Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
File: XfJyIcGPyv50iSvA6Xv17nw0T6c.mft (raw, json)
Hash identifier: CAYk9MKGRpb6G+Ot/KykaTZe1AF/iaqr6BGpPjGnTDs=
Subject key identifier: 3E:6A:B0:21:E3:85:15:8C:0F:0C:64:9B:12:39:DA:D7:F2:C7:0C:D2
Authority key identifier: 5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
Certificate issuer: /CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Certificate serial: 0194BC051632E599050734894729C7FD5E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
Manifest number: 0A15
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: D5MLLXN4CceB_y0IsVIPz32Ea_c.roa (hash: C5Fky/sLD5/418lsfJMNs8+3fuwIak8zmx88JyIH2s8=)
2: XfJyIcGPyv50iSvA6Xv17nw0T6c.crl (hash: LmsH5ATZY2UNHlvXzq2rMCFNI0lJXnVV/iyF1f7DcZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:32:e5:99:05:07:34:89:47:29:c7:fd:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df27221c18fcafe74892bc0e97bf5ee7c344fa7
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=3e6ab021e385158c0f0c649b1239dad7f2c70cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:24:3e:b0:c9:67:32:4f:ca:b5:4a:22:ad:
7b:b2:17:b2:b7:1d:62:5c:c2:6f:d7:56:12:f0:d1:
4f:77:ec:42:8f:ae:ca:e7:dc:a1:7d:52:0a:76:bf:
1e:eb:c7:03:8d:48:69:67:e6:c6:eb:e6:2c:3b:1d:
db:e8:a5:ce:53:fa:7b:cf:4a:15:bf:eb:e3:5d:f7:
8b:f1:5b:13:71:2c:ff:ca:da:c5:f9:70:63:3c:90:
ca:19:a6:dc:01:d7:25:5d:11:b3:84:31:28:73:87:
74:54:70:a3:29:ac:05:b5:ef:2f:93:df:61:55:97:
26:3d:f4:90:7e:ae:61:ef:b5:c5:f3:56:58:94:23:
8c:07:09:59:7b:12:66:d7:3d:6e:6d:02:df:87:30:
0c:7b:7f:5b:16:6b:2a:23:b7:ce:2c:ca:6d:b1:94:
67:e1:9c:93:10:d0:33:e5:37:e2:aa:71:99:dd:28:
80:e9:f8:b0:45:94:b4:46:a2:6b:f1:e7:b7:ed:93:
d5:a9:c7:a0:26:22:0a:bf:97:ce:41:bc:5f:0a:64:
f9:ca:f8:ba:a7:e6:7a:67:af:58:9a:af:90:98:ab:
17:02:54:51:0c:99:27:59:29:d0:6e:54:60:a4:63:
d8:af:99:23:68:10:0e:fa:e3:95:fc:be:82:15:46:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6A:B0:21:E3:85:15:8C:0F:0C:64:9B:12:39:DA:D7:F2:C7:0C:D2
X509v3 Authority Key Identifier:
keyid:5D:F2:72:21:C1:8F:CA:FE:74:89:2B:C0:E9:7B:F5:EE:7C:34:4F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfJyIcGPyv50iSvA6Xv17nw0T6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/028937-8903-495d-bc6c-f3e915ad3802/1/XfJyIcGPyv50iSvA6Xv17nw0T6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:64:9b:c2:7f:5b:b8:1e:ba:ed:ca:dd:f8:c7:f1:be:a4:c9:
65:54:31:a2:d4:24:49:4d:5d:82:b6:c9:27:26:26:ab:37:30:
b4:1d:3c:b6:21:16:54:48:61:67:19:16:dd:f0:13:c5:ad:13:
eb:b3:52:5e:8e:85:e1:a7:7e:f8:c4:99:40:66:51:49:bd:da:
8b:8d:80:3d:2a:91:05:db:1d:64:a5:de:f3:b2:e7:c4:16:c5:
5a:43:67:82:b2:b0:1b:90:d9:82:29:44:52:7c:c5:b3:c3:ed:
55:88:85:5c:11:63:cb:7f:53:e7:9a:ae:25:10:d8:22:2c:1b:
f0:94:13:d4:91:3d:29:6d:4f:a9:72:fa:15:36:da:e9:71:da:
0e:b2:a8:2d:cb:b4:fb:92:a3:42:30:97:d3:19:13:7d:12:7c:
ed:9a:13:82:1c:4d:c6:3e:7c:39:92:36:1f:bc:7c:b6:f8:f5:
a0:29:73:1d:90:dd:6d:25:24:bf:89:1b:35:13:18:16:3e:72:
e2:bb:cb:a2:f7:13:90:e7:8b:57:31:e5:c9:06:bf:b1:22:5f:
00:a7:cb:ea:a8:b6:4f:99:17:03:d0:f9:0f:61:74:f1:04:ad:
e9:74:22:41:17:06:55:ae:9e:da:3f:7c:10:d8:42:71:3d:c7:
42:5e:1c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:27 2025 by rpki-client