Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: oAQ7b/XuA79OqF/xJ6rZ5WqhrR1bxdNtbjPBIwwD7vw=
Subject key identifier: DF:92:D9:BA:D7:46:F3:0A:CC:58:D2:1D:41:C0:2C:C9:E2:9C:EB:34
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 0194BC731852747F76B2DD1651B114F0DA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 104A
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: uWgy17RgYiYfBfWRqY2nB0xwrPHcgjKbibSzXBnsxto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:52:74:7f:76:b2:dd:16:51:b1:14:f0:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=df92d9bad746f30acc58d21d41c02cc9e29ceb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:d4:e4:8f:24:02:f8:95:b3:68:a5:fb:57:
ec:8f:9a:7d:60:73:f5:59:6d:44:e4:ee:1a:34:f9:
a6:2d:ad:ee:96:a5:e5:5a:c7:2a:43:7b:b5:05:e9:
a9:7a:5d:42:a6:69:79:b7:b8:b0:fd:19:95:f2:aa:
9a:ce:91:b6:18:0b:82:b4:d6:22:59:71:e7:d2:3a:
e9:9e:ea:74:7f:ba:5f:27:ce:c3:39:d3:f9:fc:c1:
d3:75:94:a6:a3:c6:ef:ee:61:fc:ac:5a:c7:d4:eb:
3a:11:4e:15:21:67:ad:c9:6e:a2:5c:89:48:3e:c8:
dc:a5:e8:0f:de:35:61:60:1e:d5:27:b2:05:14:e0:
03:63:88:d8:3e:cf:13:2a:09:1e:fd:ca:63:eb:e4:
8e:a0:df:e7:94:af:51:a8:97:a6:6e:db:47:a1:28:
f4:f7:47:fa:4c:76:d1:76:52:70:46:86:15:ec:7e:
56:0a:7b:27:b6:11:cf:cb:6e:b4:6b:8a:1e:df:8e:
f3:de:df:1b:5e:d8:27:fe:72:cb:9a:5d:c4:70:85:
e5:2a:ae:ae:6a:6a:1f:92:c9:9a:58:35:49:63:f1:
bd:0e:f6:5e:cd:2b:b0:ff:8f:77:76:42:e7:97:12:
03:83:e3:79:7b:6a:a1:b3:8e:e9:8c:d8:3f:4d:31:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:92:D9:BA:D7:46:F3:0A:CC:58:D2:1D:41:C0:2C:C9:E2:9C:EB:34
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:47:60:75:07:ef:f2:cd:cc:10:bb:58:ac:90:22:31:f2:
d4:b9:b3:24:d2:ba:14:65:25:70:66:5d:36:41:e9:38:a7:32:
6f:c1:eb:c3:39:a5:96:ae:6e:25:fd:d5:11:7a:e9:60:a1:2e:
70:bd:1b:ac:fd:5e:08:7f:c8:60:0b:e7:34:3d:7d:0e:af:bf:
80:16:0e:f0:dc:e4:42:32:54:e4:44:46:33:b3:3f:5a:8a:6f:
08:18:e7:0c:7f:b1:f0:62:97:6e:08:b8:de:0a:2e:6d:5b:bf:
a4:ed:89:45:e0:33:87:6c:0e:97:f6:03:de:13:2c:e8:96:3d:
d6:a1:95:b1:87:9e:3e:68:1d:9f:a2:76:4d:b6:e4:9f:46:6a:
c4:0a:f2:f6:3a:8a:91:8c:76:70:fa:9e:c2:a5:26:c8:b9:91:
1b:ff:9a:04:95:3b:d5:c3:01:93:8e:14:74:f4:5e:f4:8c:e6:
22:bb:69:8d:2a:d6:fc:7a:f8:12:37:63:2e:b6:e5:96:a8:1b:
81:96:96:b6:c9:35:8c:4c:f0:7f:71:51:00:04:10:cc:93:3d:
10:b6:b5:b7:06:e2:b7:eb:0d:4e:b7:61:0c:dc:c6:c8:00:6e:
11:ab:a2:6c:88:a2:83:8e:b8:70:1c:21:95:94:38:f8:b7:f5:
29:56:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:44 2025 by rpki-client