Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: yFeULOQ+Ss7y2NCYSHHNdKU/3+x2bPOWfehnFkJAmZw=
Subject key identifier: 99:4F:C7:17:60:2B:94:5D:E9:B3:E9:27:CE:42:E1:E2:00:E9:0C:32
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 0194BC04A01478CCBB5D89251A0C4BA334F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0BE0
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: Mxl6G5ftKk7EoqngoJOkLZAiQ3AX1flOzx538RGfNnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:14:78:cc:bb:5d:89:25:1a:0c:4b:a3:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=994fc717602b945de9b3e927ce42e1e200e90c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:8f:98:69:d8:f1:50:27:c6:e5:7b:29:04:
12:49:d5:4e:df:ae:9d:2a:0d:6b:21:c1:68:13:a8:
17:1a:31:19:90:ef:3b:af:58:d7:41:21:e9:22:06:
40:1e:45:63:14:e6:8d:f3:c2:d6:aa:a9:7e:d8:b6:
82:a3:78:11:5e:92:5b:11:6c:24:4e:1d:7f:e0:bb:
91:af:f2:80:ed:a8:5c:b6:63:b5:11:2b:85:e3:37:
36:2c:05:af:48:19:4e:61:84:b8:0b:cb:ad:e0:fd:
e1:42:1c:f4:03:61:75:24:77:d7:8d:37:d7:ae:e8:
b7:a8:81:a8:db:38:46:2a:4b:d4:45:3f:b6:a6:62:
f1:56:a1:c0:29:d1:06:c1:37:e4:da:1a:2d:b9:bc:
0a:01:58:e0:e0:95:e6:82:30:ed:c3:5a:5d:3e:45:
3b:2f:92:99:56:01:df:c6:6d:d7:97:71:70:31:38:
c5:87:7a:e7:0a:1b:26:b8:3f:03:ab:51:f3:29:22:
87:71:20:00:be:1f:b2:50:66:00:90:63:f4:d6:93:
b3:8c:b4:2f:61:6c:52:14:ff:39:87:b8:99:3d:44:
0c:59:68:ce:8b:55:c0:d1:5a:0e:e1:a3:b0:92:27:
c9:c8:96:e8:0e:2b:ef:62:3e:09:0f:a4:58:95:f7:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:C7:17:60:2B:94:5D:E9:B3:E9:27:CE:42:E1:E2:00:E9:0C:32
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2d:1e:ac:36:fe:74:a8:fe:11:d7:5d:dc:05:2a:3f:7c:b5:
e1:02:f0:fe:a7:08:ec:7e:68:99:42:7e:2d:d4:9d:d5:44:c5:
8b:68:1a:ef:35:a7:34:1c:40:66:c4:3f:7e:9e:ea:f7:48:2e:
58:85:00:26:ae:e1:71:88:b9:15:fd:57:65:37:85:8d:c2:21:
5f:9f:a6:f1:71:a8:bb:c4:ec:99:22:59:9e:56:cc:13:ee:65:
12:41:ec:cf:64:56:e8:2e:12:a5:9e:0e:65:29:5b:fc:1e:db:
ce:bc:e1:10:45:bc:bf:96:60:72:9a:23:29:56:91:b7:19:0c:
70:00:2e:9a:73:43:30:2f:f8:c3:c9:3f:93:75:a0:88:57:e4:
06:e9:4e:c6:c6:f5:6d:4e:7a:06:57:87:81:23:d2:37:9c:26:
3b:f2:1a:2a:82:5b:81:c0:b0:48:31:6a:ce:35:25:10:27:d2:
02:23:bc:08:85:85:cc:aa:55:ea:e5:0e:b6:43:d8:98:ad:f0:
bd:95:43:23:91:9d:12:7c:05:1d:5e:ff:37:7d:4f:61:3d:fe:
8d:b3:cc:32:b8:6b:54:4c:d7:36:18:ed:0f:07:1d:e2:e5:e8:
f0:73:50:dc:3d:05:96:84:2f:9f:32:f8:87:25:37:c9:27:00:
e4:9a:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:32 2025 by rpki-client