
22:99:f1:a9:d4:9e:0e:12:27:b9:92:75:cb:c5:65:
75:98:c3:21:ae:54:c7:68:d4:5a:d1:62:51:2b:6f:
7e:c9:da:21:34:f9:1e:e6:4f:c6:59:81:f2:81:0d:
42:dd:f9:5d:0d:b7:fa:89:b3:4f:8f:5c:ae:d1:9e:
21:00:54:66:46:fc:45:bd:29:53:c0:ee:22:c8:5c:
30:8b:cc:35:f1:ca:3c:89:a1:0a:34:6e:d5:20:d2:
ed:9e:5b:60:66:1a:37:6d:4f:1c:85:bf:76:01:b1:
a1:54:9e:11:4c:8d:ee:5b:28:c0:5b:61:96:d6:c5:
97:13:a9:f9:b3:9d:64:39:6f:bc:b0:47:3d:ce:b2:
ab:76:10:b0:f6:97:f7:f8:b4:81:5b:09:47:54:44:
0e:05:60:91:79:b0:b6:ed:36:75:f8:17:a7:11:f8:
b9:c5:29:0a:a6:07:db:86:b4:cb:af:b9:02:56:f1:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:13:A1:5E:DE:32:D2:19:57:5A:65:6E:15:09:85:F4:0E:35:D5
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:68:65:39:b0:5b:fa:17:bc:15:77:25:7a:81:1b:7c:40:5c:
9b:bb:3a:11:ec:74:17:4f:81:9c:80:8e:ed:28:2a:5b:0e:9d:
b9:bc:05:56:d4:9b:e4:4c:3c:a8:fc:ae:1e:4d:c6:88:ab:0c:
1d:00:1d:36:02:29:c0:4b:de:5e:99:55:58:66:5e:be:c2:88:
f4:46:c2:38:4e:ed:39:21:1d:cc:72:9c:4b:7b:d8:8f:89:82:
05:81:9b:13:0b:c9:98:47:67:ae:8c:17:0e:f1:14:12:0a:8c:
b6:2d:b3:27:82:cf:4a:5d:b2:27:e7:2e:e8:fc:1b:b5:1f:e1:
e9:03:74:de:35:40:2f:d2:27:bb:99:c7:3b:de:5c:76:c2:69:
d2:39:dc:bd:28:1f:d3:3a:f6:8c:c3:7a:82:d8:d6:65:92:4a:
77:f4:24:30:1c:ca:e7:9f:37:dc:a5:2e:a1:00:f4:2e:5a:52:
5c:13:14:06:61:c2:b9:e1:21:ce:b8:2d:be:b5:5f:7c:47:54:
66:32:25:de:93:b0:b7:cf:5c:4d:ff:2f:50:8a:cb:10:89:4d:
3f:c5:cb:23:c9:d2:54:e0:76:ae:c4:2f:d7:b8:cd:a7:3d:9f:
b7:52:49:e7:1b:17:91:0d:f6:71:b1:db:d4:b7:59:28:3c:dc:
30:c2:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:50 2025 by rpki-client