Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: LtQ/k9BSaIJfp61UB5jAd6LXJ2zwt2685RhfaRbOkgM=
Subject key identifier: DC:CA:B3:CB:CE:7A:F3:87:92:15:29:17:34:30:C7:C1:93:5D:FE:0F
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 0194BD17966F5A2FED22DB946BB0F5C870C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 0112
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: P7g82oQa9maLUZf-zyJXFEwQ_Tk.roa (hash: R1Jxxc/Qby3IEt4xnho0adyCsC1rCUaoaz24WlyrPXE=)
2: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: /vQM7RZjyqZ4KXCJR4aCk5kb+W7RwHqMNcMHYKd4Ydw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:6f:5a:2f:ed:22:db:94:6b:b0:f5:c8:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=dccab3cbce7af387921529173430c7c1935dfe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:db:b0:ce:fa:1c:b5:ae:bb:92:ec:12:ba:
65:e4:59:48:81:13:e6:90:42:db:61:16:df:c8:32:
fe:2c:22:a6:b9:3e:df:3f:db:b9:d3:cc:6b:94:29:
4d:5f:85:ef:f6:df:4a:83:d0:3d:a8:d4:01:a6:25:
f2:6d:04:b4:55:57:be:7b:bd:e9:c4:94:5f:5a:2f:
84:3d:bd:f0:43:75:bb:65:e7:34:04:15:fd:7a:3d:
06:57:a0:b4:a5:56:69:a7:e8:23:23:ab:11:a5:c9:
32:f0:b3:34:3b:c0:99:b8:c1:86:a6:59:34:1d:ed:
bd:43:f6:6e:98:53:98:07:b4:db:73:65:b5:71:cf:
e7:00:9a:9c:71:c2:59:e5:68:7c:71:cd:94:45:63:
d4:51:80:71:44:50:c1:a3:38:17:d2:67:cf:b5:ba:
96:e6:aa:3d:44:b9:db:64:89:57:f1:ce:a3:cd:be:
ce:fe:63:b3:c3:b2:e3:0c:5a:fa:22:b5:01:08:3b:
a0:ff:e7:1b:05:33:d7:5e:e6:c9:69:3f:34:65:db:
20:3c:a5:8e:de:ad:ca:d4:5c:65:7b:f3:ba:73:79:
fb:c9:8d:ae:5e:a6:ee:f1:36:40:9e:5a:ec:c6:2a:
b9:69:10:73:a3:04:eb:6c:72:24:32:5b:aa:22:42:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:B3:CB:CE:7A:F3:87:92:15:29:17:34:30:C7:C1:93:5D:FE:0F
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:02:d1:b0:c8:35:33:75:0a:cd:73:8f:fa:03:54:30:88:
c1:42:63:e8:fd:d4:cf:68:43:9e:a1:03:bf:01:b4:e2:79:1f:
e3:bc:6b:75:e8:ba:b1:c6:03:b9:b7:a4:ec:5b:bd:07:cd:80:
ee:e4:b2:8c:fb:4a:2e:48:2f:51:6a:97:74:94:f7:ef:54:74:
8d:7c:b6:ed:88:3d:58:fe:28:19:6b:57:7b:8e:72:de:de:11:
68:d2:24:11:18:7d:b4:4e:49:05:5d:9f:e7:ea:a5:27:d4:49:
3c:c9:6c:a8:88:5e:7a:50:35:0d:29:83:dc:e5:64:ec:1e:2c:
13:59:16:8d:57:ee:b3:f8:d2:5f:1a:74:f3:bd:8a:72:f7:d4:
c2:9d:88:ae:b3:a5:e5:d3:0f:d8:b5:63:13:43:47:af:14:53:
aa:db:d2:dd:20:c2:af:d3:1e:ea:39:1f:8c:1e:03:ed:98:92:
2e:00:f4:ae:ad:43:d0:38:93:28:d5:8d:bc:13:0a:ef:00:5b:
d0:fb:d6:b0:77:c4:a6:64:77:fd:b9:42:fc:e6:5c:41:53:96:
9c:c7:88:fc:31:c0:36:54:e8:3a:df:41:e9:d1:cb:95:2f:3e:
14:f8:ef:2a:9f:ea:34:65:a9:2a:68:7a:d3:e0:47:08:65:fb:
f8:99:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:35 2025 by rpki-client