Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File: Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier: B1zA06SgeMP+qhKkgmKirkSgV4coVNPj3WVHoeOMc2w=
Subject key identifier: BA:DC:FD:1A:E4:FE:0D:04:3A:14:59:3E:32:34:76:DC:F8:12:7F:26
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer: /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial: 0194BD4E9B0F8025301895C2B925411158A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: B2IUwm0uaSZHaP7DnPbSBjUieo4.roa (hash: BOlqjJDT24t6aaQsferoPEnSoT/e6IPUh40XBnWzYhY=)
2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: 7axWW7vkUoBgVZYIDn+DGtuoHMKvEY4pCTQbCB7s6VA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:0f:80:25:30:18:95:c2:b9:25:41:11:58:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=badcfd1ae4fe0d043a14593e323476dcf8127f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:a7:f9:a0:34:8a:fb:dc:b3:e2:7f:f0:ef:
00:06:ca:03:4d:13:6d:90:32:88:36:24:5c:1d:db:
20:3f:9b:6f:21:8d:5d:8a:90:f3:59:f4:64:54:3e:
34:09:c1:ab:79:b8:78:b5:78:fc:25:0b:d7:70:ee:
03:64:b4:80:27:54:c5:af:5a:a9:31:ca:45:5a:33:
7e:6d:3f:14:98:4e:af:e9:c3:9f:b6:d1:93:ea:ff:
c0:0a:32:00:78:92:ae:d3:4e:f7:70:31:c2:e2:1d:
8a:b9:ba:6e:64:a7:ff:fa:20:c6:ee:2e:89:3a:1e:
ac:28:64:33:a0:4a:61:0b:37:aa:8c:49:52:3d:2d:
83:a8:e0:3f:21:2d:24:1b:98:c3:6a:7e:81:8f:7e:
7f:ed:63:86:16:c7:8f:20:a4:e6:c8:e6:fb:4c:34:
dd:16:db:1c:60:99:09:b4:78:7c:03:cb:b2:3d:36:
81:12:f7:27:62:da:a2:89:fc:60:9a:0d:f6:4e:ca:
d6:d9:e4:a9:64:69:49:fc:7c:11:73:b2:ce:22:f2:
da:83:8e:d4:80:36:51:e0:b1:2f:b2:be:2e:1e:2b:
37:a0:e9:e5:24:5e:70:87:3b:db:f4:3f:66:c7:b2:
77:2b:62:61:aa:ca:62:8f:07:42:e5:d2:2f:8a:0e:
ab:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DC:FD:1A:E4:FE:0D:04:3A:14:59:3E:32:34:76:DC:F8:12:7F:26
X509v3 Authority Key Identifier:
keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:a0:4b:45:34:e4:25:64:a5:3d:fe:58:e8:8f:6b:b4:96:
b3:b7:9c:9a:48:95:dc:df:1d:bb:0c:9e:f6:f8:3b:ed:5c:a7:
de:96:1d:dc:89:c0:08:3b:fa:7c:43:a7:87:fd:1e:4f:ac:a2:
74:ec:8a:12:0e:65:1a:51:df:c4:10:72:d9:c4:ba:26:3b:06:
a3:aa:00:c6:52:1d:69:f6:15:7c:8a:cb:21:14:59:11:a7:ad:
11:01:56:62:a2:81:45:5e:47:1d:7f:a3:0a:b2:8e:77:16:3c:
70:6f:d0:fc:12:86:18:34:71:91:2c:32:1c:9c:3a:21:ba:a3:
5e:c5:68:81:e0:e8:49:60:ae:1a:9f:bf:16:a1:34:a6:ad:80:
9f:5e:83:44:8a:1a:e1:8f:7c:cd:c3:69:9d:ff:5f:1c:e6:af:
8a:c9:a2:fd:b4:ac:c6:f1:38:25:53:30:99:da:d4:06:5d:9c:
cf:76:ef:00:bb:65:ff:0c:84:05:25:e6:92:ea:52:10:07:99:
60:a5:33:59:8d:ae:0f:07:9c:13:41:d0:a0:f8:da:31:5c:a0:
28:b0:a3:b1:7a:0c:f2:85:98:33:76:62:d0:68:32:6d:b0:87:
c3:c5:f4:e2:cf:bf:e5:b6:cc:e9:1b:54:69:05:8d:7f:c8:29:
d3:06:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client