Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
File: xypST5sbOAHb18iaFgrsB2tX5yk.mft (raw, json)
Hash identifier: aHvpp/Q9s9isdcQ81TiT77P2osKclvH2q1QumgA0aMI=
Subject key identifier: 68:12:55:24:93:DF:31:9D:D9:C9:B2:50:FB:ED:D2:9F:BA:58:07:56
Authority key identifier: C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
Certificate issuer: /CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Certificate serial: 0194BD4E7B80F809E8807DD9F47CAC15FBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
Manifest number: 0C91
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: B5IPw2to02EUzOiZAkDMZAMJU40.roa (hash: SqPGfdHaKQmJHjb0Md5WPKQZqfqDkbS8MZiJDiQQgE0=)
2: QhPm8U1brOIqGs2lZ2LGdcxBiLA.roa (hash: b6IzZ0v53J6OJOZBPLixdFrIPoMrdc5UH4inFHWFRvM=)
3: kYBNVlP4IkeOs0bTiFV8wc5LMQs.roa (hash: g3QlMNFCFIgPt5yC/cat7+5gVwDPl1ap/dvIpROnsyw=)
4: xypST5sbOAHb18iaFgrsB2tX5yk.crl (hash: ezL13GQyEq6sh5++C9S4k0/B0WAgneEqSRJTt7rIjyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:80:f8:09:e8:80:7d:d9:f4:7c:ac:15:fb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c72a524f9b1b3801dbd7c89a160aec076b57e729
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=6812552493df319dd9c9b250fbedd29fba580756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:40:e8:37:fa:36:05:f0:50:85:f6:56:2b:
61:77:6f:4b:81:13:7f:15:ee:bd:69:ad:65:52:b1:
b6:8a:d5:0f:32:ff:a8:1c:db:b9:a6:d4:d7:c1:0d:
a1:63:a4:df:46:3a:09:37:78:87:ba:a0:65:ab:ca:
c0:d5:fa:e9:74:27:a9:ab:06:01:81:79:36:e3:1a:
84:63:92:5f:bc:26:43:4a:02:3a:38:b5:ce:c3:96:
46:05:f7:40:c0:ba:41:a6:42:6d:33:7d:65:a9:a0:
c6:01:b8:ac:aa:6a:63:6d:9f:94:a5:13:14:ea:ca:
82:39:1a:38:74:23:ef:31:83:da:ae:b4:b1:d5:e9:
e5:25:8a:60:b9:98:ec:d8:73:71:ec:87:fc:31:be:
cd:a6:3a:6b:2f:b0:75:ef:ea:af:ca:20:12:81:7c:
8f:cd:a7:23:03:7f:a4:61:20:21:66:0f:99:e7:66:
1b:18:9c:70:2b:46:05:d5:eb:17:df:d2:dd:15:76:
93:9d:a0:b8:c1:09:6a:36:7a:28:77:19:a1:87:0e:
70:ea:d5:2b:9a:89:9a:1e:6f:e0:92:e6:9c:08:9d:
f0:31:aa:85:99:45:2d:36:ee:49:1c:ca:f9:9d:90:
9d:c0:4e:88:1c:18:4e:e4:b2:84:33:2b:28:3f:e5:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:55:24:93:DF:31:9D:D9:C9:B2:50:FB:ED:D2:9F:BA:58:07:56
X509v3 Authority Key Identifier:
keyid:C7:2A:52:4F:9B:1B:38:01:DB:D7:C8:9A:16:0A:EC:07:6B:57:E7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xypST5sbOAHb18iaFgrsB2tX5yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4e3cc2-1a33-495a-999f-d7a684a57b19/1/xypST5sbOAHb18iaFgrsB2tX5yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7e:86:f2:00:dc:3d:28:14:18:8f:1a:54:47:41:ba:48:48:
94:0d:88:84:77:6a:22:b4:a0:4c:64:7b:73:b6:a2:62:6c:e4:
b7:97:cd:ec:3b:27:95:87:50:17:06:c5:d1:f9:a6:db:ea:40:
a6:6c:76:d4:45:eb:3b:cc:a5:a2:e8:bc:3b:c8:26:46:2e:d8:
2a:38:e3:9f:c1:0d:a2:a1:7e:41:5b:7f:00:e0:e4:93:42:03:
d2:b8:02:fd:2f:9f:dc:37:28:bc:84:21:16:d0:39:16:54:b3:
b9:42:86:95:61:81:73:d5:f5:69:74:b2:98:88:5f:56:9b:74:
c0:c8:f1:2c:83:20:c2:35:04:5f:98:13:22:ed:39:e0:db:8d:
f2:26:63:7b:73:c9:3f:62:86:2c:cb:b1:0e:23:4e:74:f9:c6:
43:bb:77:01:33:c9:77:40:e8:17:97:55:37:fb:bc:69:d0:76:
1f:f1:2d:68:06:f3:76:37:e1:93:02:a6:53:52:ed:62:af:1e:
33:dd:9e:83:c2:19:12:c2:5c:0b:62:be:a5:73:2a:6f:bf:64:
78:f0:e7:df:e9:b6:e3:a6:7d:fe:5d:10:d7:6a:12:66:24:99:
45:e1:db:9b:e5:dc:26:70:c3:c8:d7:b2:b8:79:1c:c2:a9:fd:
05:66:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client