Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: LQzlXeqdeQKZFHwpmFRXaYQxMQeUTWiRSQwzJktcGnU=
Subject key identifier: 98:AD:53:01:8B:18:69:26:E0:E7:61:DA:A1:53:F2:20:76:97:35:7B
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 0194BC729509356843359BC7D2CFB7E7CC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: LllBFDs2gYBZI_Py2Vbfk71EYWc.roa (hash: jTm21xMBscMU1inWn9X97hwUinpmwWspFNpJiHwAkIk=)
2: wreINdEXrzvFl4TS78nixyXhWT4.roa (hash: BY0i1f9j/EXwIFUv/m6UVc3+37fV7YdiWDXciFmQ0+g=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: /n3V4GHXQdrlTfCZEUPUmMan+zEzwgYIZQ8ZBxZAD7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:95:09:35:68:43:35:9b:c7:d2:cf:b7:e7:cc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=98ad53018b186926e0e761daa153f2207697357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:b2:a8:c7:39:9a:9d:53:19:55:e5:94:ec:
19:af:10:a9:08:9f:f2:07:71:e1:69:cb:26:57:69:
ca:d9:17:94:0a:f1:d4:6f:a3:08:91:1a:2e:36:1b:
57:ad:54:c6:83:e4:85:58:be:0a:ee:80:ba:fe:ac:
a4:88:73:7e:e0:55:91:d6:20:c3:9d:bb:32:be:7d:
c3:84:b7:09:68:e8:c3:a4:4b:b5:12:0e:02:bd:df:
d9:1d:ac:08:3b:36:53:71:55:3b:8a:14:b1:43:f8:
b9:4a:bf:f8:25:ad:81:39:f1:0e:f1:b6:85:df:71:
d3:a4:b1:52:67:9a:b2:82:df:e5:34:a9:8b:ff:5e:
77:fd:a4:cc:17:e2:09:cc:8a:50:56:9e:bf:94:18:
4d:7c:11:a0:6d:fb:e9:b7:2f:69:45:8b:2f:5d:91:
f8:be:c0:26:35:b2:e8:4d:df:7b:41:a8:6e:88:96:
b9:b7:b0:ad:6c:7a:d3:30:f4:66:27:f6:b8:c9:a3:
ab:28:30:8a:6e:f3:d5:8c:79:fb:03:7c:8c:99:33:
d8:c2:7b:b0:81:5b:83:96:dd:00:1d:b6:a7:0a:9b:
fc:6d:46:de:38:e8:cc:40:65:df:4a:55:8b:14:10:
37:c7:ff:20:32:7d:97:df:b5:39:ad:b5:7e:48:17:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:53:01:8B:18:69:26:E0:E7:61:DA:A1:53:F2:20:76:97:35:7B
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:66:76:0d:9c:ce:e3:ed:bc:fa:63:20:ec:d8:a3:f8:56:68:
dc:73:64:10:d5:3f:3a:2f:75:26:50:f8:6f:f7:1e:df:d3:bf:
e3:82:16:9a:a0:cd:6c:6e:2f:63:70:21:7f:cd:a4:52:32:75:
80:99:fb:e6:3b:92:96:e9:9b:15:83:2d:bf:5d:4d:a9:29:14:
b6:d2:38:be:4c:2d:4d:fe:5b:7e:10:c2:cb:0e:7f:a8:83:5d:
0b:fa:20:6c:d9:21:9b:7f:fd:3d:c7:d4:b5:be:a5:61:c1:a6:
ea:04:54:d6:d9:d4:98:e5:1d:c4:2b:9e:93:c6:f9:26:b2:3b:
7b:4f:9b:4b:fe:34:65:17:b6:85:f4:77:af:73:f8:05:b3:d9:
24:ff:b0:a9:5f:ae:c5:1c:6b:5a:76:b0:8b:e4:51:13:20:8a:
44:b7:5e:da:82:f1:8a:66:b1:20:f7:7a:58:3b:b8:d4:d2:7b:
3e:a3:20:14:ed:b0:66:67:b2:d4:93:8f:24:57:36:aa:34:00:
a0:8a:9f:23:64:24:0d:f9:27:97:a1:b0:a1:07:7e:5a:bc:de:
b4:12:57:34:d8:31:42:ef:2e:20:00:a8:bc:fb:ac:59:05:1e:
b4:dd:db:71:46:90:b7:43:b2:c9:be:af:79:4b:18:59:49:c9:
d1:7a:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:36 2025 by rpki-client