Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
File: xpWUB18xxROhM36RdZKQA35me_k.mft (raw, json)
Hash identifier: 1RsXt3pxq7HOHVHN9zi31Z5PO9wDofI8qfssB2zro/Q=
Subject key identifier: 95:F3:AB:FD:B6:09:A2:A0:4C:E4:AA:01:5E:49:CC:83:38:8E:08:2D
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0194BCE06698CB7B125F603F740A163EFB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
Manifest number: 90
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (hash: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=)
2: xpWUB18xxROhM36RdZKQA35me_k.crl (hash: NvMqdlarv7fhndo6XWEkKdq0q0/SqOy/kQFWIKApKvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:98:cb:7b:12:5f:60:3f:74:0a:16:3e:fb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=95f3abfdb609a2a04ce4aa015e49cc83388e082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:e5:73:9f:a2:83:e9:00:cb:2c:c5:83:fd:
e5:86:97:dc:16:16:e3:5d:f0:83:94:4d:f5:37:99:
c5:9e:f9:e7:66:52:10:7b:3a:f7:9c:7a:92:2e:ef:
fc:4d:e1:85:5f:08:3f:89:c3:6d:4d:51:59:65:64:
3b:c9:56:3f:de:c2:79:cd:7d:11:93:1a:85:95:76:
e9:51:af:6d:fb:15:32:ef:88:31:c0:01:8d:28:e6:
d2:1c:3d:16:e0:0f:af:e4:b3:df:30:9f:f8:c7:09:
27:bc:d6:57:ef:fa:92:6b:57:7a:d6:11:bc:1a:0e:
68:54:54:ff:04:de:05:cf:51:a0:e9:05:70:05:e5:
3d:15:09:7b:b6:e7:df:6e:21:f7:c8:7a:74:f8:66:
01:cc:61:11:bb:5b:50:e3:82:2c:d1:da:9b:7c:62:
dd:bc:54:df:7b:85:33:ef:7d:7f:32:1a:30:ba:33:
07:86:83:d7:f1:77:9c:fb:ac:0f:f8:57:52:b4:65:
be:45:f4:d2:57:6d:35:a1:91:2e:94:e5:3a:cb:14:
6e:a5:48:21:f4:1e:b2:bc:a1:7f:fd:3e:23:14:1d:
65:51:e2:0d:e5:6b:4c:26:00:1f:01:59:08:df:3d:
95:17:31:90:3e:62:e4:a4:a1:2e:f0:3f:7d:6c:ac:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:AB:FD:B6:09:A2:A0:4C:E4:AA:01:5E:49:CC:83:38:8E:08:2D
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:1c:5f:25:99:9d:88:09:4d:d8:21:95:41:15:3d:95:6a:
d4:85:04:6f:bc:e6:56:a8:55:08:3b:cc:08:ce:8e:29:01:74:
61:ff:76:e7:b1:3b:0d:4e:8d:51:37:0d:0e:91:d5:f2:29:34:
7d:8e:31:e1:f8:ed:3d:a7:6d:7d:c1:39:8b:8f:b7:ea:bb:8b:
be:85:a0:0a:d3:13:cb:64:f5:cd:f4:75:a1:ce:d8:d4:3f:6d:
42:eb:c6:da:44:40:32:77:62:44:04:3c:be:a9:4c:40:2d:dd:
28:d0:f3:c7:b4:79:a8:bd:6b:5a:a4:4d:b2:4c:53:1a:c7:1b:
ad:c7:82:07:84:96:a3:1f:f9:56:2a:37:0f:ad:a9:f4:45:08:
3b:df:cf:0c:fc:24:88:07:0b:b3:47:95:eb:da:41:98:62:87:
f0:93:36:b7:e4:e1:cd:f5:8f:a0:77:78:b7:ed:a5:ce:23:46:
8a:74:d8:b3:10:b7:59:bf:16:fb:bb:2a:ed:9a:72:ad:11:32:
48:5d:d5:3f:89:83:1c:62:b5:03:35:17:55:13:fb:4c:e3:ff:
ed:2d:8c:41:ed:d9:b1:31:3f:37:f2:d4:6a:9c:d8:e6:1a:0d:
f9:1c:c4:0f:e7:fd:2f:f9:67:8e:5e:fe:de:d9:c9:e5:93:0e:
06:7b:28:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:20 2025 by rpki-client