Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
File: XAJzZX7FoThNU28b2Z2RZQf-eyk.mft (raw, json)
Hash identifier: /U1sNpPrk3mtq7DfZtnPgsx7RhEX67JsTP18MYOnhco=
Subject key identifier: 9F:C9:BD:15:C2:44:EE:28:EE:75:BC:67:9E:80:F1:C1:BB:1C:6C:E7
Authority key identifier: 5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
Certificate issuer: /CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Certificate serial: 0194BD4E7CFE42502AB540E6F871F2992FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
Manifest number: 0EC3
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: BjEhACV2yXJRHQhe31y5AzO3--o.roa (hash: IOjD1WKD18GQcde1wwfvHfJUbrYC9FaaN08pCD3XzFo=)
2: XAJzZX7FoThNU28b2Z2RZQf-eyk.crl (hash: eTRe1te7HrPLK6UG9yZzN2ZW7kR/9Qpg/MZDSZ4aiSo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:fe:42:50:2a:b5:40:e6:f8:71:f2:99:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c0273657ec5a1384d536f1bd99d916507fe7b29
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=9fc9bd15c244ee28ee75bc679e80f1c1bb1c6ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:01:f9:d5:15:a6:27:21:00:5a:70:74:cb:
3b:15:47:6a:d9:ed:29:bc:95:ce:cf:85:9b:68:88:
3a:2c:f5:3f:f6:dd:45:e9:a4:84:0c:7a:f4:71:72:
5b:ca:2b:16:6c:48:51:0a:12:66:86:e1:3d:6c:d4:
f0:9d:8e:46:d2:25:e1:3c:53:ef:e2:95:9e:30:25:
3b:45:66:0a:38:ff:58:87:80:21:33:78:ed:86:e5:
70:99:b8:94:94:e1:b7:f7:0a:d2:5f:cd:a9:c3:95:
56:23:44:21:75:5e:99:c9:05:0f:3f:a1:07:e3:3c:
ac:a9:0e:61:df:d4:8b:9b:3e:0f:db:da:64:bf:05:
73:9b:1a:ba:83:36:e6:9d:76:a2:83:f7:b3:c8:ba:
e0:f6:86:a4:57:cc:b4:1b:c5:b4:ea:55:a9:39:37:
05:80:d1:5b:d4:24:50:d7:e4:5b:ee:79:ca:37:bf:
79:15:a0:c2:83:c0:73:87:5f:8f:db:57:0f:47:f6:
e9:8a:66:e1:d2:ac:36:3c:58:57:97:a1:7d:1e:56:
7e:b0:ef:56:7d:9e:29:51:79:b3:be:00:f9:62:16:
3a:d4:3f:fd:94:d6:6b:87:53:24:b2:32:d9:ca:0f:
80:55:e9:c1:0b:47:a4:49:90:00:d7:16:96:26:ab:
31:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C9:BD:15:C2:44:EE:28:EE:75:BC:67:9E:80:F1:C1:BB:1C:6C:E7
X509v3 Authority Key Identifier:
keyid:5C:02:73:65:7E:C5:A1:38:4D:53:6F:1B:D9:9D:91:65:07:FE:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAJzZX7FoThNU28b2Z2RZQf-eyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ea0863-2db8-46ff-9950-d12830b3b1e0/1/XAJzZX7FoThNU28b2Z2RZQf-eyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1c:16:74:bd:17:fd:96:16:c5:b5:4d:a6:ce:a1:b1:f5:77:
7d:00:c4:89:51:fa:d5:af:2b:e2:8d:40:2d:f6:24:40:87:33:
47:69:bd:48:e7:ed:86:c9:8d:7e:78:e7:15:b5:23:3f:20:b0:
12:74:4d:77:70:76:2f:9d:f2:c8:fd:f0:f5:26:04:38:05:90:
4f:b9:40:4d:fa:f6:b1:35:3a:b4:31:c2:de:b3:4f:71:12:fb:
b6:de:ca:23:42:93:6a:67:a9:34:8b:96:5b:84:33:05:c7:36:
d9:58:22:aa:2e:08:f0:30:ce:39:d4:89:c6:ff:84:b9:d1:4b:
f2:59:4a:f3:7a:45:05:a9:04:b1:bd:dd:57:34:94:86:cc:66:
7c:45:59:6b:a3:0c:88:83:a2:44:80:07:f7:9b:0b:25:e7:4a:
ea:02:94:40:02:20:3c:b8:8e:7b:aa:87:14:4a:32:83:6c:72:
74:31:fb:4e:91:f3:ea:1c:36:53:91:46:8a:f9:33:9f:90:a9:
6a:45:96:92:19:db:16:f4:f3:bf:c6:5a:a6:ba:ee:62:91:f0:
7d:6c:24:0a:1c:f3:1f:97:67:bf:68:87:dd:41:5d:fb:64:03:
28:62:e0:f9:0d:5e:8b:24:d6:08:33:42:99:61:af:40:aa:8a:
85:a5:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:54 2025 by rpki-client