Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File: xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier: 8pDFArH5fBmD/TWLBmJUzaFy8y6CbpMXg2osrVqCyIY=
Subject key identifier: F8:8E:8D:D6:74:7E:5A:9F:64:9C:C4:82:EF:15:C5:DF:35:45:21:A8
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial: 0194BD4E5217BBB2C1E2284C88DC90F54EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number: 1349
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: yMzM4ks1ddxNele59qsuGO/HevXbpg9zI2yvNbgxtes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:52:17:bb:b2:c1:e2:28:4c:88:dc:90:f5:4e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=f88e8dd6747e5a9f649cc482ef15c5df354521a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:4d:d5:bc:a0:a4:73:66:93:41:25:fb:1e:
65:b0:58:b8:02:28:60:98:7b:b4:21:5f:f2:fd:45:
86:63:57:fe:56:b1:a6:76:8c:83:36:61:42:7f:55:
cc:d8:22:2e:a1:e4:dd:b5:13:bd:64:8e:45:25:9b:
a6:7b:9f:94:a0:67:45:80:66:68:40:6a:76:19:0a:
b7:d5:6c:7e:ae:39:59:4a:b2:07:b8:73:e4:35:1f:
21:c6:bc:e5:0c:4c:67:da:4c:7a:f5:cc:24:d8:cb:
f0:bb:15:20:61:87:fb:a4:01:e3:e3:2e:18:3d:4d:
c8:35:3a:70:c7:eb:53:92:98:f5:59:14:c8:d7:dd:
4b:92:15:1d:ca:80:59:44:fd:b7:50:60:c0:d1:10:
f0:36:22:f7:e9:01:08:88:4a:63:ae:48:12:eb:5e:
9a:1b:2c:65:cb:a4:f8:15:fc:60:61:00:db:14:59:
11:07:d3:fa:37:37:92:64:fb:7e:7a:66:ff:4e:75:
f8:0d:fa:68:55:37:94:2e:0b:a8:03:f5:62:18:c9:
40:5c:93:ad:ed:f8:ab:c1:74:c8:53:ee:6a:6e:fa:
1e:b1:db:b9:78:2d:b0:d4:9d:39:8c:f8:72:fe:63:
97:0d:06:00:78:75:1a:f5:23:8e:8c:ad:f5:4c:51:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:8D:D6:74:7E:5A:9F:64:9C:C4:82:EF:15:C5:DF:35:45:21:A8
X509v3 Authority Key Identifier:
keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ce:2f:4c:62:43:9b:94:d2:75:91:80:03:84:8c:fb:55:a2:
06:60:20:0e:1c:c9:30:76:2f:e4:ec:17:c8:e0:ec:0d:33:3a:
92:4e:de:cd:a8:b0:14:3e:30:e2:20:bb:7e:3a:7b:6c:d2:3a:
3f:b7:8d:6a:e7:ea:a8:56:fc:9d:99:4e:a4:4d:2f:4d:87:85:
4b:16:68:45:e5:46:4f:30:79:45:de:66:2f:bb:db:38:c3:f5:
52:79:30:ca:39:68:0d:26:d4:f3:a4:aa:36:50:b4:62:5d:c9:
17:e4:ed:4e:5e:3d:10:02:06:fd:4d:2a:70:53:4f:aa:c5:99:
2f:d9:c1:86:d2:2e:8b:80:46:38:b7:01:65:56:d9:d8:1d:47:
94:57:00:b7:95:d2:36:67:ca:8a:19:78:f5:30:7e:ca:b1:68:
35:0b:92:28:79:10:68:da:48:88:80:ab:98:7e:70:ab:03:7f:
61:2e:bd:84:e6:49:39:74:32:e4:a6:ac:8c:4a:1c:42:7f:5a:
1b:00:94:48:22:60:09:c7:32:44:27:01:fc:32:9a:86:70:1d:
18:80:58:ca:6e:47:a2:22:b0:aa:9a:6a:c7:db:6e:19:c8:2d:
80:b0:2a:fb:d3:1b:b6:34:23:a6:db:10:52:c1:3d:d3:b6:f2:
65:94:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client