Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: Qp8CDdhwBjYuKJDAjpzS72g+YmOFtPONtpyOQe1xh7A=
Subject key identifier: 6E:87:59:E4:5B:03:23:FA:DA:A1:6F:C3:5F:D7:B7:93:0B:80:64:BD
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 0194BCE0A3A98DE0DE276E5EDEEC7B79FB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 091A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: CTKsDAheRPNEjY1iZEqRw6LzDEV9hAJHS3XFhIRPg8E=)
2: bm8bVIPNaA-bltdEZPHxvRw4XQU.roa (hash: DdBeXwj6zhT54fs1VrM1Iq2GimR5mvINmSrgTPAY9tY=)
3: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a3:a9:8d:e0:de:27:6e:5e:de:ec:7b:79:fb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=6e8759e45b0323fadaa16fc35fd7b7930b8064bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:48:27:75:20:5d:dc:4e:bc:ff:83:6c:46:
f7:78:fa:ce:eb:fb:81:a2:49:97:47:b8:32:71:55:
32:6d:94:d4:43:0f:ab:4a:9d:e0:56:58:31:87:80:
db:4b:ae:52:66:8f:21:b1:ef:44:dd:37:4d:3b:29:
bc:a6:d1:0b:8c:f5:b1:81:11:e0:4b:0f:40:a8:69:
ca:5b:27:9d:9d:88:ee:fd:11:3b:4c:a8:c2:fd:4e:
a0:ef:45:52:5e:0d:3d:35:5d:67:a4:7d:f7:1e:1d:
66:85:ff:a9:80:36:93:9a:d1:06:78:43:67:be:1b:
70:09:de:c5:c0:90:85:cb:3a:5f:8c:77:08:00:d0:
08:ee:fc:a6:33:ee:77:48:2b:58:22:21:b7:fe:64:
ab:f8:3e:c9:4c:bb:01:42:95:26:b3:78:03:ac:e3:
f2:80:3c:85:20:f3:3d:4e:c1:f1:c4:3d:bf:41:93:
3f:d7:74:b5:57:b3:fb:09:40:d6:85:cc:7c:f6:7a:
42:a0:75:e2:c8:61:07:b0:88:06:5e:03:04:f6:55:
12:09:2a:8a:55:f4:68:d6:75:b5:c8:d6:44:0c:a6:
35:92:e6:bf:a5:23:89:e7:bb:5f:28:28:73:cc:11:
08:7e:30:1e:8e:7d:e7:74:f1:de:ef:a6:b2:12:06:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:87:59:E4:5B:03:23:FA:DA:A1:6F:C3:5F:D7:B7:93:0B:80:64:BD
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fa:4f:e2:52:69:2b:27:a8:36:62:98:3c:11:ea:0b:03:cd:
ce:21:bf:ca:3d:41:8b:af:05:5f:b0:c5:8c:37:7f:33:3a:7d:
ea:a0:50:24:7e:0c:c7:ae:2b:08:94:57:81:4d:7d:8a:47:04:
42:5b:e8:3b:9c:77:f3:be:6e:9f:09:9e:af:41:a8:a7:38:69:
72:cd:ad:dc:20:35:ee:94:83:77:f7:d5:3b:0e:db:d6:68:7c:
ca:28:7b:9f:56:a9:57:b1:e7:cb:de:ed:76:8d:4a:f5:e6:a5:
7b:45:b3:cc:74:44:aa:90:dc:f9:c9:a1:1a:3f:39:dc:83:03:
f9:be:99:5c:dd:44:0b:52:54:f3:a3:bf:03:a7:17:f1:84:cc:
b6:f5:3c:bb:3f:6b:17:8e:86:69:26:df:b2:43:04:5f:4b:92:
65:9a:0f:8e:94:9c:c9:76:11:42:14:1a:fd:e0:94:9e:57:94:
37:c0:35:dc:26:cb:c9:18:a5:a6:7d:10:63:70:e9:5d:58:89:
46:d7:19:c1:2b:d2:e0:40:8c:93:1a:65:39:7e:65:ba:20:14:
07:26:ca:6b:35:1e:b6:6c:ba:b3:cf:7f:ac:23:1d:48:f5:f8:
cc:7c:ca:b4:07:86:d6:00:f4:da:01:54:d8:d5:1d:25:8a:5e:
38:9e:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:36 2025 by rpki-client