Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File: XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier: nStC0pmIfPmHI+Z8u4naIo4prgVfOIqfp1TmKQqpYVQ=
Subject key identifier: 5B:49:70:A5:69:64:A6:99:02:C3:16:A5:37:E3:96:1D:0C:18:1A:5E
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0194BD4E7EEA0A331797A1A1E87DFE9A18C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number: 0C9F
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
2: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
3: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: G+51iBhQDiYFaGw/bWg1e8zVrFehugyQuo6gYKo3GKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:ea:0a:33:17:97:a1:a1:e8:7d:fe:9a:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=5b4970a56964a69902c316a537e3961d0c181a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:e9:81:ce:51:61:19:33:55:02:d3:ce:34:
94:ec:1b:3d:4b:3d:3c:03:5d:ea:1e:aa:31:bb:b8:
ad:d9:70:ad:60:dc:30:f8:b7:96:1d:a7:f7:da:75:
52:b9:38:4c:52:72:f5:c1:93:0e:78:0d:7d:29:c4:
8c:26:b4:ae:d5:2c:a6:7a:ea:67:de:96:b1:ce:06:
42:9f:b7:4b:6f:18:61:c4:fe:7d:fe:51:3d:3a:61:
85:0e:76:6d:47:11:bc:02:2d:e7:a7:b5:5a:e5:41:
33:de:ff:e3:91:7c:a4:b3:c1:3a:a3:c0:aa:4a:f8:
d5:68:ba:64:64:a4:06:bc:48:02:bd:92:e4:8b:28:
27:ca:68:82:4d:85:88:ee:ce:46:a8:9d:1a:9a:3a:
8d:c4:f8:64:73:15:0c:53:8a:a8:44:4d:20:b6:e7:
4a:72:ca:a0:08:78:c2:dd:7d:18:b3:b0:d7:cc:4e:
4d:be:63:b6:7e:11:77:1a:8a:43:c0:07:19:8e:c3:
d0:b6:75:82:20:b4:66:eb:a6:ae:3f:76:ce:32:4a:
da:c7:35:97:65:44:7c:e8:83:7e:88:3a:b8:7e:cb:
46:01:25:eb:90:e0:c3:18:aa:19:93:87:a5:e9:de:
01:22:16:98:6a:8d:2b:8a:c6:43:f3:19:c4:fe:f5:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:70:A5:69:64:A6:99:02:C3:16:A5:37:E3:96:1D:0C:18:1A:5E
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:28:8c:e0:7e:08:b7:55:9c:05:35:19:c1:a4:02:2c:2a:
c8:44:52:bc:62:46:85:3d:b4:53:9c:49:71:e3:17:e1:e3:c3:
23:01:f9:0f:bd:0c:de:77:fe:46:63:b8:c8:58:76:a9:8e:aa:
3d:d7:85:f2:5b:e7:9c:e0:28:63:71:26:72:16:1a:26:60:59:
43:f8:04:8b:fd:b9:34:6a:c5:25:bf:3e:28:e1:4d:69:d3:de:
eb:00:76:9d:9f:72:b8:eb:d7:d2:6f:d4:7b:f6:11:e4:fd:30:
76:c5:ad:4e:dd:b8:15:ee:0f:29:f8:05:e7:33:21:fd:62:89:
a9:b6:b1:f6:07:cd:22:52:84:5c:aa:64:99:e7:6f:88:15:25:
6a:03:77:d5:ec:00:86:b5:63:6e:29:b2:cb:5d:21:ed:b6:7b:
b0:da:72:b8:1e:6e:1b:4e:e8:24:d8:d2:3b:24:32:14:d1:0c:
4e:f6:90:a1:fc:9f:9b:7c:23:c8:19:57:47:be:c6:74:cb:f3:
49:bb:e4:e6:bc:fd:75:db:67:d2:fa:fb:70:16:0f:b2:2c:bd:
12:2f:dd:8c:5d:82:5b:5a:7d:95:ba:57:4c:f9:d7:45:aa:50:
c1:b5:33:0e:6a:f9:90:3d:31:29:4f:76:fc:c8:b9:88:16:71:
07:41:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:58 2025 by rpki-client