Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: rzI1UpOF2h10YZGKz8F+Ci5Vtl3G34X5DrIlyDXfgz4=
Subject key identifier: 08:EA:3B:9F:1A:E5:FD:A1:38:A1:B4:37:41:75:0C:94:64:EF:B1:35
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0194BC0529FA10F1B5D9D42B9581B1085F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 023D
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: z74Qg38P8+1DedtSmemV14G0ntVBr8EWQ6YsS9+NUZY=)
2: devZOEgryptZR-bT6KNMpTw3Mfc.roa (hash: u3HbxNlq49urjWUiGXoyu0fcegzQ7OgqdK+RiiJSzRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:fa:10:f1:b5:d9:d4:2b:95:81:b1:08:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=08ea3b9f1ae5fda138a1b43741750c9464efb135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:ad:76:c4:91:54:4b:fc:dc:82:70:d3:57:
19:85:42:1a:78:27:50:8a:0f:a2:fb:6a:34:fe:ee:
eb:49:f7:29:c6:d4:df:59:11:c8:3a:89:07:3d:89:
03:8c:19:aa:7a:71:f4:e9:ae:a8:5b:e1:11:ae:10:
f9:5f:58:2b:13:7d:7b:fa:ca:c5:1e:1e:5c:b0:59:
5e:ee:07:52:b9:e9:52:29:87:21:05:63:37:a5:87:
5e:be:af:88:42:eb:33:f6:54:8b:ee:f9:b6:2d:eb:
52:b9:98:8f:ca:5c:a5:1e:50:be:80:c0:e9:f5:48:
34:08:59:d9:fe:65:e0:18:36:89:b7:b2:a0:0c:55:
70:42:c5:dd:1b:bd:f5:f9:82:a2:28:8d:98:0b:e1:
1a:9b:3f:38:61:4e:ee:64:c1:e6:af:5d:14:9e:5d:
e6:80:b3:66:e5:79:bb:f6:e6:7a:b8:ff:0d:1b:07:
53:e9:07:a2:0b:eb:ed:75:a9:a4:81:85:bf:39:55:
9f:83:70:9e:f5:56:7e:cf:fe:e0:02:d8:0b:d9:71:
9b:2b:ab:5d:c6:58:83:ac:d3:62:92:8c:92:55:e4:
e7:66:a6:14:9e:07:26:56:c6:d8:93:7f:43:ae:62:
3c:75:cf:27:c6:5f:d5:39:19:8c:0a:38:cb:b1:11:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:3B:9F:1A:E5:FD:A1:38:A1:B4:37:41:75:0C:94:64:EF:B1:35
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:da:1b:57:ea:ae:8d:0b:1a:44:91:68:1d:b9:84:9f:c5:5f:
a9:aa:7e:cf:82:71:28:52:da:16:6c:d7:13:9f:d4:3c:39:61:
29:bf:8d:f5:29:14:e2:2c:f7:7e:82:70:cc:ea:e3:0e:dd:f9:
6c:8c:8a:1e:6c:b7:91:82:1a:1c:b0:85:0f:b2:7f:cc:84:9a:
7a:8d:e6:92:ee:59:76:5a:e6:cb:f9:2f:77:22:8f:47:cc:e8:
f6:64:eb:25:fa:6a:87:b7:c0:33:4f:df:36:08:3c:56:47:25:
c8:a3:28:fb:59:64:d8:7d:b9:0e:32:80:7b:d8:2f:ac:77:d3:
c5:8c:37:80:9b:41:b2:e5:c9:e2:7d:bd:ae:5a:fc:3f:42:1e:
86:10:13:31:41:ad:63:99:80:20:17:7a:37:f4:c4:2b:30:b8:
20:0c:7a:57:80:da:a1:93:31:45:09:ec:e6:43:9c:51:24:98:
22:78:a1:05:40:50:a2:bb:df:d1:eb:f4:26:3b:42:54:18:c3:
d3:59:49:73:de:f5:92:af:71:06:09:30:00:d1:ed:c7:38:a1:
90:44:d1:1c:d3:9d:cb:be:a9:c5:cc:e3:79:88:71:6c:93:2d:
ec:7c:5b:2e:7e:9d:4f:74:27:9b:d0:6a:d2:af:75:19:ac:6b:
7f:37:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:33 2025 by rpki-client