Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: IOPxt79nksE8Lr3pc72WQYzQTyfGWwNLzmMv1uSzonk=
Subject key identifier: 2C:0C:88:BE:46:A4:9F:C6:43:93:A5:AB:EF:C9:74:18:E1:F7:DE:28
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 0194BD854E74769C9175377361B42FBD3ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: paJYUrleNu+FPzvKxRY1ol7zoS3FOZYg6jqPjH4l1UA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4e:74:76:9c:91:75:37:73:61:b4:2f:bd:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=2c0c88be46a49fc64393a5abefc97418e1f7de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:0d:58:40:ef:09:d0:f7:fa:9f:d7:88:7d:
e8:aa:90:67:df:7b:7b:0a:59:f3:2b:5b:a1:54:e8:
8b:f6:2f:71:d2:df:f2:af:9b:f4:64:8a:9f:00:e3:
5e:43:af:44:f2:7e:71:bf:51:58:8f:c5:4a:0f:87:
25:45:cf:ca:f2:9f:34:91:23:e3:40:6f:2d:01:08:
86:34:4f:d3:4c:ef:f4:d0:f7:9a:43:8c:74:18:04:
3c:3a:66:70:97:41:07:10:bc:6e:b8:1f:69:c7:81:
8a:de:48:9b:a7:11:41:21:19:fb:40:07:51:a9:c2:
a6:c9:00:cf:23:b4:3e:36:aa:e0:ca:33:26:4b:e3:
8b:87:0e:f7:fe:bb:96:25:4b:2e:d9:6e:46:79:77:
e1:9b:50:ed:8d:e8:b3:d2:4e:60:c3:39:43:70:2b:
fc:0d:c2:43:a0:66:d7:ef:22:b7:f1:eb:4b:56:37:
db:77:74:2d:19:63:d5:32:61:84:64:2a:78:d3:18:
78:37:de:c2:07:5c:57:68:72:fd:3c:81:5d:95:47:
55:07:75:af:66:52:02:a5:3c:4c:af:c7:da:8b:45:
8e:e7:9b:fc:25:50:0c:a4:56:81:b1:04:91:0a:24:
d6:3f:f7:1c:54:ef:21:b7:d8:52:8a:56:73:54:db:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:88:BE:46:A4:9F:C6:43:93:A5:AB:EF:C9:74:18:E1:F7:DE:28
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:14:19:39:89:73:49:67:0b:c7:3f:4c:9c:ef:5f:54:2b:
4b:77:c4:61:5b:79:0a:7a:64:a0:0f:1c:43:2d:0c:9a:db:35:
a4:0d:de:83:5f:c4:25:72:24:5d:b1:6d:1c:b0:1a:9a:b8:03:
5e:7a:e5:18:a2:5c:3c:69:68:74:c2:d7:e1:ac:05:83:50:88:
3d:51:d6:a1:c7:0a:86:f3:88:ca:4a:cc:f6:a5:86:ba:80:c6:
db:3b:9f:e0:a7:9e:9f:9f:0c:b4:c8:d4:7f:71:42:9f:6c:1b:
62:9b:9e:d8:44:8a:d9:a8:d8:78:77:d1:aa:5e:06:91:0f:fb:
0d:d2:d6:47:99:ab:47:53:f3:af:74:ac:82:25:b3:fc:fc:6b:
a3:45:ef:69:70:dd:6c:1c:25:aa:c8:b1:15:96:cd:7b:0e:4e:
dd:ee:07:af:3c:ca:84:b6:b2:6f:84:1e:7c:1d:b8:7d:b2:31:
c3:30:61:db:db:5d:82:b9:75:9d:9a:3f:ca:be:9c:f3:1c:c6:
4d:2c:ae:98:19:06:84:fc:2d:83:aa:9b:8e:25:5d:30:2b:13:
ce:ca:89:04:37:f1:28:4f:b7:28:50:39:52:e8:f6:02:69:9c:
54:b3:ca:10:b2:b7:2c:4c:38:f1:af:11:ae:7a:37:97:ff:38:
2a:2d:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:51 2025 by rpki-client