Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: R4HmVtxCmsdpdP40NLZ0bX2pGLDUDNAmsHs5CEWOOBA=
Subject key identifier: C4:CD:51:DA:CC:52:BC:19:58:01:9A:DC:C2:A7:5A:E4:F8:14:06:34
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 0194BBCE0D3D3D946E6F5F121086FED160A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 112C
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (hash: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: aFCNXQe7QgAD3Jmba6mPyctlOFVKEl0rdpCVeV2g33A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:3d:3d:94:6e:6f:5f:12:10:86:fe:d1:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=c4cd51dacc52bc1958019adcc2a75ae4f8140634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:be:5f:9a:6c:0c:21:4b:c9:d0:38:68:59:
51:fc:18:2d:23:94:15:1e:30:e8:28:3a:d5:54:c2:
70:fb:59:11:e6:78:ee:ca:ca:b1:6d:8c:74:b6:46:
68:6c:1c:69:a5:cf:b5:ef:92:05:c0:67:24:5e:26:
4c:08:61:1d:0a:88:19:99:31:6d:17:5a:c4:de:c6:
95:89:92:2c:e9:83:44:8a:68:69:39:ca:ee:83:41:
c0:82:7a:53:53:c5:23:d7:21:de:e6:4e:1f:6e:fd:
f4:cf:3a:99:cd:a6:fa:fa:b6:6f:a2:35:1f:fe:b0:
0d:ba:29:7d:6b:64:ed:c8:77:0b:e0:17:21:1d:60:
d2:5f:fe:47:ae:5d:ce:4e:7d:5b:b6:43:33:9e:d0:
34:c3:4b:a2:f3:27:45:64:29:3a:1c:2b:0e:62:cb:
0b:4b:e1:7f:87:60:85:66:25:44:d7:d8:ed:bc:93:
01:de:c2:a9:01:bc:09:73:c7:32:f8:f5:90:b0:53:
ca:c7:bb:7c:0f:54:23:bc:9f:bb:bc:2b:d1:e6:3c:
3c:97:bd:26:d6:14:e1:dc:b8:cb:97:90:34:fc:95:
1a:56:c0:c1:f6:87:af:5c:6a:e5:ff:29:41:09:55:
d2:da:7c:b3:d1:27:fd:05:d1:35:02:66:38:8f:9e:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CD:51:DA:CC:52:BC:19:58:01:9A:DC:C2:A7:5A:E4:F8:14:06:34
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:1a:3c:7d:cf:28:46:40:37:42:7f:4d:38:c6:ed:a0:ec:
12:52:61:96:6d:fc:a1:79:5e:41:03:33:b1:f1:38:fc:c8:2d:
1b:8a:5e:ee:b0:f2:77:9d:f2:f8:30:90:74:83:88:a8:ec:bd:
5d:03:45:3d:57:69:70:67:c0:58:62:fc:4b:0b:f9:51:e4:b1:
17:da:91:f6:04:16:c0:e3:61:50:78:fe:90:8d:8a:c2:a3:c0:
73:ec:44:e5:31:8a:3f:8f:64:2a:3d:6f:ef:2a:a5:4f:df:fc:
05:67:cd:43:90:4b:8b:1e:2c:0e:29:13:8e:83:c4:a4:4c:b4:
0c:c9:aa:48:42:2a:c6:13:5e:be:d6:9d:f6:c0:14:11:12:ab:
37:93:df:58:98:ba:8a:c6:96:f4:68:1b:59:7d:4b:c4:cc:e2:
ed:e6:68:e6:5b:ee:9b:b4:10:cb:fb:f3:84:8c:72:ad:d4:0e:
0e:4e:73:a7:50:c9:f7:77:5b:14:c2:44:2d:53:32:68:a8:c5:
60:50:93:ec:f7:3f:3d:fa:45:8a:fd:85:8e:49:95:1a:2b:ea:
1c:e3:d5:8f:79:ab:57:ec:8a:b9:08:83:26:8c:65:f3:be:6b:
ab:56:44:1b:01:1b:66:22:59:01:d9:26:45:71:16:a6:b9:c2:
ab:81:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:52 2025 by rpki-client