Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: Gu2QRa3As728SCNxpllkjkvZwh5v78swKzLGTUeGr8o=
Subject key identifier: 5B:A2:97:8E:47:07:72:3B:0F:4C:A3:B5:76:E1:F1:84:4E:A6:8B:6B
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0194BC72F63E00D4D02B2E46C488F1174213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0353
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: 6MomF24SoPaNk6ERP73wy8mqx3c.roa (hash: IjQTHFK2Z40w4CuSFshJCdouXIm82jCIjL5J78qv4kA=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: +vQYiUAr++zwuKVKw7PcKgObZuijLwCVo7PExTi77a8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f6:3e:00:d4:d0:2b:2e:46:c4:88:f1:17:42:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=5ba2978e4707723b0f4ca3b576e1f1844ea68b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:d3:f3:c1:e8:ed:b8:8a:46:44:08:2e:4f:
d0:6d:be:21:3b:41:c7:38:73:3c:64:15:03:f4:6c:
3e:8b:15:b2:97:62:47:42:0b:1c:a0:e5:73:2e:de:
40:3c:c1:5c:85:e7:e6:f2:9a:81:47:ee:89:29:e9:
13:24:8c:ab:6f:3f:a6:4f:66:28:8b:9c:34:7a:56:
44:fc:8c:4b:57:16:bc:d8:d0:01:d3:53:55:54:cc:
cc:81:44:df:c7:dc:aa:4c:67:18:88:c8:69:bb:b4:
8a:4c:06:7b:3a:b4:f6:a2:c5:3b:e9:ce:20:82:53:
d2:1b:c3:8d:35:6a:ac:a5:c5:d0:36:21:a5:04:a1:
40:7c:3f:5a:94:d1:88:f0:4c:97:fd:1c:80:ac:38:
18:53:4f:7b:73:4b:1b:82:3e:e4:a1:cf:a8:46:9c:
f3:73:d0:47:55:9b:f2:a8:09:24:e5:dc:23:7d:c1:
ac:57:ea:7d:2f:f3:7b:6d:49:0f:2e:27:f8:5f:92:
56:b2:a0:ec:7a:61:42:95:2b:6a:3b:6d:e2:93:8c:
44:91:6c:90:91:59:8a:e3:8d:44:bf:ea:ea:87:fb:
2c:d3:34:fa:3d:15:84:22:9b:97:97:dc:a9:ad:22:
8e:e8:3b:79:6b:64:fd:7d:11:43:d2:09:69:a2:79:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:97:8E:47:07:72:3B:0F:4C:A3:B5:76:E1:F1:84:4E:A6:8B:6B
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:68:d7:8e:b2:98:df:65:e0:a8:58:a5:ec:b4:d7:f1:82:2c:
a7:94:0b:cd:36:ec:8d:af:64:da:a8:26:dc:6c:b4:ac:e5:cf:
87:82:f5:ab:c7:e5:2f:af:a7:9a:64:01:c8:5e:3b:12:51:f1:
40:a5:2c:0b:db:2e:21:a9:88:12:28:ad:18:41:bb:18:72:59:
c9:57:ff:b4:d9:12:9f:4a:ef:32:96:db:3d:d8:90:7b:6d:9a:
ca:32:54:d9:bc:06:fa:4d:4b:0a:a7:7e:82:94:2d:fe:bb:12:
5c:b8:38:29:cf:39:02:02:b0:fd:ed:7b:1f:66:e5:39:52:2d:
1e:f8:75:04:7e:5c:8a:ee:82:b8:0d:ee:90:48:9a:4a:68:6f:
7e:10:1b:03:23:d9:7d:50:2c:04:93:32:a8:48:f5:82:b3:22:
35:d6:c8:7f:f5:f8:6a:3a:ac:b2:2c:14:19:9c:b9:5a:3d:7b:
7e:6f:2d:26:41:ab:86:c8:df:6a:69:e5:11:f4:56:6a:94:bc:
53:fc:87:cb:c4:ec:9f:52:6d:7b:0e:5a:3c:fd:f5:b9:69:12:
8d:f1:42:99:1b:10:aa:2f:de:23:24:72:49:d0:a5:e6:66:83:
56:0a:8b:e3:33:a6:cb:44:06:87:29:45:8a:33:c4:d8:4c:b3:
a5:5b:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:36 2025 by rpki-client