Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
File: xJqjIm6vrB530j6PzvGJADhAA8c.mft (raw, json)
Hash identifier: lkZPbcfpJkv5qTExuVbcow1mRz3Te05tCuBw6xlBsnE=
Subject key identifier: 1F:BB:6E:94:65:91:6D:59:5F:FB:2B:D8:05:49:8B:CF:71:E4:F4:E4
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Certificate issuer: /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial: 0194BC04BE80FC16E56AF5ED3F104A916BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
Manifest number: 1042
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: PRgXoAwZkCkiYJg9TctLDNDPN1c.roa (hash: PJQ6eErOeYZwguFeHefcnTCZY+UDhTIu8HobmUpRc20=)
2: xJqjIm6vrB530j6PzvGJADhAA8c.crl (hash: Ml8ful+dSCizB+Bcu0HcXR0fxOLLEKM+d1bj1zEOJoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:80:fc:16:e5:6a:f5:ed:3f:10:4a:91:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=1fbb6e9465916d595ffb2bd805498bcf71e4f4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:12:e4:2d:c4:00:a6:76:61:b9:34:3c:07:
90:fa:e5:4f:ed:f5:9f:48:7b:e3:27:9b:4a:98:ad:
43:03:15:b2:d3:19:97:a7:a0:fc:3f:47:8e:86:94:
12:6e:f7:90:26:83:e6:fd:e6:b2:be:32:b0:b4:ac:
08:9f:14:db:09:a2:54:66:aa:10:3b:94:ef:03:ac:
a8:d1:74:0f:08:24:63:ae:70:5a:19:9b:fa:3e:84:
82:ae:2e:31:be:e2:19:06:50:68:d2:90:2e:dd:f8:
81:4b:5d:0c:b2:a9:11:48:fc:9e:84:f7:5d:ce:2d:
07:e1:ed:a1:52:cb:30:b5:75:a3:00:15:1a:a9:4e:
f8:08:84:e8:05:a1:b5:aa:89:5d:60:de:91:77:73:
b8:80:24:41:d1:39:16:df:67:92:80:9a:07:42:09:
4a:e8:9d:f9:8a:0a:46:a8:77:56:1b:f5:09:8d:2d:
70:4b:e8:67:cd:40:29:09:d0:4c:56:44:1b:97:96:
2b:68:bb:fe:e2:e5:b2:e0:9f:c6:70:d5:2f:91:bf:
ac:e2:88:f1:7a:d7:50:56:1e:16:c8:a4:8c:c4:a0:
e9:5f:f2:7d:ae:34:c9:bb:82:1e:15:92:ca:8e:d6:
36:2f:13:83:fa:b5:16:b7:8f:63:0e:bb:ed:30:55:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:6E:94:65:91:6D:59:5F:FB:2B:D8:05:49:8B:CF:71:E4:F4:E4
X509v3 Authority Key Identifier:
keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:4d:99:db:e2:80:dc:6f:5b:09:9d:81:53:68:68:d5:e8:
fa:97:44:58:3c:0c:84:08:48:94:ba:f5:88:44:59:a6:8c:d6:
4b:73:b7:e4:48:f3:5c:98:f7:d9:26:f7:10:6a:df:ab:5b:f1:
b3:8e:58:36:97:c2:f8:ec:bc:44:7a:58:01:de:f6:94:07:de:
15:36:bc:ca:ff:9c:4e:c9:f7:ae:7a:c4:03:11:f3:31:13:f1:
7a:cd:86:f0:39:fb:b1:53:d8:f8:ac:4e:47:7a:02:6d:98:52:
50:b2:ae:ee:f4:ca:54:7b:19:64:76:ee:25:44:ff:4a:3a:3a:
dd:54:91:c5:ea:08:7e:42:e3:3a:7d:09:5b:97:48:66:b6:72:
69:74:ba:81:3b:a5:e9:dd:c0:10:46:b2:dc:14:b2:8f:d6:a9:
d9:91:ff:87:89:55:1e:86:98:31:c6:3d:ac:11:15:d5:dc:d3:
dc:43:78:f8:27:52:37:af:27:23:34:99:0b:bf:5b:28:e8:91:
bc:0d:cf:93:6d:d8:f8:2a:37:82:d4:56:8a:83:a1:f7:3f:7f:
a6:2c:59:42:d2:7a:da:82:64:d6:f4:7f:2e:82:87:0b:48:c5:
94:f9:4b:8a:6e:dc:53:fc:df:8b:43:98:6d:38:69:cb:01:84:
ed:3e:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:43 2025 by rpki-client