Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: J1wmDxc74DJwzzMFLO5zYW5ebvOkGMBkckEn/JVLj88=
Subject key identifier: 19:12:11:99:A7:6F:63:31:83:19:5D:25:A3:91:5A:EF:F2:7F:02:1A
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 0194BCA9F81BCA626950BCC74BD8508F6478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 0ED7
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: UC4VUCDZry0qdDgUQlU9OPbLpE6Z5WVLAMBE8KELFSo=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:1b:ca:62:69:50:bc:c7:4b:d8:50:8f:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=19121199a76f633183195d25a3915aeff27f021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:db:22:02:e2:00:ff:8c:aa:57:f8:e9:34:
04:7e:56:e7:10:a7:83:cf:37:da:67:da:09:91:39:
14:bc:c9:53:56:08:34:93:72:4e:49:02:b5:bd:6a:
60:ec:bc:4e:d2:65:6a:f0:fe:33:22:92:4b:b3:1b:
76:8d:59:4f:be:4d:54:26:2a:d5:e0:de:fb:06:78:
cc:2a:87:d3:8f:3f:d7:61:aa:44:02:74:68:78:8b:
f5:25:a0:1f:3f:54:bf:53:6f:1d:eb:a7:1b:5f:b7:
d1:ff:82:7a:28:c1:d3:7b:1c:c4:49:1c:48:53:90:
63:a2:25:7d:1e:59:0b:b0:ef:df:45:f9:31:43:7e:
ab:5c:37:bc:13:1c:e8:21:49:91:7c:43:d9:db:ea:
13:2a:fe:53:e4:67:2e:7c:56:7c:34:b7:e5:5f:f2:
77:44:f8:07:b7:c1:d3:61:8d:1e:17:a1:70:41:65:
02:97:bc:87:ce:fb:db:ac:e7:5d:9c:a7:96:a0:f5:
4a:aa:2b:40:87:dd:87:ca:04:0e:33:72:0e:1c:a0:
bf:86:fe:dc:f4:db:a6:4c:f2:d4:0e:9c:e3:6d:f0:
12:73:b8:f4:6f:2f:df:0d:9f:62:8e:f1:1f:65:b6:
c7:98:e3:6c:04:5b:85:36:d7:0e:46:df:0a:64:fe:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:12:11:99:A7:6F:63:31:83:19:5D:25:A3:91:5A:EF:F2:7F:02:1A
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:43:45:78:e9:c8:12:7a:9f:02:fe:da:2a:5a:0b:32:1b:65:
39:9e:5b:f2:cf:9f:ac:c5:86:e0:48:7c:2a:20:77:ab:d5:15:
cf:82:d7:f2:0e:fb:0e:64:75:24:4c:04:62:c2:42:ab:07:1e:
41:a3:cb:45:e7:5b:c1:34:ab:c9:d4:2c:26:1e:e2:5c:f7:5f:
bc:69:c9:44:d2:4e:21:64:96:e9:33:2f:15:d2:e5:85:32:89:
28:8a:c2:4d:58:a1:3f:d6:dc:13:c6:98:1d:8c:e1:b4:73:48:
08:1c:3e:37:7c:7c:cb:57:35:3e:61:f2:6f:15:c0:16:87:5c:
9f:7b:7d:09:cb:00:e2:55:df:dd:39:20:49:6e:35:6c:bb:02:
e9:33:5c:c8:b2:82:ee:30:21:e0:70:d4:67:28:18:5d:cb:05:
af:20:23:c8:75:3d:88:5d:11:7d:a1:1f:98:4b:2b:16:a1:4e:
48:29:bd:c5:0f:ab:51:f8:13:59:6c:7c:87:35:cf:66:89:37:
a7:f1:5b:ac:49:be:c0:ab:16:36:65:b5:59:4e:fd:5e:4c:c1:
33:95:50:5f:2a:f4:cb:a6:f1:2c:b0:8d:f1:46:42:11:e9:c0:
4a:f8:ed:f4:4c:43:a7:17:05:4d:a9:89:67:3a:ca:41:9c:95:
c8:f3:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:09 2025 by rpki-client