Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: yU6xs3DIPHrVZhvC5TtuDIbtI7+4fempo9QAwj8SCQw=
Subject key identifier: 97:78:A7:C7:C8:35:A4:CD:E8:BC:D3:07:97:ED:95:A4:D6:E6:08:A7
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 0194BCE0D7B8FC30F3F0CF949D8F7634C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: kMIoPYj99g2K5sWXNcD0fsxHkHM.roa (hash: FopABAV6PSptIp6OTBNiTRgtYU723NWq9ChEZhzR3FM=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: fC7DN/1hX6hWwPBbdpGuGySbrATTO0sY8MsbpXutd0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:b8:fc:30:f3:f0:cf:94:9d:8f:76:34:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=9778a7c7c835a4cde8bcd30797ed95a4d6e608a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:d9:7d:41:c1:41:ea:d1:14:fa:c5:79:a8:
64:d4:30:14:72:78:a0:ca:7f:28:69:4e:27:4f:e9:
fc:d5:89:8b:49:ca:ea:b1:01:d6:c3:0e:c5:53:33:
f0:37:3b:83:ad:5d:99:78:60:a7:dc:b8:64:51:dd:
a0:ac:ad:8f:b2:9a:44:27:4e:62:98:ce:a3:02:6f:
b5:d3:b2:eb:3b:3a:75:8a:c7:3f:49:72:e1:7a:51:
e0:18:1f:0c:a0:ce:36:fe:39:0f:e9:2d:0a:a4:62:
98:f9:16:2f:70:10:16:0b:36:13:28:a8:28:02:ed:
91:ba:34:25:c6:b7:5c:5f:09:bc:08:15:46:df:80:
09:e7:01:5c:38:56:a4:2f:25:ae:97:11:f9:83:59:
2a:1e:a2:b1:ed:fb:54:5c:33:1a:97:5b:0a:69:37:
af:9b:da:db:e0:71:7a:81:02:5a:08:47:6f:f9:7c:
f6:b7:65:31:06:66:5a:2f:ba:c1:39:b6:ba:b1:6d:
ce:7c:fb:2c:77:ac:10:22:7e:31:8b:fb:b4:6c:a6:
d2:d9:8e:cc:8b:91:4d:75:18:e5:71:6c:48:b8:f6:
f9:c3:c3:02:16:54:0a:04:17:fa:7b:bd:b4:55:3d:
71:25:39:ab:1c:a7:49:07:f2:5a:04:08:07:be:a4:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:A7:C7:C8:35:A4:CD:E8:BC:D3:07:97:ED:95:A4:D6:E6:08:A7
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:fd:ee:42:e6:a8:a1:15:d1:73:c6:83:a3:8c:e4:02:eb:9d:
15:2a:b1:be:13:22:3a:8d:b7:d4:91:8e:ab:19:04:6a:19:fd:
a1:d2:9b:18:1a:bd:fe:39:70:cd:6a:34:76:0d:a2:2a:bc:d5:
25:51:8b:4c:c2:59:b0:d4:5b:9c:04:44:ed:d0:03:02:96:36:
13:ba:7e:0f:a8:9b:3e:01:79:a2:f4:cd:f7:1c:ac:77:3e:ea:
5d:d5:e0:72:2c:d2:fa:c0:74:fa:1c:53:c5:e9:66:22:62:08:
ee:21:ac:63:05:f2:f1:8b:95:66:b7:eb:a9:09:cb:36:fc:6e:
35:4f:ed:ae:92:0f:38:72:df:ce:b6:82:2b:9a:41:ed:c2:53:
30:ec:51:0d:75:c2:f8:47:da:92:65:41:c3:1e:71:01:6f:4c:
03:cd:e8:a7:6e:5b:a3:00:2b:99:66:45:1f:4a:06:5d:bc:97:
b7:51:d5:7e:67:c5:f2:24:a6:62:d9:64:60:a9:f5:6b:2b:c5:
7d:62:63:e1:6d:f8:b0:cc:11:03:b7:3e:34:7c:76:23:83:c0:
bf:bb:03:93:34:00:80:c5:39:d0:db:4a:61:f8:8d:5b:b2:11:
2c:cf:71:22:a7:13:2b:ee:a4:18:23:82:ca:56:24:1a:50:61:
45:f3:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:41 2025 by rpki-client