Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: xkiTTy1u5qdFlHOmHUvEsxIt1Za22/j4ZwJBrh0ZNeU=
Subject key identifier: AF:CC:71:FB:D1:3A:EF:92:D3:F3:4D:E1:EF:CB:7B:E9:75:7D:63:C0
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 0194BC3BDD80733018EF2B278B4FCE6EE841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: RVFI6RKDVAIHDrrrxBEBRX10XGmFbAMti/SBPd+HnL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:80:73:30:18:ef:2b:27:8b:4f:ce:6e:e8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=afcc71fbd13aef92d3f34de1efcb7be9757d63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:df:74:4f:89:8e:fd:3e:04:83:40:f1:ff:
6e:b8:07:d6:ac:c9:c5:ce:9c:75:25:f7:6b:05:93:
ca:b3:69:df:2a:d2:49:97:9e:d2:19:22:f3:12:db:
b1:40:da:fa:fb:12:23:41:88:4b:5b:df:26:a9:e8:
b8:cf:6d:a5:7e:06:2d:d4:d6:d1:29:3e:9e:16:20:
e1:01:4f:10:32:11:44:1c:01:de:e0:2b:5e:b3:6f:
2b:15:7a:25:56:3b:77:89:07:75:90:2b:60:3d:71:
f3:28:fd:9e:d5:cb:b7:d0:38:c1:8a:a0:34:ed:9f:
7a:54:17:3e:d7:4d:4a:bd:7b:c2:e8:3e:f8:39:fd:
c3:2b:df:b2:a7:70:50:e5:a1:a9:9c:1f:eb:e0:1a:
80:09:04:f5:5c:66:a9:5e:92:4b:8c:ec:03:97:57:
d1:e4:ac:d0:e6:cf:72:64:19:0c:48:55:1b:8c:82:
41:2b:69:42:59:a8:72:a1:c5:ac:22:79:3f:c2:cc:
c2:35:41:dd:fb:1a:3e:c6:2a:35:c4:49:b1:5d:59:
75:16:31:b1:84:08:5a:45:03:3e:7a:c3:90:ee:00:
ab:a4:be:92:3d:55:34:f7:97:bb:21:5e:16:0a:0f:
5e:fb:d9:16:5b:13:ba:83:7d:1b:73:f2:3c:0d:aa:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:71:FB:D1:3A:EF:92:D3:F3:4D:E1:EF:CB:7B:E9:75:7D:63:C0
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:01:aa:ad:a1:ad:4d:64:13:42:78:b2:e5:16:ef:18:7c:
ba:c0:d8:9d:26:3b:e6:48:b9:a2:03:b3:2f:61:06:e9:ac:ff:
60:ca:c3:95:09:53:08:59:8e:06:b2:ab:1c:c9:ca:98:69:39:
b3:7e:4c:b5:b5:de:54:72:90:a4:2b:15:45:80:72:3e:c4:8e:
a6:a1:d3:19:20:1e:29:b3:2c:7b:bb:fd:f5:2a:24:50:eb:6b:
27:ec:49:81:8c:ba:eb:19:b1:4c:2f:32:54:94:60:b6:d9:c0:
88:e6:d3:80:fb:94:af:5f:9a:24:a4:0d:40:08:0e:3b:91:ac:
72:0e:5a:21:6b:53:57:81:44:2e:9d:da:1e:95:22:5f:b7:cf:
84:0f:c9:83:7a:3e:e6:4d:1d:d7:3a:76:55:b3:53:ed:1b:50:
c0:08:ea:e2:e5:67:01:62:b3:13:eb:33:8d:da:c3:35:fa:41:
ea:87:6e:23:31:17:18:00:cc:46:c5:86:b3:e2:41:8e:4d:7f:
6b:18:52:49:8b:1e:c0:51:90:b6:c0:b3:c7:3b:50:35:b1:30:
e9:35:fd:f9:c7:3c:97:b8:e5:e9:f8:af:89:ad:65:52:99:35:
ed:b7:8a:81:65:c2:fa:e8:2d:cd:9d:28:4b:eb:86:d9:2d:2e:
ca:eb:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:23 2025 by rpki-client