Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier: fHziOBwQgZQ6EJzmA46pD85RDl6xLFu+C61e653nEsc=
Subject key identifier: DF:09:1F:C7:63:EB:B1:BC:BC:36:63:C8:F7:92:F6:5F:D6:1C:53:B6
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial: 0194BC04A6FFAB357C2BEF44B42D0D3EE629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number: 0396
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: nyI4ZYKcNpZjTSxMQ473dicCeqXirPtRJsV/jodc8Es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:ff:ab:35:7c:2b:ef:44:b4:2d:0d:3e:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=df091fc763ebb1bcbc3663c8f792f65fd61c53b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:8a:09:b0:e8:ca:8d:ba:14:07:76:d3:f2:
9f:ac:dd:a8:8f:3a:a8:af:10:c3:1f:57:e1:e1:6e:
6c:c6:ad:4f:f9:1d:a5:19:e8:5e:11:e7:09:50:c1:
0d:65:07:c1:d7:32:37:7e:ed:45:fd:b3:6c:85:36:
67:d1:fe:3a:ee:1f:c7:48:ac:a3:aa:43:f5:db:14:
5b:58:40:b6:3e:24:2f:a3:c1:4d:ea:24:a2:37:f0:
e2:d2:7b:71:26:92:f2:94:86:87:6b:38:23:f2:f6:
1c:12:65:84:dd:77:48:9a:af:dd:ae:99:c3:09:14:
b7:0d:15:80:35:f5:5f:da:af:da:73:f5:a2:3d:21:
f7:85:a8:38:94:65:cf:b5:9b:fa:1a:55:27:c6:8e:
a0:32:ca:48:43:c6:df:6d:89:66:d1:30:02:17:de:
45:fd:5c:88:93:61:4f:10:60:ee:a6:57:e3:17:17:
0d:44:2c:87:ee:a3:f3:c8:7e:4d:25:95:3a:59:67:
fb:82:65:26:ca:fe:88:43:83:8a:3c:68:e7:13:10:
ce:3e:33:3b:14:56:cb:ce:e0:dc:5c:8d:d9:28:98:
a7:bf:44:ce:b9:9d:8b:4f:c1:43:f0:1e:84:f8:b6:
07:a1:f5:ff:8f:4a:ae:04:7f:e4:be:63:bc:8f:7d:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:09:1F:C7:63:EB:B1:BC:BC:36:63:C8:F7:92:F6:5F:D6:1C:53:B6
X509v3 Authority Key Identifier:
keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:1a:bd:47:d9:86:ad:89:92:1a:fa:77:2a:59:33:7e:84:
25:45:1a:f6:3f:a9:0f:62:50:fe:69:e1:65:70:66:8f:34:e3:
3b:4e:31:f8:c3:41:6f:42:e9:1e:da:cb:d2:c4:2b:ab:a4:ed:
53:ba:23:76:f1:10:da:7d:32:85:fa:2b:27:a8:2f:3b:b9:af:
2d:d2:20:81:32:c1:f0:52:b9:3d:91:4d:65:a1:39:93:3f:c7:
4f:e0:30:c7:fa:76:91:88:4c:d3:83:7b:c9:0b:cb:6a:5e:71:
e7:60:a3:c5:a4:04:9c:a8:96:d0:7b:35:ae:25:0f:93:9c:d2:
ef:9d:5f:67:56:ee:ad:fa:85:c7:50:fc:44:ab:43:61:91:65:
39:05:b9:8a:d6:11:11:3c:c2:4a:a6:7e:25:b9:8a:86:c9:6e:
18:f5:67:e2:36:c8:7d:3a:a6:81:24:f6:27:00:68:87:26:49:
be:bc:da:a2:59:07:de:3e:8e:99:31:2c:64:9e:49:00:2d:f2:
1c:72:59:31:f3:e7:1c:f1:53:d6:9a:1f:45:28:3f:1b:00:88:
d5:fd:56:f7:2c:0a:32:c3:bc:ba:6d:1f:5e:c7:17:02:e6:13:
b8:25:a9:f6:51:aa:70:83:d4:71:71:46:b1:96:68:49:0a:f6:
94:da:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:27 2025 by rpki-client