Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: tj8XdTOwI+Mt+sBrZBZ6YFKoRHU4dxfRvZCH+BiOlDo=
Subject key identifier: 5A:14:A3:5B:04:BA:05:E6:B0:BC:A4:1B:2F:AF:11:4D:27:05:84:AB
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 0194BBCED6FF15F33FCC35556FD67DDA0CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: biR3gbnnd0wNQCtgwO/xu3LGsZgk2L1U0ZGT19rIg0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d6:ff:15:f3:3f:cc:35:55:6f:d6:7d:da:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=5a14a35b04ba05e6b0bca41b2faf114d270584ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:e8:ce:a4:a9:80:ba:4a:67:a0:83:76:5d:
fd:9d:a2:59:87:ba:d3:46:83:ad:a1:f3:62:c9:c3:
bc:18:a0:22:a7:40:a5:e7:ea:91:0b:c2:87:3f:ef:
7f:3d:98:bb:fb:68:41:d4:8e:96:f2:8a:92:89:1e:
66:42:47:fa:7f:25:6d:d9:ad:12:8d:bf:d2:de:16:
d5:c1:d9:71:f7:4b:27:28:46:7a:5d:09:c8:ea:6c:
09:b2:06:f8:27:2b:6c:9a:0b:a9:0a:ee:6b:10:f3:
29:38:8d:8e:a5:80:79:1c:45:ca:2a:fc:3a:e8:28:
53:e9:8f:4a:41:7b:1c:35:ae:fc:73:7a:2a:f5:20:
a3:76:3b:19:44:72:64:0d:c1:c9:21:b9:a0:3a:36:
8d:4d:08:90:b8:8e:93:33:d6:51:ed:1d:c7:d9:7b:
63:d5:47:02:da:a2:11:2c:d1:6c:82:66:d2:64:7f:
34:77:b8:af:2a:02:c9:4b:49:3e:1d:a7:74:13:a8:
68:e3:e3:e6:36:a1:03:9f:5a:21:53:28:11:3d:06:
1a:0a:5f:d2:95:93:19:2d:e9:36:b2:6e:ca:6b:8f:
da:6c:6b:c6:7d:c5:75:a4:33:73:1b:db:d6:ff:5f:
f7:36:5a:1f:49:b6:68:8e:9c:55:9f:0b:d2:1a:e9:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:A3:5B:04:BA:05:E6:B0:BC:A4:1B:2F:AF:11:4D:27:05:84:AB
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:e3:3a:5e:4a:de:bd:33:73:f6:1b:59:3a:44:d9:7e:e3:
4e:a4:b0:ed:a9:ee:40:dd:e6:51:d4:57:6f:43:b2:72:20:cd:
c7:c1:0b:a0:18:66:86:be:d2:b4:e9:5e:4a:75:13:8e:83:75:
49:3f:4d:ad:9a:e4:79:7f:3d:07:89:06:6c:8c:15:70:f2:2b:
f1:51:a7:e3:2d:83:c6:97:1b:e5:cf:8a:b9:36:58:92:e1:ee:
e7:f2:61:89:b9:6f:4e:8a:a0:93:f8:00:b8:7c:9c:ba:49:bd:
0b:49:af:0b:53:c7:73:d3:ab:a1:fa:8e:4f:a3:85:88:1b:7a:
32:42:61:31:08:b5:7d:ee:48:e3:75:1f:6a:e3:d2:8f:1c:52:
f4:0b:b6:5f:7f:69:32:c4:fa:88:c1:48:0a:1e:9f:4c:97:ae:
e3:28:af:fd:ab:f3:75:f6:7b:42:8a:2d:76:96:87:61:a7:9d:
d2:69:68:99:92:1a:9c:f0:34:f9:9d:82:8a:e6:e9:b5:69:8c:
8c:76:72:78:b2:e5:1b:0e:4b:c8:3f:b1:16:d6:2f:7c:fb:4b:
83:67:95:79:6f:df:5b:c8:8f:21:d4:69:62:e1:19:83:bc:b1:
dd:72:87:ee:cd:be:3d:c8:b7:cf:5d:b8:75:ef:24:0e:86:74:
40:5d:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:30 2025 by rpki-client