Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: 1EBPkIrzcPQYtf+LkDt8W+YS1i9oz8FY++M1AGoOoRA=
Subject key identifier: 34:DA:7E:1E:35:44:B5:7A:D5:82:2A:7F:9D:49:0B:ED:3C:9F:17:61
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 0194BCE09BD8203541BCD6B7B02CE381C9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 129B
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: BhzUAWAmqJa_PA-L7yjY7FT9Af0.roa (hash: MUBzsjqvQyVXx3qdpZLrInMDFQqgnqT5UakUiyluBrA=)
2: HCKNxU6TCLkO6DVpZ3lA90mNVKU.roa (hash: Xh6VoAi/B2yrRWzytdRx21/eskMRRaoQHczwQgtUHG8=)
3: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: w/QunHK5VZBYr+mCvCGvkQhIzRJgi8nJaTDrqfYBwvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:d8:20:35:41:bc:d6:b7:b0:2c:e3:81:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=34da7e1e3544b57ad5822a7f9d490bed3c9f1761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:28:24:99:ae:da:df:1b:68:ff:98:9f:d8:
9d:4a:c9:e7:d4:58:2a:11:70:2d:d7:bc:7f:da:8a:
c2:a0:02:ac:d4:db:f3:f2:89:30:1c:64:3d:c9:7a:
45:79:96:07:25:63:19:92:c7:c5:d4:0f:02:54:6e:
2d:9c:d1:27:49:97:20:90:04:eb:8b:64:57:a7:9c:
c2:c9:a5:df:3c:c2:f3:8b:d1:93:90:7a:0a:43:77:
ba:16:a0:e0:cd:50:9b:19:a7:af:6d:75:7f:e0:64:
c9:56:71:b5:24:1b:7a:89:05:fd:e9:a6:61:a0:33:
ad:b4:14:75:0e:1c:c5:66:dd:59:f6:65:d0:2c:a6:
95:fb:89:0a:8c:db:bc:d4:f3:96:64:92:ea:78:6c:
82:20:c4:10:bf:97:de:6a:7b:14:58:54:78:43:ac:
0f:35:ec:16:10:00:a7:f1:c7:22:ea:39:7d:1d:f7:
ec:ab:d8:ec:b1:8c:f6:0a:d7:01:75:37:1f:10:5b:
8a:9a:69:f9:b3:64:3c:a6:da:53:50:be:56:48:13:
8f:82:4b:52:0d:48:23:2b:02:8c:7a:84:cc:ca:4f:
a4:50:63:56:84:72:19:6f:70:2d:83:c6:48:41:9b:
5a:2f:6a:39:87:03:0f:8b:cb:a3:cf:35:d6:6f:93:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:7E:1E:35:44:B5:7A:D5:82:2A:7F:9D:49:0B:ED:3C:9F:17:61
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6e:62:45:1d:b7:a4:54:be:6b:bf:7a:e7:c2:b4:be:55:d6:
69:1a:9b:c0:3a:ba:81:b1:93:94:f7:ed:fb:b3:f2:c7:78:df:
3d:67:fd:a7:0d:8f:d8:26:16:c9:2d:57:fe:47:b1:83:a5:9e:
d1:97:0f:42:c1:13:47:a9:50:c3:01:41:67:37:f3:a7:64:2d:
a6:de:5b:2b:29:a7:be:35:5f:59:dd:4b:41:bb:5f:2a:1c:5d:
ea:95:09:be:1b:be:23:7c:f8:f2:64:c3:21:2d:c4:01:c7:02:
8e:24:06:03:2a:07:e6:8f:30:9a:ba:db:87:a1:ca:e9:b4:50:
66:3b:18:0a:b4:93:0d:43:13:f3:90:02:c2:bd:a0:93:af:2f:
24:7d:f2:4c:61:42:24:f3:f8:31:06:f1:43:17:36:9d:ee:80:
9c:4e:b5:5a:24:2e:f0:e5:8c:42:e9:27:81:6a:76:cb:b7:d2:
4c:db:91:67:3a:1d:21:12:a8:a1:74:57:d0:d7:d1:79:39:f3:
5d:21:b1:7e:41:03:6c:df:f7:28:b0:89:45:70:5a:5f:ea:8f:
28:d9:1c:a9:15:e3:36:d5:ee:9b:0a:5c:72:35:ba:4b:ac:88:
05:8d:9e:6f:24:0f:c6:99:b3:44:1b:5b:7e:57:0c:7e:2e:6d:
9e:f1:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:13:21 2025 by rpki-client