Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: GEJBCZ4UfDD7pymN+YbhiKIt4pDmla2lCfSAMocm5wE=
Subject key identifier: D0:BD:54:BB:33:04:6C:93:52:A4:B7:69:63:80:87:78:EC:90:64:4C
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 0194BCE0B64BA7559C5D1F4EB090C0CCF3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 5lc5ZmxcIf_S-qtTdxwVFYdfw74.roa (hash: nWQ6LzHmMcNUWFVJjD8F6A2IBDinnQ/3GkZ+tOcMhcc=)
2: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: JC7xLqA1g9QW350C4n8psYlnm1KewciNuM4AXQ2i+4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b6:4b:a7:55:9c:5d:1f:4e:b0:90:c0:cc:f3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=d0bd54bb33046c9352a4b76963808778ec90644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:a2:18:20:bd:7d:f8:2b:7d:3c:ba:e5:2e:
0f:9f:e4:77:60:30:35:50:84:07:0d:d2:59:83:93:
00:f2:4b:8a:83:a4:08:2c:e2:9e:d6:c8:14:95:25:
39:2c:74:7b:39:f2:22:f1:b6:90:da:05:9d:35:39:
49:ce:39:4d:86:9e:f3:69:3b:63:cc:51:b7:da:f7:
aa:54:18:c8:d2:a8:ef:ad:3a:ae:fc:ec:a4:4e:cc:
52:5a:d2:80:3a:a8:1a:e8:ed:ee:62:3b:13:23:03:
db:d1:1c:cf:9f:34:63:2f:d6:64:bb:37:e6:e1:98:
6a:97:2f:f5:e0:4a:e1:4d:ce:01:ca:b7:ba:5a:25:
4f:84:58:24:ff:26:4f:1c:b7:95:33:3b:58:96:a1:
66:4e:26:18:98:82:74:6c:af:12:3c:29:2d:70:85:
2c:69:d7:e3:d1:67:74:49:6d:df:cb:4a:36:44:93:
59:7e:74:6e:6b:f6:7e:2b:b9:bd:0b:d3:8c:05:4b:
5b:a9:02:63:c3:e8:33:92:d6:75:ea:1e:b6:39:58:
74:d4:8a:e3:fd:f2:ab:fb:9f:e1:a4:ca:78:eb:ad:
79:24:30:6b:96:11:4c:49:44:bc:0a:09:cc:32:35:
fa:13:8b:ff:dd:da:94:5e:0e:2a:e0:ab:c8:2e:d1:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:54:BB:33:04:6C:93:52:A4:B7:69:63:80:87:78:EC:90:64:4C
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:2d:ed:97:a3:cb:6c:0b:93:34:f7:cb:0c:7c:54:f5:8f:
da:42:56:e1:7e:4a:5b:a6:8a:16:f5:e1:80:dd:a2:02:e1:aa:
3f:63:3c:95:d9:a6:6a:f9:24:f5:83:a3:45:f1:0a:d7:65:27:
a6:41:2a:93:b2:26:ef:69:94:1f:10:d7:38:bf:f1:79:dd:31:
3f:b0:12:45:48:5f:9f:9f:95:d8:cf:3a:2e:75:ef:ca:a5:96:
fd:07:0c:a9:a5:0d:ee:5d:cb:a9:ca:6c:6c:c9:ab:98:b5:4a:
c5:2c:fb:4e:fd:bb:34:69:82:b7:e9:be:ca:b6:88:38:cf:73:
8f:f1:d5:3d:43:54:6a:6e:84:72:ed:03:0c:79:e2:8c:a1:1f:
33:da:b3:58:10:83:94:b1:78:49:95:b5:0e:74:a2:9f:eb:4c:
eb:8b:fb:ec:22:68:96:0f:b4:c0:ec:44:8d:24:eb:90:09:30:
7d:46:18:a2:80:d2:ba:51:10:ce:a6:c4:a8:b7:c0:90:e6:af:
1b:3e:ff:54:4e:cc:67:23:90:21:f4:f0:c2:84:e3:b4:9c:aa:
12:3f:e7:82:70:bf:f0:9e:4c:4c:37:ed:1e:e5:47:de:41:6c:
63:7e:4e:3f:8f:65:ac:37:34:b0:67:51:6f:a2:11:8c:3e:4e:
cb:6b:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:06 2025 by rpki-client