Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: Vn8WagM9a/ouCgwqj80n14eAYaJDKJEYPzE4NnZ2YAk=
Subject key identifier: 27:F4:43:8E:BD:90:1A:CA:B5:20:88:4F:7A:CE:7C:E0:94:D1:A3:5E
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0194BBCE1EB12D3C803CEC5CB097CF59FF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 0FE8
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: iNUSCt2fImBKSOb/iTfxp/w9MpzsaAkng38LHDRcl3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1e:b1:2d:3c:80:3c:ec:5c:b0:97:cf:59:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=27f4438ebd901acab520884f7ace7ce094d1a35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:32:81:ef:6e:f2:6c:d1:5d:e1:b9:19:12:
c0:37:c5:18:1d:c8:6b:ce:9d:6b:5b:77:f5:c9:25:
47:bd:8a:e6:c6:82:56:63:e8:0f:a9:48:00:1a:42:
2f:9c:32:62:52:ab:e0:1e:bb:50:ef:47:7f:f6:79:
00:87:63:de:b7:a0:59:d2:4a:62:39:74:b9:0b:e9:
f3:a9:ab:b0:5f:80:69:62:ba:47:4a:2f:51:f8:27:
73:72:d1:91:f3:ab:b1:41:c5:89:00:16:ec:76:b3:
2d:38:b7:59:69:e5:2c:e8:21:4e:cb:4a:a2:f1:f6:
dc:80:d8:7c:e3:fa:90:c1:41:89:b8:66:f6:b8:69:
39:d1:31:37:3f:f5:b2:a5:e6:47:ed:4b:68:eb:81:
cf:bd:bf:db:ac:5e:da:03:c4:e2:d7:0b:01:d4:31:
9a:a3:8a:9f:b4:c3:43:a8:84:13:e6:b9:e5:b2:74:
f0:8b:11:95:f4:1a:9a:5b:70:da:08:be:53:b5:65:
3b:4e:26:63:9f:2f:e2:10:10:04:11:52:2b:53:c0:
e6:e9:cd:9b:d8:a7:8b:dd:17:c7:af:81:77:0a:02:
4b:f4:b9:66:3f:5f:b4:6a:b9:e6:0b:31:cf:e4:66:
20:6a:5f:29:7f:71:c7:d7:f7:0f:98:07:01:aa:70:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:43:8E:BD:90:1A:CA:B5:20:88:4F:7A:CE:7C:E0:94:D1:A3:5E
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0d:c3:06:e1:54:f2:cb:2f:28:71:11:ca:09:26:c6:d7:e9:
5a:77:a3:bc:b0:7f:6f:e1:a7:58:09:33:de:f4:92:24:ba:47:
82:13:39:0e:cb:c0:8b:4d:b9:46:ae:1c:67:f2:9a:25:f5:ef:
e3:84:f2:32:64:bb:c0:78:73:f9:3a:de:95:34:80:5d:0b:c3:
24:13:43:b6:fb:6e:63:9e:bc:23:5b:fe:b8:03:c4:f3:dd:d0:
e7:30:6b:8b:5b:22:c2:f4:a5:43:29:ed:bc:9f:ee:28:58:ff:
c1:b3:5c:da:05:45:15:66:aa:1e:fd:95:aa:19:0b:8f:99:b3:
dc:37:c7:e6:22:8f:98:07:2c:df:38:55:6c:da:5b:7e:0f:80:
1f:d1:ea:9b:ff:f9:f1:fd:4c:8d:e4:31:79:39:6e:6b:88:1d:
78:bb:4d:8a:55:99:62:3f:38:0c:fb:6d:ad:64:58:45:0c:76:
ea:8f:49:62:a2:eb:4c:51:d2:f6:27:ef:c1:05:bd:4f:4d:07:
62:9a:85:ab:d4:38:6e:90:f9:cf:a0:33:4f:a4:0c:a3:e4:dd:
5e:3c:e0:4f:b6:76:d7:f4:c0:6a:9c:83:e8:6f:f4:e0:41:ec:
b5:ac:ac:61:f4:10:ca:e7:92:61:bb:0c:e9:e0:f3:e1:73:2f:
f0:53:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:19 2025 by rpki-client