Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: YEzzIqtQOEkMLmcqJxl7+Zqyry8XJFO/feLdO/Ch0p4=
Subject key identifier: B8:43:6B:9D:31:60:37:77:C8:77:A1:6B:B0:91:C1:E1:21:3E:79:1E
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 0194BCA9F39DAB6B14D4A0FF27AE6DB5C2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0B52
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: veXcMeL1O27Qno1KM8eagx0ZYTEKciswIUSfOE5zmXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f3:9d:ab:6b:14:d4:a0:ff:27:ae:6d:b5:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=b8436b9d31603777c877a16bb091c1e1213e791e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:2b:d7:0b:ff:05:c4:e5:af:e7:6a:6e:a3:
74:a1:f5:14:99:2b:f5:c9:15:78:80:a6:bb:8a:a8:
63:f3:0e:70:e4:02:56:af:fe:5c:a4:ad:36:e9:3e:
a6:9c:72:4a:ef:6e:ac:01:aa:cb:b2:d5:7b:43:26:
3b:e3:cb:36:6b:83:22:2a:f4:d3:b3:f3:e1:a8:bc:
71:58:32:92:07:b4:3f:93:3c:ae:99:cf:5e:31:02:
e4:ef:ba:45:04:78:87:25:9e:d4:27:18:2a:2b:87:
7c:58:4f:0e:83:99:74:82:ab:c7:19:06:5f:ec:81:
29:fd:4f:94:2d:e7:0c:a8:46:21:68:ab:83:8d:86:
f2:6b:c4:30:db:6d:99:aa:34:5e:69:7e:42:52:b0:
dc:ea:a3:c4:d0:db:8a:1a:ec:3c:22:80:b8:4e:82:
86:18:ad:fb:72:fc:3d:6a:f4:6c:1f:d5:7c:ec:03:
83:a3:e6:03:02:db:aa:c3:ab:d8:86:ef:8e:dd:eb:
53:96:0e:76:55:c7:3e:b6:e5:00:f0:6f:8d:ac:00:
f9:aa:a2:74:93:34:96:1a:40:07:b5:a7:5d:22:08:
b5:e1:0e:5b:88:52:e9:48:eb:6c:a7:b6:5a:99:8d:
50:24:38:07:c3:f0:40:19:d3:52:91:e2:15:15:a3:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:6B:9D:31:60:37:77:C8:77:A1:6B:B0:91:C1:E1:21:3E:79:1E
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:ed:ad:87:82:93:80:51:03:33:ff:6c:b1:be:95:99:91:
ee:00:61:46:6f:6b:92:a2:35:83:d0:2a:e7:05:1d:72:3d:54:
e7:f1:39:23:02:5e:5d:c1:46:eb:61:5b:96:ba:d0:30:b7:59:
0b:e6:52:eb:45:dc:54:45:8a:b6:36:df:83:2d:00:5c:89:81:
f9:b6:b9:49:d0:dc:fe:f9:8b:ec:89:fe:ba:9f:a0:70:04:f3:
e8:6c:99:5b:f4:72:a3:4d:3e:a4:9d:9a:6d:cb:28:4e:77:8a:
50:ca:71:ed:7a:f3:ca:77:e0:af:3c:f2:db:ae:89:19:c6:43:
33:8b:75:76:8e:2d:73:75:e9:71:39:9e:36:9c:4d:57:86:fc:
5a:5d:84:5f:f9:ac:00:67:a8:17:d4:8f:ea:1a:4b:7d:91:b3:
68:86:04:2f:21:48:f7:47:75:56:56:8f:0c:0d:97:df:b2:7b:
72:30:8a:80:48:67:02:9b:1f:ea:47:05:30:e8:ac:a0:9b:d3:
7f:8a:6f:06:13:d0:e6:5c:54:1b:e1:db:52:06:80:c8:dc:24:
f1:f1:5e:dd:c4:50:04:6c:cb:02:b2:31:f0:b6:3d:75:fb:6f:
09:67:8b:92:f7:d6:2e:2e:5a:ee:34:31:11:2b:b8:9c:50:e7:
3a:9a:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:40 2025 by rpki-client