Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
File: xg_8qdjKCPIT5goASMF_uwv2Dnw.mft (raw, json)
Hash identifier: Rcg8qYysp2sonmpm643JBHQK7sYKDsvhZofWY4zzNUs=
Subject key identifier: E1:2D:F2:77:C1:E5:BA:CE:08:B5:05:04:12:B2:F1:3B:9E:8D:CF:7B
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 0194BCE0BA9019C9A60F4AFBD91609AC39D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 11lEAhEOetLxn95SvRSXh-Lluqw.roa (hash: ReOSLE0b85HJRKU+RZhB6Hf7GgBYtQi4K1hsRO89zys=)
2: xg_8qdjKCPIT5goASMF_uwv2Dnw.crl (hash: VbkVyqevsz9PxlUVLKC8kR2ExRBnZIb/Yly3KMsAbWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ba:90:19:c9:a6:0f:4a:fb:d9:16:09:ac:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=e12df277c1e5bace08b5050412b2f13b9e8dcf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:4b:d3:b4:d4:a8:9d:b4:aa:89:b0:f7:65:
92:87:62:82:8c:3d:09:52:5a:ca:91:47:47:37:35:
35:89:cf:d3:ec:b0:e3:8e:a4:c7:9b:e7:87:24:81:
5c:1a:15:89:24:cd:44:70:ea:e9:4e:44:69:26:32:
09:db:25:c4:5f:99:6b:4d:5c:bb:3d:e2:4b:70:ef:
65:ee:94:4a:5e:1b:6c:05:de:0d:fb:17:4f:22:d0:
a4:41:91:b3:5d:71:7c:cf:b9:c7:c3:f7:54:02:da:
b8:42:20:31:a8:ee:8e:c7:68:5d:d1:2c:8c:9f:9f:
e3:40:06:cf:69:54:a4:56:3d:e8:73:48:fc:42:c4:
bb:2c:1b:17:9d:21:c8:21:df:d5:54:40:3e:8e:b2:
e4:31:1b:ad:67:da:31:d3:05:5b:78:d1:65:bd:e8:
fc:84:ce:4a:c6:9b:e1:33:d9:11:fb:46:b4:0a:ec:
e7:c0:fd:0e:86:ef:ba:a4:5b:99:96:2d:a7:46:ae:
de:f6:ea:4c:08:0d:85:eb:a0:06:5c:08:6d:45:f4:
30:d4:32:73:03:0b:ac:f6:77:79:23:80:58:08:2d:
d0:3c:b7:e5:2e:6d:dd:48:1f:d5:29:e0:19:d2:b4:
c2:ea:b5:ea:a9:e0:60:c3:01:c8:40:16:46:4b:6a:
23:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:F2:77:C1:E5:BA:CE:08:B5:05:04:12:B2:F1:3B:9E:8D:CF:7B
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:05:3b:d7:69:93:f0:d9:00:7b:69:c3:73:bd:b1:5d:b9:
51:f9:ae:90:ea:6f:46:99:99:c3:c3:3b:34:ee:26:18:34:2d:
a4:d9:2a:0a:83:73:e0:2b:41:ad:61:4a:98:ba:bb:d0:2f:bf:
68:68:d3:f0:4d:37:00:18:1d:0e:ca:80:96:38:38:91:2b:75:
26:74:99:15:65:71:1f:41:3c:13:96:2f:61:aa:ab:d3:10:3c:
f5:46:1d:3d:6a:25:08:33:c0:40:ae:98:8d:71:37:fb:6a:d1:
52:98:09:54:1c:55:80:9b:d3:30:b1:1e:4a:80:43:01:46:5c:
de:92:61:2b:8e:bc:fa:99:d3:d4:00:06:85:7b:36:dd:b0:03:
c0:0d:d7:20:89:6f:bd:b3:a5:b4:e2:b3:cf:3e:a6:04:a9:ee:
85:57:53:99:7d:22:17:e4:d5:7d:6d:a7:50:1c:ef:cc:78:d6:
3a:42:c0:50:e6:57:73:91:49:53:d9:38:83:68:e3:ca:fb:ed:
2b:ef:07:c6:c8:09:e7:5d:54:e7:75:88:ef:f2:9e:ad:ac:9a:
65:86:68:f7:d3:67:33:45:78:58:19:a3:f2:be:ef:d0:bd:eb:
07:ce:6b:73:ba:92:52:b0:51:5a:ad:e3:5d:c0:bb:e5:8e:9d:
5e:81:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client