Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: jfTNfY28369TBEE4tN4fOlWkWC3svNDSrSEAObUfpXU=
Subject key identifier: A5:2E:C4:6C:F3:E0:6D:07:E7:C2:3F:CB:43:B3:2F:34:BE:87:C8:19
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 0194BBCDE2C6FA6A39F7FB4453C74B115B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: J6ZF7IhbiIvRKvIftmi0ydldh8NFRAhp4FnXI864HrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:c6:fa:6a:39:f7:fb:44:53:c7:4b:11:5b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=a52ec46cf3e06d07e7c23fcb43b32f34be87c819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:47:cb:04:9c:59:94:b4:cb:8d:f9:1e:ac:
8d:14:bc:76:fe:69:d3:bf:ae:86:a5:3f:ce:f0:86:
fa:20:aa:06:03:fa:25:18:b8:dc:70:18:12:2e:ab:
bd:72:73:61:d3:e6:fc:c3:24:9f:36:b3:91:2b:13:
94:04:6b:9c:a5:ff:ea:7b:99:98:14:32:f1:64:ae:
8d:28:d8:69:f1:49:05:20:09:aa:50:9f:d0:7f:d7:
2b:7f:27:fd:db:5a:8f:81:04:51:e0:57:4f:0c:f1:
17:94:a1:c8:b6:1a:28:7d:d3:36:7b:32:74:9a:4e:
27:a6:8e:be:61:37:da:f5:9f:e7:b8:8e:8c:e1:21:
d3:53:16:f7:29:1e:3c:1b:20:a6:af:89:46:b7:25:
65:84:7d:80:7a:1e:97:f3:95:73:f9:fb:a6:31:19:
ed:97:ca:4d:3d:8d:65:36:f5:eb:ff:89:17:27:cb:
6e:eb:75:04:49:18:bf:11:51:bc:f0:c1:78:15:10:
83:66:12:f2:50:6e:ed:70:64:aa:c8:b0:4d:f5:0a:
f8:b1:29:c4:2d:ce:a9:cf:ef:2e:72:81:46:9a:5f:
76:f6:6d:5e:03:aa:3f:0d:3b:43:25:c0:ee:e5:a9:
5e:bc:a8:f8:3b:87:91:56:03:cb:04:2a:d2:a8:ae:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2E:C4:6C:F3:E0:6D:07:E7:C2:3F:CB:43:B3:2F:34:BE:87:C8:19
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bf:b3:f7:8f:e7:56:5a:76:f5:ac:5f:e9:c6:e0:b8:86:0d:
f0:c5:5f:fa:39:5e:69:d2:9a:5b:54:4c:4c:e9:36:0a:f0:5a:
8f:2d:1a:d6:5a:15:5e:aa:1d:af:fe:22:93:52:2d:fd:25:e6:
57:3f:95:45:2c:42:39:6a:ac:71:13:45:96:17:88:b2:68:d8:
8d:7b:65:5e:60:15:c7:ca:0f:f9:13:1b:75:cf:8f:67:44:08:
bd:d2:4a:be:c2:eb:a6:5e:97:7e:b6:13:68:e4:8d:a7:81:4e:
60:61:fe:20:a2:f6:5a:63:be:5d:83:48:3d:3c:09:c2:0f:f9:
fa:07:b0:02:50:8c:d5:48:bf:e6:0c:c6:bf:97:6c:be:e8:d8:
4b:e9:5b:79:9a:f8:1f:c7:d6:cd:7d:89:0d:2c:c1:f5:fb:d0:
4a:1f:5a:52:a2:49:af:22:ca:e8:ba:c6:49:8f:ae:e3:89:4a:
ea:2b:6f:46:75:17:29:e0:e6:16:10:4d:c7:17:e5:df:09:94:
ff:85:de:75:8b:a2:3b:63:b7:0e:a6:c7:77:45:d1:d6:ee:d8:
22:f7:af:74:2b:be:d0:db:b4:84:98:63:96:c8:f9:87:39:cd:
d9:84:33:92:57:97:81:dc:6c:5a:23:d7:65:c7:cf:5e:92:3e:
cf:63:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:59 2025 by rpki-client