Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: nOjyJrKUsvn7EUK3FVPq2SWpc3wWrNrykCqC0KkhcE8=
Subject key identifier: BA:1B:5E:66:F9:62:62:E8:F9:A9:DB:CE:58:8B:BB:9E:11:23:EC:93
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0194BCE0738BD918FEA3297F7D5BD2CE2925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: 0wrkf2Dx3454pUCFtA7UluMEc1z/ibT4a5K2XDxVvOA=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:8b:d9:18:fe:a3:29:7f:7d:5b:d2:ce:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=ba1b5e66f96262e8f9a9dbce588bbb9e1123ec93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:e8:1b:c9:ab:d8:0c:bc:ea:c7:6f:86:99:
63:19:eb:6b:5a:ce:08:d3:3b:83:b0:81:f9:1d:58:
e2:51:0b:7b:41:14:94:05:da:98:53:b1:03:12:2f:
02:f4:59:96:30:fc:ba:19:33:53:e5:72:a9:08:39:
23:b7:5a:46:ef:9c:b0:cc:98:e4:4b:bf:8a:47:5b:
3e:d2:c5:65:ee:c2:a9:df:29:39:ff:fd:94:f3:f6:
4f:0d:88:1b:8f:de:99:c8:81:70:5e:fa:f4:fe:b1:
43:ea:1f:5a:82:b8:bc:6e:7e:8d:73:a3:2f:48:b4:
dd:c7:b3:43:9d:71:f9:cb:e8:03:24:0c:86:13:e5:
ae:82:b8:19:da:fe:d8:18:aa:ab:52:85:13:b4:d1:
4b:80:cd:cf:ac:2c:09:c9:de:c8:2a:8c:b4:94:bc:
19:60:6a:16:32:cb:85:fe:0f:46:72:ab:3d:1f:45:
18:56:b8:b8:20:b3:dc:d2:2d:d5:a4:fc:58:d4:6a:
ad:73:57:81:6a:4b:75:55:8a:10:b6:90:67:0e:a8:
17:18:7d:e7:74:b2:44:7d:09:ff:3f:22:1d:70:ea:
30:1a:6c:25:74:bc:78:d4:f5:fa:6d:62:0f:c0:c1:
30:c2:fc:57:3a:a7:07:94:66:09:47:ac:bc:c5:28:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:5E:66:F9:62:62:E8:F9:A9:DB:CE:58:8B:BB:9E:11:23:EC:93
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0e:f4:5d:e1:76:36:9c:a8:35:45:c1:87:f1:76:5e:26:bd:
ef:b7:c4:ca:1e:a0:86:a9:46:d7:f5:53:c5:4f:b4:fd:d5:54:
65:08:94:a7:c8:82:15:99:fe:68:9a:a0:a6:4b:19:77:e3:fa:
c7:bf:43:9c:4b:03:71:df:f2:40:12:7d:80:e7:5f:e9:66:8b:
4d:8b:0b:6b:bd:a6:2a:bd:7a:fb:64:e2:42:f2:b0:71:18:8e:
25:3a:8f:13:f0:e9:74:bc:0c:2a:ea:24:4f:fe:2b:8d:60:ea:
58:97:c3:74:9e:61:a9:1e:e8:39:8b:5c:8a:17:c3:ad:d2:fc:
10:f0:ec:06:aa:5c:3f:09:26:3f:ed:94:c7:01:12:8e:0b:48:
b6:11:75:18:b5:62:34:7f:d3:e6:b3:5b:82:80:72:d0:49:52:
fc:2a:8c:1a:73:63:88:ea:a0:c8:88:58:e9:4d:5d:ee:04:f3:
85:9d:61:6f:aa:3e:82:bc:48:79:69:60:f1:1b:81:90:25:98:
e4:3a:34:a3:4a:07:c2:76:46:ce:e1:d3:87:ed:e5:31:7d:38:
47:bb:47:51:5f:cd:99:bc:6f:cd:e1:3c:67:34:78:f3:84:f7:
b6:5f:01:b8:7c:3a:24:52:6e:e0:d5:cc:91:ea:17:80:86:4d:
b8:7f:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:24 2025 by rpki-client