Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: LV7JmZ7QKgKW5hvHsp5wOhFhc0dn+UOUbGLXpKiWq4w=
Subject key identifier: A4:77:E5:BD:2A:7F:B3:A4:1C:DC:E2:06:AC:CD:C9:3F:EF:B0:8A:76
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0194BD17A4273446ED3F8B362E1A9C55965A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: fs69nL9fRwUNzpaCi3wVLlraW5+n2YKVxmASgre484c=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a4:27:34:46:ed:3f:8b:36:2e:1a:9c:55:96:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=a477e5bd2a7fb3a41cdce206accdc93fefb08a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:4d:d5:4e:8a:95:2b:e3:df:22:fd:7f:bc:
eb:e8:4a:42:d5:bf:95:c0:5a:17:e6:eb:1e:4a:1d:
cd:b6:d5:c3:5a:82:5f:f2:25:08:df:db:a1:73:b7:
ef:7b:d9:4a:3a:a9:fb:a4:97:9e:ff:d2:0f:6d:b2:
9b:71:83:88:d1:85:28:9a:04:ba:5a:2f:ec:19:f2:
3d:67:7b:46:a8:d2:a7:cb:6f:0a:79:d7:0c:40:01:
fc:02:7e:d0:9e:37:51:fb:56:49:c9:6c:13:5e:a0:
80:0d:94:18:9d:4e:42:89:d0:13:69:ef:ac:af:13:
69:d1:57:c7:39:3c:e3:f6:02:4b:42:6c:43:4a:6d:
3b:eb:db:33:54:f8:a6:9a:af:75:bf:92:75:f4:4c:
67:d6:2d:17:e8:9c:12:ae:ca:e1:f2:11:fa:60:13:
da:16:ef:00:f2:03:01:6c:12:19:cb:47:74:3c:61:
68:b9:c1:e9:07:6b:cc:38:b3:11:ed:c9:90:0d:29:
26:60:83:6f:b9:e6:bc:a9:5e:63:db:e0:67:29:c1:
31:92:02:38:16:26:a0:82:57:ef:d3:bb:9f:67:3a:
aa:78:70:fb:79:06:c2:e9:b2:9a:2a:1c:26:e6:cb:
82:4b:3a:ca:47:7a:4c:49:b4:6f:48:b6:1b:89:79:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:E5:BD:2A:7F:B3:A4:1C:DC:E2:06:AC:CD:C9:3F:EF:B0:8A:76
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e9:a9:73:1b:4f:cc:f8:1b:8c:23:7e:80:e7:a7:92:ca:65:
11:1c:df:cd:76:a9:34:61:a0:a2:ea:49:49:66:54:6d:ca:49:
4a:ef:dd:4d:ef:0c:4e:2a:9a:a6:bc:b6:f9:15:44:2d:68:2f:
b2:74:7f:d8:fd:f3:df:96:48:ad:17:38:36:ac:5b:6d:b6:0a:
d7:99:17:76:fa:51:b1:47:a1:91:1a:db:e9:dd:8c:c6:48:24:
75:3d:b3:f2:24:3d:76:17:1e:a6:59:b8:64:c2:80:8c:d7:05:
81:4e:93:e2:af:f5:62:0e:39:3f:0b:17:66:83:65:5d:9b:6e:
34:b9:2e:63:18:17:21:3e:9a:73:c5:fe:50:fd:c3:73:b7:3b:
3d:6c:34:5a:74:be:aa:6e:65:95:15:e5:43:76:e1:c5:53:38:
b4:1d:38:5b:68:a1:83:13:c6:f3:0a:ba:21:0c:70:68:a1:d8:
5a:fa:3b:7f:7f:26:97:9e:73:33:d4:d8:92:c0:a6:3d:13:1a:
3a:f6:a8:67:7e:47:0c:aa:48:34:59:48:2f:aa:7a:8b:49:04:
d1:f9:e5:b6:0a:51:3a:04:f0:4f:3c:1f:0a:6c:cd:cc:f2:f1:
d5:9e:84:a6:dd:d3:ff:61:5c:92:0f:01:9b:6b:ee:0d:ce:b2:
53:3b:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:43 2025 by rpki-client