Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: nwJ88w0m3BeMUOuTzWfvajormGuge9Ax0USB1jpGCXM=
Subject key identifier: F1:E0:A5:43:A9:5D:B2:C7:4B:79:B2:49:3E:F8:C1:F2:BA:7C:4E:E3
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 0194BCA9CE035CD6A5C16840F6FA13673E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: LiX0SoLTHxnQ6fex04eFZU7YoAcnMqGiIZKscVRssHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ce:03:5c:d6:a5:c1:68:40:f6:fa:13:67:3e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=f1e0a543a95db2c74b79b2493ef8c1f2ba7c4ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:26:75:ca:6f:b5:3d:9f:9e:cb:b0:4a:d8:
1f:6e:1f:b9:70:f8:d1:4d:6e:ab:14:11:64:61:57:
b5:91:1e:df:9f:73:76:ed:25:6d:86:bb:f8:2c:c8:
af:8c:04:fb:96:0b:11:a5:d3:f4:71:35:01:ab:90:
00:43:2c:5e:22:13:a8:1d:94:80:9f:23:7a:95:d0:
d4:45:af:6c:ae:f5:e8:b6:55:30:14:93:b1:02:8b:
18:85:10:c7:1a:66:b6:66:72:c4:c0:1e:02:d4:6b:
7f:83:b0:a7:fc:2a:8b:af:4f:49:d2:d2:7f:07:18:
af:53:88:0d:6f:9f:3b:96:5a:e1:7b:cd:3e:63:8a:
18:00:f7:21:57:ec:60:de:8b:09:35:54:df:54:9a:
f8:04:71:a3:94:e9:4e:9f:6f:07:92:9a:60:11:6f:
cb:c8:ad:79:49:4e:79:b4:7b:58:b9:e9:06:36:a9:
d6:a8:ac:10:48:cb:ad:28:f6:e5:0b:ab:45:98:b1:
bd:ec:b3:1d:fa:92:a3:1f:cd:2b:a0:ad:a1:d9:a9:
5b:70:17:9c:42:10:22:5a:66:54:30:fb:46:8d:3d:
42:01:6b:6b:db:77:26:23:5d:ae:13:be:8a:55:46:
7f:3c:4b:e0:46:31:69:96:c5:98:d7:8b:53:18:f0:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:A5:43:A9:5D:B2:C7:4B:79:B2:49:3E:F8:C1:F2:BA:7C:4E:E3
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:02:c5:7f:04:11:fe:24:3d:82:df:5d:f1:c5:b5:a2:84:
ee:0c:d9:12:01:4f:d6:6d:2b:7f:6b:cd:e1:e7:f9:fa:7c:ee:
60:01:67:aa:dc:12:09:e2:c5:3f:3d:ad:22:10:e5:a0:95:b5:
f3:99:22:53:99:40:11:02:b7:fb:45:3e:fd:63:75:a7:f6:84:
4c:a1:d2:19:9c:94:0c:2b:92:5b:a9:89:78:e9:01:b0:82:63:
66:f8:23:78:7e:3c:aa:26:ed:fa:f0:15:2c:10:9b:c0:a9:98:
fd:b6:62:e1:db:3d:e2:69:a6:ee:55:e1:f7:b5:c5:22:17:f0:
f5:4b:76:d7:6c:ad:5e:84:f3:51:e2:4c:6a:45:94:4a:30:c6:
a4:a0:82:5d:34:58:43:3d:63:44:7a:be:c2:e6:5d:e9:34:88:
22:b6:c8:2b:0d:8e:00:75:cb:a6:21:9c:02:b9:a4:74:bd:6f:
74:20:59:c6:e1:9d:70:89:df:cd:9d:82:06:31:02:fc:d5:db:
56:70:30:69:8d:06:f8:3d:d9:94:a5:fe:45:08:44:40:57:52:
72:c5:24:e5:da:29:0c:bb:db:bb:20:1a:3f:12:d0:35:29:bf:
95:d8:02:7e:ae:9f:5d:d7:bb:ab:b9:0c:f3:cd:cd:58:3a:47:
a0:d8:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:00 2025 by rpki-client