Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
File: xOuh_fbE3hksHT7fioAMpZf5fWg.mft (raw, json)
Hash identifier: 2M5ArDa2BlHESCFk3vwcl4fcee92VjGAvJak0dwjKAU=
Subject key identifier: 93:4F:DB:0F:85:F7:69:93:45:4F:08:51:81:74:D2:57:1E:BB:5B:DD
Authority key identifier: C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
Certificate issuer: /CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Certificate serial: 0194BC72CFB461FCA4F8EEEB14F28C4EEA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 72HHwQG1cN_qO4FcLQwAyTy6xew.roa (hash: CsX3STKLKja6Uu/Zgsrd9OFIxcGZ7xhO/zWQNL1ZiOM=)
2: m1ZjybVm1S5j0SAvT0vx3ZdLLcU.roa (hash: Eod/xRzuu3Y4PHfHiEca7otVJnAoVoC1f03o9tGBzWE=)
3: xOuh_fbE3hksHT7fioAMpZf5fWg.crl (hash: rKzaQdcR1YFd0QVM3QXM3Lzf9Ef6s+EwnbiapRC7gD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cf:b4:61:fc:a4:f8:ee:eb:14:f2:8c:4e:ea:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eba1fdf6c4de192c1d3edf8a800ca597f97d68
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=934fdb0f85f76993454f08518174d2571ebb5bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:da:90:da:42:8e:7f:77:ee:5a:c6:c8:68:
3b:4f:e3:54:31:c6:5e:55:7b:89:95:50:ed:6a:56:
8b:31:39:63:ac:d7:1e:c1:78:9e:52:a9:1d:a9:9e:
35:c9:37:be:38:d4:d1:6a:f6:6d:4d:62:9a:64:75:
39:84:b5:58:01:f0:63:4b:43:94:07:43:5d:e9:72:
06:0a:df:51:26:53:de:7f:e4:2e:c5:b2:0b:94:d3:
68:ad:c5:d4:d3:9d:1c:dc:4c:39:11:a4:e7:ff:2c:
e1:bf:c9:b0:52:09:6a:7d:65:17:ff:83:03:ed:d7:
20:23:10:73:69:b0:56:ec:07:b5:74:27:9f:db:da:
63:c4:45:7e:0a:2f:91:38:d8:69:37:f5:70:20:ab:
90:1e:2f:5d:94:5b:17:df:07:35:7f:90:1c:31:80:
e6:70:85:47:51:1b:d6:ab:5c:29:20:4c:1f:24:53:
4c:15:5d:1a:42:22:b6:32:44:db:16:5c:64:6b:6a:
b9:67:31:9f:a5:56:62:38:a2:ce:39:e7:ba:c9:03:
10:33:38:0f:f7:56:c1:1f:83:fc:e7:12:a3:96:1e:
98:9a:d4:37:77:72:58:ae:b8:6b:62:6f:69:ba:3b:
de:1d:ed:f3:ca:4c:27:ca:71:56:72:e5:83:e0:cc:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:DB:0F:85:F7:69:93:45:4F:08:51:81:74:D2:57:1E:BB:5B:DD
X509v3 Authority Key Identifier:
keyid:C4:EB:A1:FD:F6:C4:DE:19:2C:1D:3E:DF:8A:80:0C:A5:97:F9:7D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOuh_fbE3hksHT7fioAMpZf5fWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1a6159-1dc6-4a09-844f-5128560dbdfc/1/xOuh_fbE3hksHT7fioAMpZf5fWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c0:2b:27:34:b5:d7:0b:e7:1b:34:c9:3e:21:f3:56:0b:b3:
0c:ba:59:d3:2b:d2:38:bd:2b:c6:ec:86:f0:35:49:19:31:40:
1c:3d:c4:4e:71:c4:e3:ae:98:08:1e:37:b9:7b:ea:97:3b:a7:
c4:26:a2:fc:fa:ad:8a:58:d1:19:31:ad:da:c8:00:da:d1:ea:
b3:2e:7e:f2:db:88:58:be:64:52:1a:d1:5e:c2:34:ef:d8:9c:
29:a2:e1:98:85:d1:74:ee:ea:9f:c1:b3:41:e0:ad:ad:f0:f9:
79:b3:00:8c:14:2e:56:d1:a8:ec:86:ea:8b:ac:08:b8:19:96:
94:0b:66:72:eb:04:64:b3:21:09:16:4d:51:08:0b:bb:f2:a3:
78:b0:15:a1:92:d1:c4:b0:f7:2e:de:b5:ee:fa:5e:91:0a:31:
e1:9b:48:58:be:8c:bf:fb:76:a9:8b:2d:3d:79:57:9d:a2:24:
da:81:c7:20:44:b2:bc:db:c2:aa:72:05:c5:a2:f8:f9:65:84:
28:74:ed:47:6b:a6:ef:3c:d8:99:b4:c5:ad:22:20:52:db:98:
5c:2b:02:43:b6:f5:7b:25:b5:63:5c:98:e6:f5:d1:82:c3:ab:
a7:e6:2f:e4:9f:73:fd:e8:73:2c:d3:46:8a:c4:bb:a3:ab:c6:
18:7e:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:07 2025 by rpki-client