Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: O6+Id+K2Nes7Gg/XOMqgkES6XfG3Oog6mZbJpAuMKCU=
Subject key identifier: 85:D0:3A:AD:ED:79:55:D3:79:26:18:DC:66:F2:A6:34:C0:EE:5D:39
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 0194BD856355DF463AD1C01DD0D8E8E75AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
2: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (hash: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: l4FU0pQfROhAGxYZSly8lhbEbkQiSGxWthW+aHkVN7c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:63:55:df:46:3a:d1:c0:1d:d0:d8:e8:e7:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=85d03aaded7955d3792618dc66f2a634c0ee5d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:8a:22:72:dd:64:7b:82:42:df:10:3f:4d:
ee:63:31:18:f5:0c:c0:e0:7b:27:3e:01:a8:d5:c4:
71:0f:3c:90:c7:64:41:3b:e1:48:26:aa:fd:22:24:
bd:11:5f:18:e9:0f:13:01:cc:2d:64:d4:81:07:9a:
ff:a6:9e:0a:05:0b:86:94:a7:da:70:f8:69:95:0c:
53:5c:9d:99:33:bd:a5:32:ab:f5:e8:be:d3:59:a8:
2e:d2:17:50:3a:bc:1f:04:85:84:b3:6c:23:29:c9:
d2:d2:e2:8e:11:f8:4c:9b:6a:75:f4:fa:72:0f:e2:
2e:6a:57:6d:2c:fb:6f:28:20:e2:09:4d:02:b3:aa:
10:ae:22:bc:95:7d:66:a5:67:1e:31:63:8c:af:93:
ad:df:aa:ca:3d:56:c0:fb:47:94:ff:9c:5a:07:2b:
6c:e1:4b:82:af:fd:a0:29:28:06:a8:81:df:a0:6f:
d3:2a:ca:a7:a6:bf:f5:b4:e6:a5:38:0f:5a:91:b8:
1e:d1:73:4d:e3:5f:6d:e2:d7:7f:f9:fb:d9:ff:11:
25:95:86:4e:2b:11:bf:69:49:ab:f4:b0:4d:15:ef:
1b:66:28:c5:c9:53:8d:6d:72:50:dc:ab:6f:48:83:
87:6e:bf:3a:d6:d1:28:69:1c:66:d9:4d:53:ca:4a:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:3A:AD:ED:79:55:D3:79:26:18:DC:66:F2:A6:34:C0:EE:5D:39
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:af:09:ce:dd:07:06:f8:6f:da:b1:24:37:d7:b8:d7:41:
d7:24:48:1d:94:06:e9:f9:17:ba:7d:9b:07:f2:28:1d:03:00:
b6:36:33:90:2c:9a:b4:38:77:79:f4:3b:03:3f:52:a0:0c:40:
99:b1:62:72:9e:94:f8:3e:6e:d3:78:0d:5c:b6:ef:70:c1:6d:
88:18:95:ed:e1:c9:fc:d5:9e:a8:15:b7:b6:8d:78:63:1d:f9:
3f:a7:eb:e9:cb:f9:1b:c3:4e:88:79:5b:51:79:53:c5:50:99:
cc:ff:e7:54:1a:0e:82:2c:2e:71:f6:04:2a:49:1f:ef:48:c4:
44:b6:ec:6e:2f:c7:a7:5d:80:a2:fc:49:c2:5b:f9:4d:f0:f8:
38:15:21:81:57:85:9b:0a:c6:94:72:2c:6b:fc:4d:93:32:4e:
94:66:88:ed:87:b0:a7:a5:5a:cb:f5:b5:65:b5:61:59:1c:2e:
56:ee:79:56:08:04:ac:31:08:12:e1:72:ef:5a:6e:e2:34:17:
b0:c0:1b:a5:d6:82:48:87:cc:8f:10:aa:91:74:54:91:30:a2:
e5:0b:f6:d7:95:52:9a:fc:86:93:0b:69:74:68:24:0e:5f:be:
94:53:91:22:02:87:1e:24:4d:89:b9:c4:95:63:2f:e5:f4:e8:
8f:ec:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:16 2025 by rpki-client