Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: pOn9RliEOTi0xdKvuVUUI/I0hEPjrtwZUhb0yOwog5o=
Subject key identifier: 6E:62:63:95:FA:8D:4A:CA:1F:DD:CD:9A:3D:AE:F8:A8:99:0A:4C:B1
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 0194BD4E871227AF128765BA8746516D85E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: sn9kHEdHZwciO7TEuJKwl4W6Ihx3AVjKu6wQCiARVSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:87:12:27:af:12:87:65:ba:87:46:51:6d:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=6e626395fa8d4aca1fddcd9a3daef8a8990a4cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:eb:59:12:66:ca:dd:57:fb:c3:dd:b6:5e:
ce:bf:9d:0f:54:b3:89:be:69:75:49:3f:7a:f3:80:
50:18:86:92:b5:c4:f3:f0:95:5f:59:ae:ca:c8:27:
15:5a:f0:9d:3a:6e:17:0c:45:76:dc:08:b7:20:a9:
a3:cd:a7:f2:29:a0:18:ff:7c:60:e0:cd:73:56:b0:
46:f2:58:c2:4b:cc:a1:38:f3:5e:a5:bd:be:36:c1:
51:a4:2b:16:a7:eb:fa:9b:9a:47:44:4e:99:f3:d8:
c6:6c:45:bf:80:c8:a3:65:fa:0e:bb:de:44:bb:69:
02:f2:37:6c:1b:99:d2:b8:0a:1a:d0:eb:66:ea:a1:
c5:b2:7f:57:b3:18:5b:bd:92:79:7e:9f:74:db:b9:
ed:66:7f:24:ed:db:9e:d4:42:63:60:7b:a0:92:ed:
f6:44:14:47:65:a5:b6:3c:bd:fa:94:19:67:1e:1d:
12:8c:10:27:b3:66:92:c0:d6:6f:c1:03:88:32:75:
0a:ae:9c:bd:fc:4e:81:21:75:3a:f7:ce:d3:3e:4f:
7f:7a:f0:5c:b9:87:ef:4a:f5:36:24:e3:50:b3:df:
73:2a:4f:fe:18:fc:4d:0d:cb:5a:c9:7c:90:f4:66:
46:af:35:4d:b7:a3:55:3a:2e:31:1e:67:41:bb:bc:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:63:95:FA:8D:4A:CA:1F:DD:CD:9A:3D:AE:F8:A8:99:0A:4C:B1
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:b1:4e:ad:82:79:d0:81:03:a2:36:99:c1:c0:a3:21:b0:
23:ae:61:58:e6:50:e6:83:92:f9:c5:b5:3d:21:a9:e8:92:7e:
7f:66:12:a2:c7:99:e9:60:7c:fd:d3:81:b9:bc:31:b8:27:77:
49:bc:5e:1a:0e:d4:31:07:6b:88:3e:35:38:8e:bc:44:c9:02:
cf:92:d8:29:f2:90:ed:29:dc:80:d1:da:bb:ed:7e:93:ae:53:
04:75:b3:d8:81:9c:ea:69:99:6b:6e:b6:96:2b:4f:49:f5:c3:
af:08:d2:2c:f5:80:d2:da:ec:74:f7:9f:0e:c5:58:ed:bc:bb:
ff:c9:31:65:59:83:0e:fb:a2:0c:14:06:be:4b:89:d5:e1:81:
88:fb:8b:1c:ff:17:10:2c:26:ca:0a:6f:72:84:43:21:f2:fa:
54:e8:25:fb:b2:05:cb:30:4f:d5:e3:e6:58:cb:68:97:21:3a:
84:0b:46:9f:29:fe:a4:2f:78:75:f5:6e:cd:3b:3d:c0:94:0b:
e3:eb:f4:37:d7:fd:f3:1e:6b:8e:c4:e2:04:35:3b:ea:41:61:
12:2e:13:03:ec:fe:62:c8:86:40:e7:a2:9b:58:dd:f8:de:d3:
29:cf:63:e6:ea:ba:5b:af:67:21:a0:d5:fd:6f:32:1f:09:8b:
90:e5:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:00 2025 by rpki-client