Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: rhZlrGy97PlSlSmx2E/jZK4gTpi5N+FfyymsjQa0p6Q=
Subject key identifier: 8D:56:23:23:C2:F8:DA:A4:72:E2:AD:B6:91:C8:85:22:27:B9:28:5E
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 0194BCA9ED7B3BBEE0400C49DF843CE47BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 0430
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: 0Hx4xVqG6YyHcWbO/UGFFC9b2tgjn8dh+JgoRZLnQyk=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ed:7b:3b:be:e0:40:0c:49:df:84:3c:e4:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=8d562323c2f8daa472e2adb691c8852227b9285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:8e:90:91:49:ac:90:ed:25:82:95:eb:5a:
30:aa:91:2c:bb:71:3b:a7:5b:f7:6d:67:d3:92:2e:
d0:05:38:74:8f:12:e3:eb:b3:da:9b:c5:4c:d7:81:
b7:05:93:4f:04:7a:fe:58:31:1c:2a:fd:07:88:76:
d5:1d:cb:7f:70:67:2f:64:c9:4d:4c:79:0b:25:d7:
4e:6b:c0:6d:f1:5d:ca:37:c1:fb:9b:56:c2:68:60:
89:bb:d2:cd:5a:5f:a1:3b:64:ae:bf:45:57:a6:1c:
e6:92:f1:ed:42:7f:ba:63:eb:2a:71:9d:c4:c5:21:
3e:94:00:02:21:cb:2b:c9:27:7b:ca:4e:02:d4:b9:
2d:71:49:13:38:eb:64:41:c8:1d:0d:58:01:9b:9f:
f0:79:d3:fd:ed:20:87:c0:09:6b:ed:53:87:c0:d8:
58:cb:65:e6:ae:5d:09:95:35:80:03:a2:67:70:16:
f7:f7:70:d9:04:97:b4:75:3b:a9:43:e3:f0:4b:ab:
0d:2b:b5:a6:ae:23:a7:c1:4b:1e:02:c8:76:5e:b2:
7b:2b:bc:4a:04:51:eb:b7:5f:90:5b:6d:35:0c:42:
05:21:2b:5a:48:9d:4d:15:fb:b6:bd:48:59:d2:ea:
04:99:e9:68:6d:ff:dc:ca:67:8d:4c:2d:c4:48:2f:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:23:23:C2:F8:DA:A4:72:E2:AD:B6:91:C8:85:22:27:B9:28:5E
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:ec:e1:0b:aa:6f:e1:c4:61:a6:d3:75:9c:d6:61:d4:aa:
56:85:7e:28:77:a6:4e:96:56:91:76:06:dd:95:c1:22:84:03:
97:e2:5b:eb:bf:f3:3f:c5:2f:ac:ee:b4:cf:0e:f8:46:a0:07:
fa:1e:84:27:f9:80:9f:e9:d8:1d:72:39:82:b1:0e:aa:f0:e1:
36:3a:db:34:80:eb:dd:79:51:95:0f:2c:3d:71:eb:ba:1e:34:
e3:1b:ec:35:3a:b0:9c:db:bc:32:99:69:d4:40:c1:fa:1f:f4:
b5:af:ba:63:54:7f:ac:4f:29:8a:73:96:f3:97:e0:cd:75:8c:
e8:db:56:f8:78:e0:bd:9e:cd:9f:b8:e4:e1:ea:05:ac:d3:fa:
57:d6:6f:5a:fb:5b:a7:54:20:59:dc:74:7c:86:a7:e9:34:2e:
70:55:2d:2c:84:8c:69:1a:9a:7a:91:03:0f:32:12:c3:90:0a:
ec:de:68:2e:9b:cd:37:52:08:8f:ed:30:a5:35:4b:3f:4c:ec:
25:7a:f0:26:b8:a5:64:a2:3c:f1:89:f1:51:f6:7d:22:01:5f:
7f:31:90:04:98:23:22:fc:41:76:bb:cd:77:05:2e:24:e2:8f:
2f:3f:55:62:b0:ff:4b:85:cc:55:ae:0b:b7:5b:49:bc:5b:8f:
cc:db:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:29 2025 by rpki-client