Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: BViMO0C1wBELDhwN4Y68gU+UvSMJRbSCj151+t4lYuk=
Subject key identifier: 31:F4:02:D6:BD:07:66:57:3C:05:DE:C5:37:8F:45:A8:AB:D7:5C:3C
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 0194BC3BE6416A51E7AA06104D8C183C4B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 0E3B
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: DT9B81OR2rb4ZIaxG7FlAd/9Yz07tfUSjl7s3HpyoG8=)
2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e6:41:6a:51:e7:aa:06:10:4d:8c:18:3c:4b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=31f402d6bd0766573c05dec5378f45a8abd75c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:1c:0b:a9:93:e6:3c:32:0f:9e:4c:16:07:
01:d1:1f:b8:70:cd:80:b1:ed:26:ac:93:9e:83:95:
c4:26:31:12:c4:d2:0e:90:fa:40:6e:66:7d:ff:d5:
c0:59:9a:e0:37:60:53:b2:87:74:a5:61:77:50:1e:
61:bd:e7:95:36:0c:6d:6f:c9:15:5c:c7:b8:5c:08:
4c:d2:d9:61:61:5f:c0:cc:09:27:54:8e:e8:cb:a5:
8a:d6:28:97:08:7e:49:c1:5f:91:eb:03:6c:51:c0:
17:ec:c8:b0:47:c3:ef:41:10:63:b1:f5:db:0a:56:
c3:b5:95:2b:40:5f:2d:63:64:11:90:f3:b6:b3:c7:
36:c8:47:39:81:77:fb:a0:b6:09:c1:95:01:15:40:
75:0a:c3:b5:06:22:35:f3:91:df:ae:63:01:5d:36:
10:27:56:23:e8:fe:d2:3f:23:0f:fd:e1:b3:f7:83:
05:96:c6:0a:ab:d5:41:10:14:79:88:a4:a7:3a:2e:
14:71:16:03:95:74:53:46:88:77:30:bb:7c:9b:75:
3b:f9:c9:d8:7a:79:85:50:29:3b:ed:0e:62:0b:70:
fe:ad:ac:1d:2f:9a:86:df:4e:71:a2:ab:dc:01:0f:
d6:e6:d0:6a:88:bd:09:a7:69:58:bc:97:a6:bd:e5:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:02:D6:BD:07:66:57:3C:05:DE:C5:37:8F:45:A8:AB:D7:5C:3C
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:15:85:32:97:00:d5:35:e2:94:8e:12:06:79:63:e1:b0:
a1:a6:6d:e5:7f:81:61:76:17:d2:02:82:71:c3:c5:27:19:0f:
ae:f9:8f:74:24:69:45:c2:c1:22:ee:61:20:de:0b:ec:d4:eb:
a0:ef:1f:93:7b:33:5b:75:be:ec:da:4d:9c:6a:32:dd:70:30:
5c:3b:2a:54:3c:7c:b5:a2:35:80:ae:72:05:c2:af:9e:ca:b4:
e8:d5:ff:2e:6f:ec:61:6d:b7:54:55:b5:c1:df:71:f1:f6:6e:
54:87:ef:17:7d:50:e3:62:77:fe:bc:ac:b4:5a:08:4b:2f:7e:
f0:8b:0e:28:f4:e2:e9:54:2a:2c:ec:1f:3c:47:20:38:0f:4e:
90:3c:eb:19:51:63:84:45:50:0e:d3:e3:fa:1e:e1:b5:d1:0d:
af:d5:84:62:69:ac:cc:7d:73:94:41:c6:d7:b4:58:24:3b:4d:
33:7b:72:ed:0e:b3:a6:52:bc:ea:0c:40:49:09:d6:66:5e:3f:
0f:19:94:89:e2:73:e7:3d:d0:d1:08:0c:ec:ba:69:9e:98:7f:
d1:69:29:1d:d0:09:52:40:3b:fe:d6:99:54:cf:a5:d2:76:93:
df:37:d4:5c:7f:28:e1:59:4d:68:61:ad:21:aa:e5:c4:b0:a9:
3f:2c:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client