Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: 4Vnu63etNKx5fim97wteGBIUfb0FJkLT5y+ug7Tlauk=
Subject key identifier: 1D:02:B5:E3:58:E0:2B:B6:1C:37:3F:7F:D2:2F:0D:05:AF:01:56:47
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 0194BCAA46F612EC82F7ACD0A768BF83646A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:01:03 +0000
Manifest this update: Fri 31 Jan 2025 14:01:03 +0000
Manifest next update: Sat 01 Feb 2025 14:01:03 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: xzYu2apF6UJhTLjKhBmGyXH+6enfN2n9XILXtktmOyY=)
2: uMKYK0zWnMRt1XBJkaQ1CMnyyVw.roa (hash: yhNmYUr+FS9v4wFEYBgKw1+Munbk5IEg7AdZjbcucQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:46:f6:12:ec:82:f7:ac:d0:a7:68:bf:83:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Jan 31 14:01:03 2025 GMT
Not After : Feb 1 14:01:03 2025 GMT
Subject: CN=1d02b5e358e02bb61c373f7fd22f0d05af015647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:86:53:b9:2f:d7:63:5b:1c:90:93:f1:3a:
be:24:25:02:32:49:73:cf:6b:5f:81:77:c1:2e:2e:
83:97:36:a6:b4:af:96:6b:4e:05:b1:47:f8:b3:3a:
c2:75:67:d2:39:a0:7a:3b:71:be:21:c0:55:f8:ef:
34:93:c7:0e:e6:7a:03:42:7f:cb:15:97:1c:1c:7a:
c8:99:96:b7:a4:78:f6:55:9b:3c:64:be:4f:2e:dc:
56:85:7d:43:11:8b:85:23:00:ea:58:18:ec:d6:68:
65:03:8d:d7:8c:56:7f:e6:f1:5a:f6:ac:e6:b6:f4:
b4:ad:63:17:85:e8:08:ef:3b:6a:9c:58:44:e3:1c:
0e:b8:f1:17:ab:a2:b9:5d:b3:03:db:b9:cf:4a:e1:
dc:b6:37:be:01:2c:9c:69:f7:b1:4b:a3:3b:50:dc:
a9:6a:9a:78:ab:dc:59:b5:b5:e1:38:d8:fa:0d:96:
72:06:20:82:64:b3:00:dc:03:cc:d6:40:1d:d8:ed:
e8:ff:d0:7b:10:03:29:b0:ca:29:65:15:6a:0a:65:
76:01:75:37:31:dd:3b:bd:d3:3f:d7:ca:78:39:2e:
a4:70:ce:6e:df:84:e6:36:32:e1:7e:6f:be:12:22:
7e:cb:b3:b2:55:99:9d:a6:03:fc:8a:95:35:c5:6f:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:B5:E3:58:E0:2B:B6:1C:37:3F:7F:D2:2F:0D:05:AF:01:56:47
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:ad:4e:63:ad:42:9d:08:1d:59:fd:5b:11:bb:25:83:d0:cc:
9f:1a:57:63:d8:13:45:ff:c1:34:b9:d9:e8:7e:32:c3:f4:cf:
94:1c:6e:da:e6:ef:e8:4b:d6:eb:aa:fd:4b:54:eb:12:38:af:
e5:ca:d9:69:56:b1:a8:d3:9e:37:1d:a3:84:40:46:71:15:15:
63:e6:fa:f6:b3:a4:0f:15:65:97:ab:70:74:69:e2:b0:02:5d:
04:1b:0a:83:6e:52:4e:5c:9b:00:77:93:de:aa:70:50:e9:8c:
09:8d:39:31:fa:2b:8c:54:ba:64:36:c8:bf:91:ea:25:ee:0a:
8e:e6:56:f1:3b:bd:ad:c2:f1:9f:fe:b5:c1:97:87:22:4b:f5:
8d:c4:a5:0f:78:b7:b1:7a:ad:e0:88:04:cb:60:1d:00:0f:39:
05:46:c0:fd:c2:89:69:ea:24:c9:af:49:20:d7:b9:3d:89:bd:
4f:c7:c5:0d:e9:b3:53:a2:cf:a8:ce:32:44:c2:6d:d0:dd:42:
5b:68:aa:51:90:08:da:d9:f6:d9:5b:29:48:fb:e0:5f:70:54:
20:1e:58:b2:86:e8:03:40:14:a5:14:7e:57:03:78:82:5b:86:
10:18:3a:50:49:d3:4f:9e:67:c9:53:87:6b:6d:a4:a9:5a:5a:
87:92:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:00 2025 by rpki-client