Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: W0Y3H5ZaM/+ByqCM7uV2sFdDKr8Qfj+EIe+TWLvsmeE=
Subject key identifier: 9E:90:92:70:4A:CE:81:AE:82:06:E3:E9:D7:40:69:BE:50:AE:F6:04
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 0194BBCE38F1EF02018EBB5E0D4E0B74B333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: jsXee12bvu-ZP57QT85jN04UL6E.roa (hash: SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: 5BP0dPNQE9BVj9iSUKQ2+Jqt/i11MxRFQgb09FNCCr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:f1:ef:02:01:8e:bb:5e:0d:4e:0b:74:b3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=9e9092704ace81ae8206e3e9d74069be50aef604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:02:a6:20:83:86:cc:42:9f:72:10:b0:df:
13:aa:ef:ac:42:7c:9b:ea:a9:21:23:61:f4:b3:30:
d0:1e:b4:31:aa:ae:49:69:9b:b2:5a:2a:12:62:8b:
68:b4:4f:94:98:f8:80:ca:33:34:0b:a0:86:25:ff:
71:0a:ad:08:8b:c4:8c:57:21:4c:85:72:9e:30:9e:
0c:67:48:e0:88:d9:ab:e4:8f:05:44:0d:f8:ca:3a:
e3:a8:58:70:f1:04:fc:2f:e6:b1:51:52:2c:33:be:
7e:27:03:76:f1:bf:8d:81:fd:36:d9:8a:84:0a:e6:
5f:dd:1a:55:a9:f8:c3:f9:13:bb:e5:ec:ce:5f:5e:
42:61:1f:93:33:59:06:a9:80:11:55:a9:62:3a:85:
b1:5c:0e:99:3e:f8:e9:79:37:36:9e:a9:f0:79:8a:
b2:51:72:3c:96:a7:d6:13:60:7c:ca:fc:a5:61:31:
7d:d2:12:29:50:a3:ed:75:28:09:37:05:df:d2:a6:
db:84:cc:fc:dc:fa:77:39:a9:30:6e:41:6d:d9:d7:
84:ed:9b:59:67:f3:1c:0c:40:07:66:67:9e:f0:bf:
c7:1c:c2:6c:a5:e6:9c:c6:d5:50:bb:82:10:b0:da:
b6:d7:21:26:87:0a:8d:33:d1:f9:fc:d5:9e:7b:a1:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:92:70:4A:CE:81:AE:82:06:E3:E9:D7:40:69:BE:50:AE:F6:04
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:44:e4:b4:ea:92:03:e4:99:64:a9:78:ad:07:ef:13:dd:
19:c1:58:7c:d9:ca:90:d0:ca:f4:76:3e:5a:ba:42:29:a1:95:
77:8a:8a:a6:48:2f:30:00:a5:27:4d:44:71:bd:e4:e1:92:46:
91:d0:e3:6a:39:ce:aa:7a:2e:5b:20:db:da:0c:20:ef:3e:de:
dc:6d:d8:5c:1a:70:61:a4:4d:f8:79:cb:5c:67:39:ae:b0:27:
48:08:bf:da:c5:5c:21:e8:b8:cd:f3:6b:d8:b2:5e:a6:80:c3:
a3:e7:27:d8:4a:8e:86:3c:67:a2:53:c4:24:a2:ad:c3:22:1d:
11:f5:e8:5f:b1:fe:ef:99:ac:50:eb:38:8f:44:2a:27:22:1b:
f8:f3:2b:d3:c3:9a:f9:92:82:3e:36:f7:af:85:5e:9c:be:0f:
da:2b:3c:11:05:14:dd:35:13:7a:82:30:27:6f:c5:fa:be:05:
7d:1e:46:5c:63:09:44:14:83:dc:f8:43:63:d0:a4:46:1e:66:
49:a1:06:05:58:3c:fc:5a:d4:a4:74:8d:b3:95:ce:54:f0:77:
97:f9:9c:12:de:01:40:07:e3:69:47:62:95:10:8b:ea:58:86:
d4:9b:8e:67:b5:3d:54:68:cc:73:af:d3:8d:c2:40:39:44:5c:
20:9d:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:26 2025 by rpki-client