Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.mft (raw, json)
Hash identifier: H20Hhbqp1eTwedA+TLW1sqYdn9BWrKrjMQkAnd5Hw/Q=
Subject key identifier: 95:FA:B2:19:13:1D:CE:4A:83:58:CD:37:3A:2F:D2:CC:81:AE:B3:96
Authority key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Certificate issuer: /CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Certificate serial: 0194BC04D4AD47D5C212BCC38AFFA92E9B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: SFEaLCcaSPqW-NAacKDtjgx58ew.roa (hash: OMHSr2CJgaO8nulVRKhQLnfgujY5dtYfYIWPqUiWupI=)
2: X89dJaNmGj5y0nKUVPf_gEtDvbk.crl (hash: TshvpwNwrr+Yeo2CZUv1mtDnvHSUBUlm/OCHLJvK+bw=)
3: XiX2H6KV22GA3qGzZguRskRxlFM.roa (hash: vDk26PHouRJN4yP1V97RLW7KQYk0VPaf7UJ2taG9B6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d4:ad:47:d5:c2:12:bc:c3:8a:ff:a9:2e:9b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=95fab219131dce4a8358cd373a2fd2cc81aeb396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:0f:52:d1:fd:34:0e:bb:54:8b:7a:ee:25:
47:9f:60:5f:04:2a:1a:2a:6c:6e:52:c7:6d:8f:86:
cc:9a:a3:dd:16:ed:dc:1e:de:5a:d2:56:43:65:db:
58:28:6c:e1:50:35:96:b9:2d:e3:46:f0:87:cd:1c:
16:85:80:31:69:49:6e:5b:39:7a:3e:c9:91:f4:66:
a2:60:6c:fc:ff:08:80:9a:53:74:52:fb:8e:ed:ab:
7d:ff:08:dd:0e:1b:f2:89:3d:3b:f8:5b:b8:4c:16:
1f:f6:d6:5e:73:57:a4:f2:80:41:d2:98:40:42:ed:
99:b9:ae:9f:5e:7d:6a:e6:25:50:19:cf:f9:55:ba:
b3:cb:92:e7:87:89:49:2b:94:f4:bf:da:8c:67:8b:
31:7d:c1:b9:62:d3:7f:15:92:6a:26:9f:96:4c:d0:
67:60:e0:54:76:57:9f:03:75:f9:0b:d7:b1:6b:bd:
6d:90:15:c0:11:af:ba:32:4d:93:69:d8:f5:a0:68:
f1:f7:b0:cd:88:69:33:0a:7f:d2:4b:e7:2c:a5:87:
97:2c:9a:03:95:ef:fa:b9:45:d3:37:68:a0:47:11:
ad:ca:76:3e:0c:36:fb:01:ef:c6:25:cb:74:e3:e6:
7f:a3:a4:ff:50:37:6c:37:41:aa:ea:91:5d:9b:8d:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FA:B2:19:13:1D:CE:4A:83:58:CD:37:3A:2F:D2:CC:81:AE:B3:96
X509v3 Authority Key Identifier:
keyid:5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:ca:b5:80:98:6d:1b:33:5f:1a:de:48:47:a8:35:43:09:
eb:84:4d:75:c5:39:c6:d5:95:28:4a:63:c2:a7:e4:d5:83:5f:
5f:d1:ca:dc:72:76:90:35:e1:4e:6b:bd:b3:66:08:13:69:0f:
05:05:1b:9c:44:91:07:49:71:9c:63:a3:33:9c:c4:25:08:b3:
d8:d2:76:3b:ab:86:79:a6:74:38:46:d3:b9:a7:d0:0d:1a:3a:
12:86:18:82:31:52:6c:28:5b:86:f2:1d:5b:bf:34:48:7a:01:
b2:76:c6:89:1c:de:2e:0b:de:4f:64:95:1f:d0:0f:6b:8b:e6:
6f:88:92:7b:55:c5:a3:82:12:80:14:dc:80:51:f4:76:f0:09:
de:7f:94:a0:0c:3a:ee:4c:44:5d:c1:1e:c6:87:59:5a:2b:75:
d8:1a:e9:00:bc:8a:fe:79:fc:54:83:88:e1:5c:56:b5:0c:6d:
b3:02:32:23:84:c1:7a:d1:da:94:5b:1b:04:b6:9a:99:3c:58:
da:e5:d5:18:ae:7c:a9:8f:9b:bf:f3:e1:fb:d4:77:2e:c7:89:
7d:5a:7b:c8:41:aa:be:77:ef:b5:73:20:24:15:44:64:55:27:
fa:fe:62:5d:54:bb:74:ad:34:e7:02:fa:79:45:b0:5b:00:02:
81:b7:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:01 2025 by rpki-client