Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: FrDSSQgyaWiCcjxNquq8El7CJ1KeD1r0/85icamyYBI=
Subject key identifier: 76:D1:C2:68:72:6B:D3:65:07:72:DB:E5:8C:F1:98:49:BC:11:F6:F3
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0194BCE0629693CB7528A849866B62CEB46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 9F
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: 9pL72uhZxkgQ96z/6Os4WTSLc6q3vsRyx3thelvC0mc=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:62:96:93:cb:75:28:a8:49:86:6b:62:ce:b4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=76d1c268726bd3650772dbe58cf19849bc11f6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:40:da:b4:8d:8e:92:de:c3:61:7c:ad:77:
e8:f7:9a:90:99:54:fc:0a:8d:97:78:7c:23:a3:5a:
1c:ad:8a:57:e2:8f:04:57:be:25:40:f9:58:dd:aa:
2f:ac:d4:10:37:96:49:fc:53:8b:8c:9c:61:91:82:
44:33:dc:0b:3c:e8:7a:ab:f9:45:d4:c2:db:78:02:
94:83:5a:f5:62:51:49:a3:77:75:d9:7a:cb:15:33:
a9:4d:d9:4d:42:3e:23:b3:86:91:7f:73:fe:7c:4f:
48:5e:cf:b1:56:7e:ed:75:23:5e:f2:5e:2e:7c:24:
5e:3d:e6:23:e4:ee:a2:67:41:17:f1:aa:d8:a0:e1:
b2:8f:4e:a2:b9:9a:13:9f:80:6e:ae:c6:66:8b:9f:
41:04:b2:19:2e:87:3a:8b:20:a6:dd:b5:93:a3:bf:
0c:1e:ed:08:78:90:85:87:f1:a4:8d:b2:2c:ef:25:
3a:07:ab:a8:bd:6f:34:b9:e8:b7:8b:0f:b4:38:a7:
5a:48:e3:22:97:e4:a9:03:13:64:ff:9e:b1:7d:75:
8c:5d:9c:af:69:97:53:4f:75:be:5c:15:da:a5:12:
3e:81:32:0d:51:c0:6e:4f:96:f2:4f:1c:1a:06:82:
27:e6:9c:20:73:02:83:78:f0:2f:01:08:28:06:36:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D1:C2:68:72:6B:D3:65:07:72:DB:E5:8C:F1:98:49:BC:11:F6:F3
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:17:7c:85:14:86:b5:46:2d:39:72:bf:1f:09:30:fb:5b:aa:
7a:1c:a1:69:22:06:4c:6e:51:a5:02:32:4c:8e:4c:5c:4b:37:
8e:38:49:e0:17:44:3e:2f:d1:10:13:37:41:a1:be:0e:2e:6e:
40:cf:2c:5d:2a:c3:bb:73:1a:48:71:eb:d4:aa:70:4d:54:42:
0d:0e:c4:fd:dd:44:21:18:db:0a:94:74:65:8e:e9:02:df:ba:
d0:a8:17:b2:8f:20:66:db:a9:27:3f:41:d5:b6:65:da:af:db:
4d:44:a5:d6:11:a6:e1:9a:8e:ef:fb:ea:8c:ba:67:a3:9d:d9:
a7:d5:12:e2:6d:1b:45:ed:f3:c2:29:a7:c3:22:a0:68:34:a1:
29:70:eb:15:42:0c:d5:4f:fd:a7:b8:02:02:45:1b:95:c0:f8:
6c:0b:64:03:a6:d0:46:82:02:e4:51:88:fb:5b:60:86:6e:96:
44:96:b5:dc:a2:3e:88:a2:3d:d7:19:f0:ad:38:5b:98:8e:af:
6a:98:4c:e3:3a:18:9e:ce:1a:79:fd:01:f4:42:2f:a5:3a:ab:
ab:d9:09:bf:08:59:0a:42:18:db:de:4b:27:66:ea:c2:0e:d5:
fd:10:00:fe:a3:39:f5:6a:ab:b8:88:70:c9:0a:18:eb:0f:65:
3d:38:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:56 2025 by rpki-client