Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
File: XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft (raw, json)
Hash identifier: 3V/2PY7cH/BBB9l0Y36gfR/ig8i4y018+sX3+XXkbKI=
Subject key identifier: 4C:AA:96:32:3A:47:1D:29:59:F1:BE:44:76:D2:DA:72:27:EF:7C:34
Authority key identifier: 5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
Certificate issuer: /CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Certificate serial: 0194BD17DCFCC6E3284C4F18A3A2015AD288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
Manifest number: 063B
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl (hash: zAEOcfohU1FlknZNMbYOWbqBNbHJCGwV8SgEmbQ9nfg=)
2: zw3OOzLu7F0rCvVUhFlHNjK6_48.roa (hash: EC4+NtSiW4UmHKtwZdLsHrR4X7fUOJDCpzkjNoARw5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:fc:c6:e3:28:4c:4f:18:a3:a2:01:5a:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2a133ec2fe6067b56496e819d5bfb4e4471f94
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=4caa96323a471d2959f1be4476d2da7227ef7c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:97:fb:11:a5:34:48:be:08:a8:5e:00:d6:
52:80:22:a6:ee:8e:37:47:55:ad:43:2c:a2:60:fc:
b8:c5:84:5a:5e:73:c3:d9:ea:28:c7:00:38:f1:84:
9b:ef:51:36:74:4e:ac:ea:51:72:11:ac:30:97:f6:
5e:e8:3e:22:28:87:fe:6b:40:ca:e0:da:78:d1:13:
98:b2:1c:ed:37:d3:2c:56:94:03:53:ab:dc:91:c5:
71:3b:b9:9b:d1:84:09:ba:ea:a6:e5:7b:97:d9:5e:
cd:64:16:83:3c:c4:67:86:38:c7:e8:c7:db:a6:52:
d4:b7:ff:a0:92:2c:32:28:bc:7f:da:b6:b3:1f:4e:
8a:f6:b5:d5:70:e8:d5:d1:15:8c:e0:d8:26:6b:df:
e2:df:00:71:6d:83:bb:6b:4c:b8:12:fc:b8:fe:23:
5e:8c:8f:50:94:b2:fb:9a:fa:e5:fd:27:e4:dd:20:
04:bd:f4:6b:bf:71:b6:1f:56:22:c5:2a:6f:80:c6:
8e:1d:d9:e9:21:59:3a:fd:c5:c5:9e:24:bb:ae:89:
3e:ff:1f:49:88:53:f6:d4:31:2f:00:15:26:c4:74:
f4:10:25:12:ea:d3:f7:31:d9:1d:ca:d5:e9:71:22:
5e:6e:ec:81:fe:07:90:b5:28:7f:f3:75:83:53:60:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:96:32:3A:47:1D:29:59:F1:BE:44:76:D2:DA:72:27:EF:7C:34
X509v3 Authority Key Identifier:
keyid:5F:2A:13:3E:C2:FE:60:67:B5:64:96:E8:19:D5:BF:B4:E4:47:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyoTPsL-YGe1ZJboGdW_tORHH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/161d2f-ec87-4718-9364-fa2c15371726/1/XyoTPsL-YGe1ZJboGdW_tORHH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:4e:9c:06:bb:81:cc:25:61:2b:fb:44:6c:37:fc:9c:52:17:
ac:ba:8f:2d:d5:27:ee:14:70:07:b5:22:c2:8b:97:cc:23:d0:
b7:b1:0e:f8:57:40:63:45:09:34:de:44:f8:1c:84:da:e3:8d:
0b:fa:9a:78:f4:31:0c:59:9d:33:1e:46:8f:a6:c2:dc:87:7c:
86:a2:5d:cd:88:b9:db:13:83:de:a4:28:e1:8b:f2:b1:f8:4c:
f8:41:92:d4:c4:8d:34:57:d4:cd:77:17:ed:d2:51:d3:2f:52:
19:f3:a7:9b:87:16:c6:f7:af:54:9f:da:27:ad:3c:bf:34:77:
0f:c6:e8:61:2c:8d:a5:a4:5b:9d:18:bd:70:c8:d5:c9:57:4d:
1e:f6:8c:83:eb:50:03:c1:2c:1a:df:13:97:70:07:0a:c9:59:
59:c8:52:55:9a:8d:ca:2a:1e:66:c7:a0:1b:62:d1:47:28:ba:
56:3a:5c:ff:6f:3b:d7:97:8c:53:ab:a9:01:9a:9f:36:c2:6b:
63:8e:27:7f:7b:a4:ac:34:45:2d:6a:b3:87:94:11:7b:24:95:
83:5f:b6:32:68:74:49:30:08:ff:9e:c0:bf:e7:06:80:84:e4:
e4:c1:10:02:29:29:53:82:46:4e:f0:ce:85:5f:ca:b3:93:6e:
9d:31:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:20 2025 by rpki-client