Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
File: xddsGvj60uvGNOouIzcPEMXFnQs.mft (raw, json)
Hash identifier: vWgoxOqR7BJHknJnx8MaVrbfeENmXoVMOKk9WWHLhBI=
Subject key identifier: 7A:63:4D:56:08:D1:68:77:D2:D6:C6:FF:97:81:C2:C4:CD:AD:60:7A
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 0194BC3C0B22CC1355DF9C64A60E66BD3C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (hash: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=)
2: xddsGvj60uvGNOouIzcPEMXFnQs.crl (hash: EHu242t9HXAKcY20plBxBQLVxkMs+wlRwJptoUqKbbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:22:cc:13:55:df:9c:64:a6:0e:66:bd:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=7a634d5608d16877d2d6c6ff9781c2c4cdad607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:99:2a:7d:28:ae:33:1c:ca:2d:51:a9:46:
2f:86:0e:59:e5:1b:2c:bf:18:cc:d0:72:91:1d:46:
c2:37:c1:53:8e:2b:47:20:d8:55:5e:35:ab:15:b6:
23:3e:22:0d:d4:c3:86:7b:b6:9d:11:4d:7d:be:10:
bc:53:08:b2:fc:92:4b:e7:a8:3d:80:32:01:35:f9:
f8:4e:30:37:35:83:c7:31:07:95:57:66:7a:1c:d8:
b6:1e:84:cc:b1:46:9e:fe:42:b4:cf:1b:16:cf:48:
d2:93:68:8d:12:cb:c8:56:8d:4b:bf:b9:76:1a:0e:
e4:d1:9a:6f:95:b9:3d:4b:55:5b:dd:20:ca:c7:eb:
c1:d5:a4:ca:76:60:e9:b8:a5:34:d3:b2:0f:ac:d8:
16:03:39:f4:ec:64:f4:d4:d9:63:30:95:51:ce:c5:
60:26:7c:57:e8:50:e1:af:da:2a:76:ee:1a:09:e7:
40:7d:e6:6b:a5:56:87:f3:26:5e:28:98:ca:6f:45:
94:5b:19:13:a5:a9:39:30:6e:96:84:d9:7c:3a:0e:
94:51:2a:e2:99:f1:83:1a:fc:4f:a6:bd:73:ec:da:
57:f5:85:d8:7b:6a:c4:6f:f1:32:98:90:1c:ce:00:
0d:15:d6:c1:88:f9:95:ee:de:92:66:8b:c5:dc:76:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:4D:56:08:D1:68:77:D2:D6:C6:FF:97:81:C2:C4:CD:AD:60:7A
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4a:41:41:90:ee:49:13:78:af:f2:db:25:0a:6a:69:db:b4:
91:e2:92:03:e5:72:d4:2a:af:ee:ec:66:11:5d:f2:0d:1c:15:
e9:24:87:42:85:b9:95:e5:e0:4a:a4:f5:f8:9d:af:d9:c5:eb:
57:08:9e:ac:12:96:e8:42:52:bb:8d:c8:8b:d9:7b:00:94:58:
a5:9d:48:46:80:49:a4:5d:10:b1:60:eb:2e:46:4c:34:b9:28:
94:42:af:c1:2f:f3:d1:ef:ee:70:10:2b:38:b5:a5:85:df:d0:
c5:06:39:2b:74:25:5b:d7:cb:b4:e9:e9:bb:eb:de:ee:61:15:
f9:2e:b0:20:22:34:3a:25:0f:ee:6e:af:b8:9a:fb:b6:5a:bb:
cf:06:36:88:78:1e:f5:39:aa:ef:73:10:c7:b0:df:95:47:1c:
cc:bc:c9:a8:22:52:35:45:50:37:66:cf:b5:fc:c0:43:5e:8b:
01:66:7c:87:b5:b5:a4:eb:90:66:a2:63:b7:fd:e5:e5:dd:70:
e8:6f:ab:e8:af:39:63:fb:6d:68:a4:b3:a0:02:c4:52:8c:d4:
c0:81:6b:7e:0f:b9:29:95:c1:5e:02:d4:31:b2:42:7a:28:f7:
dd:26:02:f2:40:36:af:3a:b6:28:2f:4d:0a:0c:d7:d9:b2:72:
6e:6f:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:38 2025 by rpki-client