Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: kxYXHWxllwpeIglHl2rJtUX5dS4SWqoKoSKsukR1X1Y=
Subject key identifier: 54:52:F2:A1:16:4E:46:C8:8E:69:C8:66:BF:54:59:25:32:4A:B4:5B
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0194BC04E7640EE0AAE328EDEA0FA51B3936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 0EB5
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: LhNa+W8UIxCzVYWhOZCyvAhe4zQOCUfcgItDsGTUR84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:64:0e:e0:aa:e3:28:ed:ea:0f:a5:1b:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=5452f2a1164e46c88e69c866bf545925324ab45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:23:83:e0:8d:9c:0b:c8:51:05:b8:a6:2d:
bc:72:f5:86:ef:16:70:5b:5c:71:61:de:f3:14:da:
a5:2c:72:14:80:93:16:d1:de:63:32:86:c2:8d:92:
10:8f:24:c2:ad:73:a1:e7:9a:04:6f:78:67:7d:4b:
9d:da:38:f9:bc:5d:37:f9:f4:05:e6:16:25:41:34:
1b:08:7e:bc:ee:b1:b2:57:37:a8:14:ea:c7:44:cf:
92:da:0c:25:3e:a8:69:b9:40:53:cd:b6:79:eb:c2:
75:3d:69:fe:85:e1:0d:2f:84:65:c5:96:81:1a:83:
95:9b:22:8a:ad:bb:73:85:c5:a7:96:ed:4c:8a:fc:
1c:b2:c1:d4:98:7e:4b:13:d2:30:5d:b1:8c:fa:e9:
81:c2:16:f2:cd:4a:dc:d1:d9:2f:e8:ef:b4:4c:96:
28:24:d6:35:0c:de:e8:6a:2d:2e:44:2d:4b:64:46:
2b:4b:a5:4b:b6:81:a9:b9:04:68:a1:f0:26:d3:8e:
a3:f5:d7:c6:fb:4f:7d:c8:45:94:4f:97:97:ab:ee:
c0:61:0e:fd:7c:cf:22:0a:34:f3:5d:f0:2c:17:bf:
bc:ed:76:f5:0f:ba:1f:17:eb:8b:4c:89:ba:b3:60:
9a:71:85:8c:05:4d:d0:0a:b9:79:f1:ce:7f:90:6b:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:F2:A1:16:4E:46:C8:8E:69:C8:66:BF:54:59:25:32:4A:B4:5B
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:01:2e:89:49:ee:2d:61:d5:c1:6c:6f:44:7d:70:55:9c:
b7:d6:bf:59:e3:a3:b9:de:5b:7e:d4:83:a8:ff:c1:67:c7:09:
a5:c2:7f:cc:99:9f:e8:92:b1:22:b2:ee:de:d6:09:63:29:b8:
4c:44:7e:04:df:4d:56:15:a1:52:fd:98:9b:ff:41:e3:0c:a2:
6f:bc:d8:d1:41:1b:e9:2b:97:1d:8c:04:93:42:df:64:03:16:
74:e3:cb:f8:7f:8c:05:7e:e4:fd:26:3f:cf:6b:7c:35:9b:03:
2f:7f:66:ed:ec:03:d3:a9:40:0a:b7:fa:7d:26:2b:3e:2a:59:
1c:e4:30:35:8b:65:f4:26:c8:d7:96:f1:ee:9c:74:ef:a8:a4:
c6:51:0c:d3:e5:4c:96:4d:bf:68:17:84:94:06:2b:dd:af:41:
ad:11:e3:68:4a:0a:ff:9f:26:d2:5c:60:95:84:2d:14:83:0b:
85:30:a6:e0:b2:a0:2e:13:ba:78:42:bd:20:9c:ab:97:4b:1f:
60:b6:d6:eb:f6:78:cc:5e:f9:c8:af:26:af:e5:58:84:4a:1b:
a3:63:3a:a2:de:28:1b:99:42:42:b1:31:cb:35:0f:d5:c0:1d:
6f:3a:42:f9:ec:2b:cf:af:ba:12:d8:cd:40:6e:37:8f:bb:8e:
3e:1c:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:51 2025 by rpki-client