Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: ruIMrYg2pZy5F+BpIyLHjhSKNz8KqSMOIuhjEDx4BU8=
Subject key identifier: 05:91:CA:51:42:B1:C6:16:49:4C:1E:86:63:EB:FB:07:66:63:2C:F8
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0194BC3BFD413550BBABFBE73468D9BAFA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: jQVAEr718npAzKg5i6qdX2+Fn0ga+ltTc98PYzMCDco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:41:35:50:bb:ab:fb:e7:34:68:d9:ba:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=0591ca5142b1c616494c1e8663ebfb0766632cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:0a:f7:7d:cc:37:d4:07:87:4c:9d:8a:da:
34:46:4e:aa:2f:c5:39:1d:00:c5:3a:1c:cb:f7:be:
f9:02:66:9f:91:dd:a2:bf:4e:c6:ed:0d:a7:f8:08:
5d:25:67:3a:4d:dd:4a:f1:7f:a2:8d:0f:79:78:b0:
4a:b0:7f:ca:6d:e6:47:58:76:1e:6b:94:95:f2:fc:
f9:08:6d:be:80:44:22:28:0b:78:c5:20:62:4a:0e:
e3:96:71:56:5b:2c:11:91:51:9e:9b:f1:99:52:cc:
c5:6f:7f:d7:a4:cb:5a:d0:bd:3e:5c:b1:a0:49:67:
5c:8d:cf:3e:1b:7b:0f:60:2e:c5:0f:2f:66:d6:41:
21:5c:e7:cd:f4:34:49:0b:19:bd:d4:c2:92:23:72:
16:af:61:43:9e:c4:bb:8d:6d:31:e3:cf:36:59:56:
91:f1:5d:64:c0:44:19:a1:02:7c:9c:8b:10:04:21:
29:d9:48:7f:48:fe:fc:5b:5d:77:ce:5d:bc:56:29:
7d:03:38:2a:af:f0:a8:e3:f6:da:f6:15:06:9f:6e:
51:bc:06:dd:39:46:95:35:46:e1:8e:82:6e:f9:e8:
64:86:f1:69:25:13:71:66:56:1a:07:b6:14:3d:a4:
74:10:74:09:f0:9a:4a:9e:61:8c:b0:e9:a9:c1:33:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:91:CA:51:42:B1:C6:16:49:4C:1E:86:63:EB:FB:07:66:63:2C:F8
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a8:4a:06:38:02:62:a9:c0:45:93:ee:2b:a8:33:c4:5f:57:
d2:42:e0:83:4d:56:02:f8:83:d2:4f:99:49:ef:c4:77:77:50:
c7:f9:5f:75:29:2e:39:24:98:7f:e3:ce:7a:29:95:cf:e9:2c:
fc:5b:7b:ee:f0:83:75:ce:f7:02:fc:58:97:1e:42:84:b3:50:
d1:6a:4d:d3:dc:af:89:ec:c3:f8:e9:09:5b:82:d0:3b:bf:8a:
c5:58:2a:d9:16:95:37:15:c5:20:c2:65:95:4e:19:dc:e5:4d:
2c:dd:20:de:10:67:e6:ad:58:4f:0c:65:dc:cb:5e:97:a2:3a:
66:c1:6a:29:48:e8:39:3f:2c:f2:f4:bb:64:8e:e3:d9:4c:f9:
97:24:6e:99:a6:d9:61:3c:0c:dc:75:2c:ca:b2:bb:8a:fd:f1:
4f:d6:df:d5:27:cc:98:fc:0d:97:6a:af:77:c1:43:22:59:37:
7f:0a:fd:40:45:54:ab:75:0f:2e:ea:e0:bd:60:49:5c:5b:ef:
8b:b8:b2:31:4f:c2:c7:62:49:9e:28:da:49:7f:4b:f4:8b:50:
54:1a:21:45:3c:7f:24:6e:98:a6:2a:d6:21:00:c4:e1:91:1c:
88:fa:de:cc:9b:b9:07:6c:3c:90:fc:e9:b7:06:d0:80:7b:f9:
f5:85:c9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:33 2025 by rpki-client