Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: WwXVMWyaW1rFD7nOk1dhy7dczSnOxqJm03jRBlpQoSc=
Subject key identifier: 05:07:2F:87:63:97:E1:59:AC:D5:84:8E:25:F0:E7:84:0C:5D:0B:99
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 0194BCA97D2300BD03D88CFCAC3E67135298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: GXVR5_UBj96ODS93o21Z9J2WTSs.roa (hash: yqTt61a/07N9ZgP9P8oAhPCc16OgpYzYlQ/vNQMuyME=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: qcS8OLl5AVyhnThxcmLjWXTBDQhqGzakrRak85DUOhs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:23:00:bd:03:d8:8c:fc:ac:3e:67:13:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=05072f876397e159acd5848e25f0e7840c5d0b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:7c:b7:38:f1:8f:0b:72:fe:ee:a0:18:0d:
dd:95:06:52:76:90:ac:86:44:37:ab:a7:f0:52:77:
d2:ea:75:b4:a7:f5:dd:32:d8:6c:af:68:f7:eb:cd:
69:0e:e7:06:1b:14:15:20:d4:ec:8f:ae:60:95:e9:
7a:b9:ac:7c:c4:7d:c3:0a:87:55:40:13:21:cd:77:
54:26:d2:8b:14:fe:82:25:3d:63:04:3f:3a:ba:6f:
80:cb:b1:ca:b8:a3:70:7b:3a:12:c9:e7:1f:00:71:
21:32:49:42:39:14:b1:ec:58:d3:31:77:e2:fb:f5:
5a:ab:c1:47:a4:22:a6:2b:8e:13:7d:d5:e6:d7:b4:
fc:a3:35:c7:88:e1:d3:d4:24:93:66:31:a3:24:bf:
8e:39:20:2c:26:ed:55:fe:82:06:b6:56:2f:8c:03:
2c:77:df:63:f8:ca:f9:b9:1f:99:c4:34:7e:63:f2:
25:f2:3b:5f:1a:eb:be:fb:2e:dc:47:2b:aa:61:4c:
9e:81:55:c9:f6:57:16:fd:dd:d6:24:5d:d1:db:93:
d1:19:87:51:de:ea:43:43:90:25:06:bc:02:40:93:
8f:76:e5:91:62:ca:e1:03:75:7e:11:be:eb:0b:42:
53:fc:25:b6:4a:d5:19:d6:ee:f4:16:d5:c3:0d:16:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:07:2F:87:63:97:E1:59:AC:D5:84:8E:25:F0:E7:84:0C:5D:0B:99
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:e5:61:34:ad:c6:60:26:ed:42:3b:08:cf:6a:77:2b:71:
79:a8:9c:d2:6b:a2:60:11:2b:f2:81:98:a2:93:fb:f2:49:af:
36:5b:6b:13:04:82:7f:88:75:12:12:fa:5c:38:63:85:8e:7c:
7a:2c:21:e3:1d:38:6f:44:62:f2:26:ce:2e:a2:3d:c8:ef:80:
0e:4c:21:be:bf:77:bd:4d:a7:50:52:84:cc:f1:99:95:6c:cd:
fc:ad:fc:da:30:c1:d9:ba:6c:ad:19:b8:0e:b1:6a:49:12:3b:
e3:c9:86:ae:81:ff:ef:a6:ae:0c:04:68:fe:07:e8:a0:3f:cd:
c0:42:11:14:d2:72:c4:ea:e7:79:34:d7:8b:8f:d8:2b:d9:1c:
84:b9:98:42:c4:f2:21:47:7e:de:9b:bd:3e:61:e1:c0:76:24:
3f:a2:f7:bc:7e:50:0c:ea:0f:78:ea:e6:a0:49:a9:eb:b2:b7:
a4:7d:ff:1f:1b:08:4d:70:5b:f2:97:94:eb:94:d5:98:a6:18:
dc:a3:af:e4:61:d2:ba:dc:d7:4d:86:50:28:57:77:fd:51:29:
d8:ff:76:ba:7d:df:ac:2f:d5:82:3c:64:e9:07:66:06:3c:5c:
44:93:0b:f4:43:63:81:b3:51:2e:0e:99:a5:30:c7:90:30:4d:
e6:59:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:22 2025 by rpki-client