Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: isjjRQl0wfp/jIPz5a9ODD7/nI0qHXltNn7YCH9R/Zs=
Subject key identifier: 87:8D:57:6D:4E:A8:B2:59:5B:5B:04:E7:62:7E:B3:02:2B:85:2C:FB
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0194BD4EC09B5AF05CB1D36D1388D7D13E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 024B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: LjL33GcgZt2Xta5p/a55r+3J3FAKXSX+8vwvqozekfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:9b:5a:f0:5c:b1:d3:6d:13:88:d7:d1:3e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=878d576d4ea8b2595b5b04e7627eb3022b852cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:77:a1:de:82:0d:b7:2f:75:ce:91:c9:f5:
1f:25:49:4e:74:5d:aa:cc:fe:4a:9b:b9:e5:e2:09:
59:8e:54:06:c1:28:d8:a1:42:38:c1:a5:40:27:70:
58:ac:e0:15:a6:f7:04:e4:2e:ef:35:d4:2f:99:d1:
4a:fd:de:ea:a9:eb:52:d7:28:ea:37:ce:ec:60:17:
5e:a8:f0:05:4d:65:ea:3e:5a:dd:4b:35:24:3c:cd:
78:ea:af:d8:3b:21:e4:5e:75:4e:56:b1:80:fd:5e:
2e:74:a3:67:4b:c4:ba:a8:5c:0b:75:30:0d:44:42:
01:fc:c7:3c:70:6b:29:15:3d:e5:38:02:2d:af:b6:
fd:ba:34:b6:71:ad:35:1f:bd:90:ec:e8:6b:f6:44:
2d:4b:7f:e7:c0:f5:5e:26:b2:63:7c:61:0c:22:bd:
60:55:18:70:ee:89:09:37:0c:2a:f7:ff:56:37:ac:
4f:83:99:f1:cf:d7:1a:25:7c:d5:93:7a:d8:35:0e:
4a:47:f1:36:e1:e5:b2:96:3f:f2:33:a3:13:16:8c:
54:45:37:b1:8a:9c:e6:64:7c:a8:84:56:c7:fc:f7:
b0:23:d2:57:91:e8:2a:72:6e:16:11:75:ee:a6:2c:
aa:5f:7c:16:ea:22:22:40:51:a7:bf:50:93:1b:16:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8D:57:6D:4E:A8:B2:59:5B:5B:04:E7:62:7E:B3:02:2B:85:2C:FB
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:8a:ba:32:78:b2:e9:aa:45:66:8b:29:bb:da:42:70:8e:
fa:6a:d2:34:48:24:a5:15:e1:1c:fb:a0:62:dc:84:6a:40:2d:
16:5b:73:76:92:60:1e:ca:05:da:1e:92:40:64:1c:c6:3b:3a:
28:6f:87:cf:0f:39:cd:a2:35:ac:44:1b:36:42:8f:b6:e5:2d:
47:0a:73:ce:fe:66:df:3f:7c:07:5c:38:c6:cf:d8:8b:8c:92:
10:a2:f6:4a:1f:65:00:e3:91:d0:d3:7a:88:ed:09:1a:df:a9:
98:7e:0b:d7:34:90:64:8e:df:7f:17:07:44:1d:99:1d:97:6b:
b2:c7:28:25:13:74:e1:e8:f2:d8:2e:85:bd:8d:12:78:dd:21:
1b:27:06:ef:30:c2:4a:18:cf:d6:f3:9e:42:cd:f8:83:d6:11:
47:08:e1:54:89:71:58:e8:20:d3:52:6e:89:09:67:0f:38:2e:
43:5a:69:fe:bd:ec:c5:0b:7b:77:a1:ab:11:06:15:3a:cf:67:
b3:6f:b6:1f:44:3b:d0:93:fc:75:34:ab:e0:fb:b5:28:28:d4:
84:88:2a:ea:d9:76:8c:68:40:07:20:24:a0:86:4c:1d:64:47:
66:51:e8:77:40:4d:fd:85:91:24:20:50:70:74:8a:b0:fc:b2:
97:06:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:34 2025 by rpki-client