Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: R4qKj+iPrc//yYNQv1a+zZdH1eT8YHqYropEZn+CRIU=
Subject key identifier: CD:77:98:E8:4B:23:FD:2F:19:D5:A2:02:46:62:96:50:CD:01:EA:F0
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 0194BD4E95289ED60F894794D8F61A0F75AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: HUDPQx2FzGGKbzGZlchvllalbCspWPG5KVpsB9Y29o4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:95:28:9e:d6:0f:89:47:94:d8:f6:1a:0f:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=cd7798e84b23fd2f19d5a20246629650cd01eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:bf:b7:cc:2f:41:8a:79:6a:da:3d:41:e8:
a6:f2:ee:95:7b:15:1c:17:eb:33:12:a7:92:81:eb:
5e:e1:82:a2:95:c9:5f:28:c3:4f:24:71:6d:8d:b3:
7d:b3:c5:fd:c3:4a:70:9e:60:9c:99:3a:ee:d3:a9:
b1:23:f5:e5:38:d7:d9:91:15:7e:12:bf:32:c8:60:
ac:68:ad:91:f1:cc:7b:20:4e:51:09:9b:4d:43:2f:
8d:55:56:94:92:b6:14:84:1f:60:d5:25:4c:4a:72:
5a:74:22:1c:92:9d:a2:9e:d5:f3:23:39:45:b6:3a:
21:d7:d7:17:63:69:11:9a:f3:78:13:f0:34:13:4f:
fd:0c:40:3c:36:20:4a:af:81:84:cb:2a:e0:6d:b4:
d4:2e:0c:42:5e:f4:e7:18:cb:fc:f8:87:1a:d4:10:
f7:06:ec:23:4d:96:d8:10:9e:54:00:b8:5b:4d:07:
ff:e4:98:ab:1c:0c:23:13:fd:27:a0:64:f3:28:46:
8f:7c:ee:18:d9:2a:9b:eb:6c:dc:cc:25:3b:75:2d:
38:dc:5f:b0:16:aa:5d:5c:c1:63:ee:cd:61:d3:5d:
4a:81:67:5a:58:0b:87:bd:e7:20:f1:02:67:0a:29:
18:c7:10:a2:60:f6:cc:e7:74:34:93:39:64:39:81:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:98:E8:4B:23:FD:2F:19:D5:A2:02:46:62:96:50:CD:01:EA:F0
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:1f:c3:95:ab:b1:d8:60:db:b8:f5:ae:9a:ae:a7:5f:fb:
52:19:c3:7a:ec:a6:ab:4d:2e:a9:89:aa:a2:d3:6e:33:91:6b:
f3:7b:f8:ab:88:94:dd:e7:58:73:ea:da:53:9f:a7:59:cc:f0:
ee:ca:ec:88:7b:9d:f9:bf:d4:38:4d:d9:9f:76:0c:3a:e2:52:
b5:80:d7:e7:85:b6:42:b6:5d:d9:79:71:d3:25:66:28:59:b4:
a6:a0:6c:37:1d:64:6a:95:99:9d:50:78:f0:6c:3a:c2:4b:25:
05:1d:54:f5:fe:1b:7c:93:d3:9b:28:55:73:13:f1:44:55:94:
dd:4c:c1:34:da:4f:27:d9:75:f8:be:ee:c1:05:8c:43:bf:91:
4f:61:f8:e8:65:0c:24:15:77:d2:34:0c:49:ae:82:55:2b:18:
66:8b:38:89:bf:09:b9:00:73:b5:8f:dc:04:49:91:8b:e0:0f:
f4:36:fa:ba:19:2f:9d:02:74:58:b0:93:9e:9b:87:56:3c:18:
19:68:2f:c9:11:1e:40:60:e6:0f:06:54:64:be:79:29:cf:ea:
be:9b:2a:05:cd:f7:01:b9:54:29:4e:1a:51:1d:26:21:09:d6:
8e:d8:09:f2:e2:39:e6:94:d3:04:01:4f:db:bb:db:92:74:1c:
89:dd:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:40 2025 by rpki-client