Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: AQe0ny2L1FVTGcMNbuyvYnrZJ7fo+vmux11e45THSl4=
Subject key identifier: 0B:01:70:1D:69:85:03:EA:57:7B:6B:30:D8:C5:89:11:11:59:0E:E1
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 0194BC0512CB8D031CB7703400F869DD517C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 08BA
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: GBkNkNtg3iuPwfQQ/szE5Gd0wKLgt7DIT5sxbvXa33A=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:cb:8d:03:1c:b7:70:34:00:f8:69:dd:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=0b01701d698503ea577b6b30d8c5891111590ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a7:4e:28:b6:cb:a5:48:1a:31:7b:af:88:ee:
21:b2:3a:83:dc:27:5e:74:e3:6c:6f:03:08:b1:fe:
a6:8a:e2:75:b4:56:6e:1f:99:5c:04:bd:e8:f8:fa:
44:f9:c9:a1:83:28:31:96:cf:f9:b5:d5:af:47:c2:
17:75:57:a1:64:95:37:b2:05:35:2e:20:24:94:ee:
84:d5:d8:a2:90:a3:c1:cc:17:a9:72:05:bf:31:e8:
f2:8d:fd:df:67:3b:df:5d:00:19:8e:f6:dd:71:41:
05:8c:fd:72:b5:d2:9b:50:db:49:d4:6f:ef:e2:41:
83:ba:b8:97:34:aa:a5:77:99:93:a9:67:b7:61:25:
52:89:6c:21:ac:c6:d1:d4:ae:df:aa:8c:95:85:c6:
e8:59:f0:7c:b7:60:96:3a:48:46:17:54:46:8b:69:
cc:b7:76:7d:61:b7:54:28:97:d3:f9:10:a7:f7:83:
c8:fb:b4:f8:eb:29:e7:e0:00:10:f5:2c:11:05:86:
f9:af:8c:61:16:43:61:c4:8a:3b:98:9a:a9:73:a3:
57:21:a5:b7:f1:4f:80:6a:05:10:12:51:b1:57:67:
c7:c7:aa:04:96:c4:e5:6f:6f:f3:6b:1e:8c:7a:41:
a9:91:0b:e9:e7:1d:f6:5c:11:c9:0f:eb:1e:d0:f0:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:70:1D:69:85:03:EA:57:7B:6B:30:D8:C5:89:11:11:59:0E:E1
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bf:73:61:36:80:60:10:04:34:52:cf:66:41:b5:af:ae:0f:
67:79:ad:f3:0c:54:09:78:99:c9:b0:54:61:a4:ad:72:bd:22:
fe:c7:77:38:3f:9d:91:59:34:87:65:32:b8:19:05:71:a9:63:
80:8c:b8:67:2b:7b:0a:c9:54:32:35:3c:3f:77:51:d6:19:14:
20:96:ec:b9:7c:e8:c2:c7:6b:22:e7:31:45:15:82:3a:82:85:
06:0e:01:26:7f:f6:e1:79:76:24:96:a9:13:23:f1:9e:c5:eb:
bd:eb:9f:15:d5:a3:c4:b5:7e:47:52:8e:db:44:14:6a:6a:0f:
2e:51:da:98:84:0e:0e:f6:f7:d9:9a:c0:04:a4:85:23:f1:e7:
59:cc:84:24:20:f0:57:3d:cf:e1:d1:4a:b8:e1:7f:79:64:f7:
3d:de:e3:01:a9:4f:81:27:1b:38:d5:ef:63:b4:01:fc:65:e0:
81:13:f6:28:88:35:4a:21:5f:01:37:e7:52:7a:95:ae:88:42:
71:22:61:0c:e5:a0:3a:0c:33:b1:54:a1:8d:1f:a4:c8:a7:81:
89:1e:ae:cd:53:78:2b:4f:2d:da:93:86:18:36:f5:30:e3:4b:
bb:9a:de:e3:89:f8:ff:ac:5d:8d:65:60:e2:8a:2b:65:62:42:
68:2d:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:28 2025 by rpki-client