Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: UlNfOQCFPML29sH0VUoUYlACkn4gLJ3Q5ooBByl7rvk=
Subject key identifier: 91:F4:B0:F3:A5:DE:97:0E:C1:A0:DF:CA:39:36:7F:43:34:CD:7B:50
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 0194BC3C21754AFAC7BD3B90EB8682C2DE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: okRzOOoOHpEJP1g1G9RSesL4u22WMobqCRoPNwJSXuQ=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:75:4a:fa:c7:bd:3b:90:eb:86:82:c2:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=91f4b0f3a5de970ec1a0dfca39367f4334cd7b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:c8:b8:a6:30:75:02:fd:8b:e6:4a:b8:cb:
ed:31:55:a7:04:c0:66:01:e3:e6:15:17:cb:2c:b5:
9a:2e:f6:e8:60:3d:89:3e:47:db:96:67:dd:bb:b1:
82:64:44:2b:b6:3d:92:bc:15:48:70:c8:8c:34:e3:
a7:ec:2f:f9:c4:08:48:0c:20:f4:57:b3:9b:f4:be:
27:47:89:dd:f7:37:a6:14:7d:1a:d8:93:92:9e:07:
af:b1:3d:5e:10:88:5b:f3:9a:95:e5:b5:21:92:ee:
cd:ff:26:c0:87:72:5b:3d:83:cd:57:d4:db:4f:95:
e8:07:cc:66:f5:bc:55:d1:06:c2:5a:ef:3a:91:3c:
dd:cd:18:67:83:77:ef:30:8c:0f:ad:c1:f6:e7:cc:
03:71:44:d6:ae:68:4d:12:84:e9:f0:3f:7e:60:8f:
eb:64:0e:d4:78:0e:11:6b:c8:67:64:7a:5c:bc:72:
e7:6c:2b:b8:a0:2e:63:05:52:ab:98:6d:a7:e7:e5:
dc:2d:93:c3:46:e5:90:e1:49:09:43:fa:5c:3c:67:
1e:4b:3d:b7:16:ee:5f:29:52:85:76:db:b4:6d:c4:
a6:87:15:c5:60:2e:b5:54:a6:57:1a:0a:37:e6:e5:
3e:29:55:80:6b:d5:fc:93:cd:17:67:14:4f:b3:87:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F4:B0:F3:A5:DE:97:0E:C1:A0:DF:CA:39:36:7F:43:34:CD:7B:50
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:28:64:d3:e6:52:98:10:72:f3:c0:17:b9:72:38:7c:80:0f:
d9:6e:01:9b:a2:e4:03:12:52:59:af:01:65:f1:32:43:70:a7:
6f:0b:21:64:7c:0c:21:f1:8e:29:a9:15:8e:8f:c1:8c:da:a1:
68:9a:0d:bd:68:74:36:41:2b:69:60:2d:b3:65:4c:d6:cb:cd:
c8:b1:ac:3a:bd:bf:a3:f0:a0:e0:ce:f7:ba:a7:a7:e1:73:e1:
a2:45:7b:2a:85:77:79:ec:95:9c:67:9d:5a:2a:ce:11:d9:2d:
04:bb:17:25:51:26:3c:06:43:e0:76:2f:0f:2b:17:5b:32:65:
8d:c9:b7:fa:9f:5d:0e:7d:8e:29:ca:22:da:40:50:09:21:08:
20:24:f8:46:c8:94:b0:32:f2:a2:5d:6d:1b:b0:9b:45:0d:4d:
92:ae:b8:ba:20:ea:27:69:fa:80:e7:9a:49:6c:db:8e:cd:f9:
3c:af:f6:04:c0:da:58:7d:97:d4:b0:aa:e4:b6:e6:a4:8b:d0:
f2:4a:fb:c9:db:1c:b3:00:e2:72:c2:50:33:33:91:00:0e:b6:
ab:56:ef:8c:37:7e:93:4b:68:5e:18:20:a4:ad:d6:fb:7e:56:
ac:c1:cd:fc:75:9f:13:bc:ef:db:dc:0d:4a:36:c6:82:86:63:
c4:30:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:03 2025 by rpki-client