Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: 3PGLm02SkFGd/9zd8ZvgamhRKVjupeAqVIe3LpZfJEo=
Subject key identifier: 47:C3:5F:F4:C5:C7:98:67:1B:63:AB:58:62:A6:2E:60:08:A9:2A:46
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 0194BBCDBA0FA7597FEF1D1D3996AC9B2BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0290
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 9uqO1XNg5BDGExg7CPJ5mFI7ySWXTm+q7wea/B+IODc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ba:0f:a7:59:7f:ef:1d:1d:39:96:ac:9b:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=47c35ff4c5c798671b63ab5862a62e6008a92a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:74:9e:c9:a1:e2:b6:cd:52:50:37:a9:36:
f5:ad:54:f0:a1:ac:55:4f:57:8e:96:4c:ef:78:1a:
f1:97:a3:2e:28:41:88:27:ab:81:0f:b7:f1:6d:95:
3c:3a:87:73:b0:1a:03:d6:e7:ee:f0:1e:42:87:70:
18:85:bf:7d:4e:bc:65:3c:ce:59:b9:a3:a5:3b:1a:
5b:b9:6a:98:e7:73:87:de:d0:19:71:81:39:3f:bf:
b0:8a:ab:54:2f:01:46:47:a3:5f:6b:1e:a4:ca:9a:
bc:ed:a1:7b:61:78:16:7f:87:c6:3e:3a:85:94:59:
6f:f6:95:98:2f:0a:ff:7a:f8:f2:53:7b:8e:4d:08:
78:91:22:ce:75:bd:02:fd:6c:43:5a:0b:f5:9a:b2:
d4:c1:5c:c3:a6:11:56:d8:0d:b6:08:8a:da:7f:61:
d7:05:f3:55:8b:4b:2d:20:49:df:f7:84:c2:d6:4a:
0a:a3:26:44:8d:a6:0d:84:af:21:5d:89:c1:52:cc:
c9:84:87:06:bf:3f:cc:04:24:30:a9:a6:77:0c:77:
e6:03:6a:f7:97:b8:8b:08:77:f4:62:b7:7d:1c:3e:
c3:b9:d6:bd:38:b4:23:b7:df:06:eb:72:c1:2c:47:
18:b5:85:0c:10:00:6b:62:0e:ac:09:34:17:62:d7:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C3:5F:F4:C5:C7:98:67:1B:63:AB:58:62:A6:2E:60:08:A9:2A:46
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8c:a2:10:ba:c1:22:82:56:b4:2f:b7:66:a9:51:48:08:fa:
8d:33:09:38:6c:3a:59:5b:e5:8c:b5:e4:63:81:ea:8e:47:39:
98:37:74:d4:34:85:c0:a5:f9:3d:12:ac:b6:88:9a:22:87:93:
c4:a3:e3:a8:25:5e:65:14:3b:03:67:36:0b:65:a0:b1:b2:c3:
1b:2f:4c:d0:8d:1c:2a:e9:00:74:f3:4e:91:12:b4:70:2b:f4:
02:fe:99:28:64:2b:41:43:02:b9:00:8b:de:83:04:8e:23:80:
f9:3d:14:2c:4c:f0:1c:73:70:c3:25:28:ad:6e:d3:f3:bc:18:
07:a1:a6:41:6d:89:91:6e:fa:73:ee:8f:c9:2b:a6:8e:c9:27:
f2:4e:e2:ea:af:6a:eb:1f:3e:2f:2c:15:6d:85:b6:0b:24:0f:
21:2d:ba:28:75:11:f5:ce:3d:2f:49:00:32:b7:63:3c:ea:47:
0e:ba:3b:73:8f:0d:e2:e9:e7:0d:79:af:95:4d:2c:f8:99:04:
71:c5:8d:af:58:0a:a4:70:ea:c1:9d:12:eb:3f:62:f0:87:3f:
4a:25:1f:c9:ec:af:6a:b2:a1:8c:a6:58:b8:6a:ea:b1:f6:5d:
a8:7f:5f:08:79:2e:c7:53:5e:32:f3:a4:92:67:76:0f:cc:b2:
18:10:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:00 2025 by rpki-client