Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: /UXn+ERqNWR7hB1n9NZ46bkXRGV8EJb0NuiCIfO8fFU=
Subject key identifier: FB:99:E9:D9:40:0E:C9:B1:B6:B2:5A:A9:E6:7C:8B:60:2C:83:6D:C4
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 0194BD17BDB95DE554B3071F886BA2E2EF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 0DD5
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: iSpZjaDcNZhryQjIjLMwnkG0+gYHED9h+IK/EagBJXg=)
2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bd:b9:5d:e5:54:b3:07:1f:88:6b:a2:e2:ef:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=fb99e9d9400ec9b1b6b25aa9e67c8b602c836dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:e9:ad:5a:a4:1b:be:4d:38:a8:02:61:66:
70:db:3c:24:0f:d2:db:ad:2c:34:30:b4:aa:55:aa:
41:9e:af:9e:60:c2:d7:08:0b:ae:8e:62:5e:13:59:
05:19:91:b4:c1:a5:dc:52:36:d2:ea:ee:7a:21:fe:
43:ff:49:a0:f5:43:4f:85:ce:dd:38:94:17:76:e0:
0a:ec:e2:45:5d:23:09:56:20:94:a6:c0:71:09:3d:
d2:25:f0:ed:dd:a8:50:b4:d1:82:03:2e:4f:bc:94:
fe:d8:a8:e3:ad:9d:79:ed:ad:65:3e:b1:d1:c0:b4:
a1:c0:1b:80:1d:c6:d3:4d:ea:f4:15:b6:27:73:10:
af:93:eb:04:9d:91:f3:b9:4d:22:29:1b:d2:be:dd:
c7:bb:ed:c8:fc:6b:22:74:92:02:c2:47:23:47:de:
7a:8e:95:77:33:e7:23:5c:d4:b4:ce:6b:77:94:02:
16:85:c7:14:7a:ec:ca:93:2c:a2:03:d7:93:1f:87:
06:24:2e:c6:c7:76:1e:0c:bc:91:62:96:4d:a4:3d:
8d:f0:26:da:0d:26:68:f3:1e:76:ee:53:81:9e:4c:
a0:2f:76:8f:28:e6:0a:bc:cb:23:f5:1a:74:63:8c:
34:ca:2c:96:d1:f5:d8:cb:94:63:6a:5c:8e:b9:7c:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:E9:D9:40:0E:C9:B1:B6:B2:5A:A9:E6:7C:8B:60:2C:83:6D:C4
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f9:68:38:d3:5b:67:94:fb:fe:8b:70:23:e4:bc:ea:88:38:
1a:8f:41:37:2a:49:cf:2e:a8:a7:8b:01:cd:b2:f6:c7:72:60:
29:d1:60:20:d4:b5:ef:d6:0e:ae:d8:b4:d9:23:fd:a2:38:a0:
78:f9:41:07:76:cc:4a:0f:6d:b0:0f:84:0a:7c:29:cc:e4:1d:
a7:f8:9c:d3:4b:29:68:b8:8d:0d:ef:75:ff:ad:b5:79:23:54:
13:a9:e5:b4:0f:c7:70:8b:48:88:06:e2:d2:bd:2b:ad:04:7a:
b2:b6:4a:79:9b:cf:49:3e:0e:b8:21:f4:2f:80:f1:5c:d4:c2:
82:24:b9:84:96:0b:05:95:7a:85:99:c4:83:75:74:98:ae:b8:
98:a3:4a:99:c2:37:00:2f:e0:f4:4a:86:89:ce:f0:e1:79:d7:
94:a1:86:1f:00:38:cb:5a:e4:78:1b:b0:18:4e:b9:26:69:a8:
f1:97:68:33:8e:a1:73:49:22:07:57:23:15:7c:6e:57:c9:55:
dc:8e:91:56:cd:37:ba:eb:32:64:be:9a:a1:7d:64:0c:2b:97:
bf:a1:90:89:b2:51:a2:72:dd:b0:ac:b4:93:0f:23:1c:e8:a2:
5e:bb:e0:85:03:39:5c:73:30:29:13:1f:bd:85:b5:76:60:66:
4c:90:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:33 2025 by rpki-client