Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: 3GlJZi8HyMg0y1VOHIX4OaZjvpLe9D8vQZF2fIUhobY=
Subject key identifier: 6F:CB:18:3B:C3:34:D8:2F:B0:79:09:B5:E1:CA:64:69:38:6F:6A:42
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 0194BBCEDD06F3C8596671C3F8C204768713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: j+NTR0oba9ugXW4NPpCQ9+mLVmvDPJQpLyR2tCBvPN8=)
2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:06:f3:c8:59:66:71:c3:f8:c2:04:76:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=6fcb183bc334d82fb07909b5e1ca6469386f6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:82:3f:f3:bd:5c:59:40:d2:4c:52:c5:41:
68:bc:04:61:a9:fb:15:04:36:ab:f1:da:e6:31:33:
b1:f8:fd:f0:11:e0:84:4f:4e:e5:e2:70:a2:8a:c4:
24:47:b4:f9:97:81:d7:e7:8b:65:15:36:ea:1f:88:
c5:02:bf:ab:6a:77:45:9a:e5:26:50:12:f7:58:fe:
e9:d0:fa:ee:03:b3:a1:04:74:b7:d0:e7:28:44:a0:
93:b5:92:fd:84:af:e2:30:c9:24:e7:ad:53:b5:ad:
93:97:e9:5c:7f:ac:bb:67:e3:47:a0:00:54:ba:04:
83:39:1e:dc:a5:02:ab:98:2c:fb:16:9c:48:2a:e2:
c9:89:89:15:69:99:f4:c9:3b:d3:85:95:6a:2b:08:
0a:6e:a3:db:f0:37:d7:1a:0c:1b:81:71:bb:69:ea:
39:bf:7f:e0:f0:d5:66:00:e7:9f:2a:88:66:bf:9a:
ad:6f:ca:c9:b3:dc:f9:c7:9f:7f:ce:fa:63:1e:d8:
ad:be:c8:1c:e3:d8:99:5f:e3:64:25:bd:a3:2f:a8:
12:5a:a8:a7:3e:b3:29:e7:a0:3f:11:ae:28:72:25:
67:7c:aa:1b:08:a3:a6:09:27:d8:07:9f:e8:c0:d5:
50:ee:de:a7:e3:9f:61:63:3f:1e:c1:50:6a:82:77:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:18:3B:C3:34:D8:2F:B0:79:09:B5:E1:CA:64:69:38:6F:6A:42
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:30:26:5a:77:65:64:75:8a:66:ac:c7:3d:a4:c4:d9:7a:
45:bc:29:a5:8a:e4:d8:db:56:d5:f0:a5:69:8c:ea:59:c3:96:
d5:75:7c:41:bd:78:57:b6:06:5e:0d:a0:38:64:e7:df:8f:4d:
46:a4:57:0f:ee:1f:6b:79:72:9a:ed:ad:34:96:89:38:04:6e:
fa:0c:fe:d6:4c:01:2f:53:8a:de:84:54:77:db:cf:db:64:da:
18:b2:91:f1:19:ba:14:63:6c:00:7a:ed:2c:d9:4b:ba:ba:ec:
d6:b5:21:ff:6a:6b:c6:58:6a:d2:0b:7c:4e:85:a2:4a:6b:2f:
78:4d:9c:a5:7f:f1:91:b3:5c:fa:dd:43:6c:ea:05:d3:2c:95:
75:94:3e:94:c7:eb:f7:86:a7:f9:65:09:a4:96:45:8f:f4:ba:
06:3e:08:88:a1:79:26:56:46:1b:13:8c:ee:f6:1e:b6:c5:3f:
37:43:e3:84:0e:db:e2:b8:10:32:c6:45:e8:17:04:f3:e8:6f:
d8:39:13:ec:dd:07:e5:c6:93:5d:73:e3:1e:3d:f8:43:a5:c5:
3e:e0:18:66:e4:35:48:50:21:bc:02:2f:10:04:bc:33:fe:cb:
24:53:d6:e0:7a:dc:f4:53:a2:6a:d9:52:52:d3:02:ea:ce:86:
f4:fc:8b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:25 2025 by rpki-client