Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: HWUbFQaOzzW+/s9pwJvAUYj1T2OdhYA8NGZoGXDRJT8=
Subject key identifier: 0D:21:89:97:E4:45:07:D3:9E:57:72:2E:89:13:0B:FB:F8:CE:AA:39
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 0194BCA9A5A18CF97E3D67E1F99DF1DA38EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: Wmc5yYVaGJ7uHE24vbc7tW45DOM.roa (hash: eqf1mvXxL8vo0q3xITeHe/8//1Yj7TaFakzQyNyDmc8=)
2: ijYRlmNl6uA744Qux7JZwJCActg.roa (hash: pRc6ysDWq8mR6b4C/2Dfn02VAUo5UWjYvCBDj+PrKhE=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: qqTNJ3OWKjZ8efJZ0Y2l3ZMnDl2/woLFkBrKYXSuuqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:a1:8c:f9:7e:3d:67:e1:f9:9d:f1:da:38:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=0d218997e44507d39e57722e89130bfbf8ceaa39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:18:fc:34:4d:d9:0f:dc:d6:1e:bb:ba:df:
03:50:90:97:19:c0:c9:65:c3:f0:19:e2:82:ea:3a:
74:bc:9b:54:74:82:a7:5f:dc:7b:fb:8b:45:42:a7:
ae:04:46:1b:8e:3d:e9:22:41:8c:fb:45:55:ca:7b:
7b:13:48:7b:39:3c:e7:62:17:ab:8a:6b:dd:4c:f9:
29:36:43:e1:1a:1f:18:bf:5d:4a:d5:1b:43:d7:da:
1f:e8:7d:15:a3:c4:86:50:a7:2f:f0:c1:30:3a:fa:
6c:c4:13:c5:af:50:d9:e9:c6:a3:a4:40:ad:fc:cf:
17:be:b3:de:f1:7e:c4:89:0d:3e:a1:91:bc:78:e9:
12:40:0d:03:78:7f:cb:30:91:63:f9:1a:89:b6:12:
48:9f:2f:b6:8d:a7:34:fe:c9:b6:c1:ea:3a:2b:b4:
85:86:ae:a9:91:b6:6c:8a:d6:66:2b:78:53:65:ba:
27:b4:ce:2c:f0:a1:94:c6:1a:64:38:cf:8c:95:22:
33:77:b6:b9:c3:3f:a6:cb:ae:45:ec:60:8c:6b:70:
be:40:74:6c:50:54:69:86:4f:b9:fd:5a:43:c3:2b:
85:ed:3f:02:aa:32:43:4f:27:8e:64:f2:95:32:f0:
b2:9a:ac:58:16:79:58:7b:75:df:a5:3f:ec:d3:3d:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:89:97:E4:45:07:D3:9E:57:72:2E:89:13:0B:FB:F8:CE:AA:39
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:b0:83:5e:0e:8a:12:68:0e:30:c7:3a:da:24:5a:a0:ca:
96:d4:a4:78:a3:00:b2:a4:92:26:f4:89:75:dd:ff:cc:56:69:
0f:12:92:de:c1:e5:ce:46:ff:54:fd:e0:68:02:a9:84:40:c1:
b5:2c:cb:8f:b4:49:bd:6d:99:73:d2:a8:bd:ea:a9:14:36:aa:
ca:0d:7b:fb:76:cc:23:8b:d7:78:27:78:fe:c2:56:a2:be:a9:
7d:ca:49:3d:a3:0f:f1:4e:73:ca:e1:e9:10:8b:b4:0b:1f:c8:
39:d8:51:90:f8:9a:92:3e:0d:cc:bc:29:45:06:72:28:42:79:
00:7c:22:68:2b:a6:94:89:6c:4c:55:b3:a8:34:39:d4:33:a2:
c7:87:8b:2b:77:63:6d:a3:c2:ac:4c:a5:34:b0:0a:39:cd:c0:
40:2d:87:f5:b1:7d:ff:56:fb:fb:ca:68:6d:2b:35:ca:67:56:
5c:c4:ab:5a:78:83:11:51:ef:c7:67:d5:55:79:c7:19:d2:1d:
8b:67:ed:20:f8:21:3f:9c:8c:cb:8f:72:e8:47:8e:88:71:c4:
95:71:a7:75:0f:c8:b7:6e:64:3b:6b:53:fc:70:85:a6:13:54:
89:db:8a:5e:ed:5e:02:f9:77:e5:af:83:aa:fe:49:17:2d:13:
97:02:28:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:37 2025 by rpki-client