Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: tdvfc89bs4jNwu+e6WyM1/4Z0V6cNiwaQzHURhqusJA=
Subject key identifier: F7:11:93:02:74:37:95:43:DF:F0:26:E9:D4:7B:4D:B6:01:0B:27:11
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0194BCE0DECD321534F8BB224B891B96AEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: A0W4NLtnqVewyPWtMUlDJQbCQXE.roa (hash: MYxIYetVdJmSAzMctuQMtMzPS4ahJ2EbSnELEfjBMw0=)
2: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: 0l9g3vJdjSN/Gm3jFhSsTnFsDjAFKUQNJvVCeoZ0AWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:cd:32:15:34:f8:bb:22:4b:89:1b:96:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=f711930274379543dff026e9d47b4db6010b2711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:40:cb:67:5c:60:2e:a6:ef:7d:f7:6b:35:
46:98:64:57:b9:0a:2c:f0:db:a7:96:5e:64:30:89:
38:ca:18:a8:f6:95:f4:f2:55:0c:8d:d0:f3:26:5d:
a5:33:19:3d:93:68:a3:19:93:76:6d:70:2a:fa:f5:
8a:c8:2c:ca:5f:b6:11:64:97:17:61:12:63:19:c3:
60:59:99:b2:dc:7c:9a:6d:ad:31:75:a7:02:2d:9e:
ed:78:02:14:0a:65:e0:1b:5f:a8:74:e2:19:97:47:
be:a6:3c:12:47:05:1a:01:9d:75:74:f4:cc:3d:7f:
88:c8:56:f4:9c:5b:81:20:b6:b6:4a:d0:1d:35:f5:
51:44:1d:d4:87:26:a7:3f:02:65:79:b7:38:24:c1:
8f:16:6f:c6:67:96:83:91:44:3b:13:7c:0f:de:27:
dd:09:ba:4f:83:b7:75:e0:32:6c:7c:13:eb:c7:3e:
48:7e:fc:fc:fd:f0:68:2a:56:c8:c1:41:7f:49:9d:
8b:b4:df:4d:e0:b9:c4:66:85:c4:2b:25:e3:db:d6:
25:84:c2:91:6a:4a:91:64:2c:bb:56:47:d0:c7:85:
b1:8b:00:36:f5:08:1f:76:73:a3:53:44:37:85:02:
9f:0b:8c:fc:37:af:d4:f4:72:e0:30:a0:2c:28:1e:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:93:02:74:37:95:43:DF:F0:26:E9:D4:7B:4D:B6:01:0B:27:11
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b0:c1:d6:55:08:61:b0:9c:cd:bd:44:05:cd:b8:70:ff:aa:
43:9e:49:8e:1b:43:ac:92:f4:7f:ca:6a:a5:fd:32:ea:93:fe:
32:77:1f:3e:d0:a8:20:e1:03:bb:18:3a:16:6e:50:e8:00:12:
0e:66:f9:f5:65:8b:2a:6e:7f:bb:32:d3:c4:77:9c:2a:c5:a2:
d4:e8:cb:17:ca:7b:93:58:3e:d1:af:f7:0c:e4:d4:18:e4:eb:
4d:35:7f:4c:1d:9b:cc:2b:0e:00:77:90:21:a8:ee:e2:93:67:
a0:34:bc:27:41:df:8d:86:e8:f5:22:22:05:b8:aa:af:07:1f:
6c:e7:f6:d4:74:39:99:6a:b8:d2:0c:f3:14:68:74:7c:6e:6b:
d9:b4:ed:2b:87:28:42:7d:cf:7c:4e:fc:a9:0b:d0:fd:d6:27:
57:08:0c:c5:01:f4:29:4a:f0:3e:45:b3:46:af:b1:38:db:0f:
18:31:66:df:55:7e:09:44:2a:30:74:92:3f:9c:33:8d:e4:94:
8c:d3:d9:40:77:19:79:66:1d:5c:be:2c:46:91:de:26:ac:e5:
39:34:ef:14:aa:27:03:c5:9b:6d:8c:ac:7c:ba:a0:0b:c2:02:
d2:26:7f:ce:c8:aa:45:4d:69:de:f0:33:ab:e4:92:fd:c9:31:
bb:d3:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:15 2025 by rpki-client