Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: EmPz63IetlmV44h3otammduRhcxUetYS1Jk6NyxnneA=
Subject key identifier: 84:DB:D0:AD:C8:3B:CE:D6:AF:A0:BB:AC:AC:8F:6F:9D:BE:87:7B:4E
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 0194BC729A3CCFF88C06718AAC11AC5EE982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: GqHvbbta9Ei5y/cEMhA5PRfdTJ0n/5QFeIVRZrlQoCo=)
2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:3c:cf:f8:8c:06:71:8a:ac:11:ac:5e:e9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=84dbd0adc83bced6afa0bbacac8f6f9dbe877b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:4a:28:94:bf:61:1b:6e:97:65:79:c2:6a:
6f:27:3c:33:80:71:75:97:62:3a:12:79:6f:94:ef:
7b:24:49:c8:a1:a9:7b:24:33:f4:b3:fe:df:21:79:
b4:0e:4c:2c:ab:4b:03:9b:c9:38:2a:af:0c:4f:79:
e7:72:99:39:3b:6f:83:6b:c9:a1:e7:4b:ed:c8:53:
02:4b:0c:04:ba:51:73:8d:b3:3c:d1:bc:8f:a4:61:
9f:e5:8d:fd:b0:d9:fb:16:54:b0:f0:8e:57:36:f8:
24:60:25:1d:b3:31:f9:90:88:44:85:2e:13:b3:ac:
5c:9d:96:32:68:7e:93:d1:ef:50:eb:57:69:be:50:
14:a8:a4:be:ee:99:54:a1:a5:1e:9f:f2:25:2d:3c:
a7:3e:92:e0:81:67:ce:f7:17:68:2e:d5:4b:0b:bf:
f5:63:3c:b4:b3:21:d5:59:f2:1c:0e:06:d6:de:bb:
15:d1:28:53:45:76:c8:a4:0f:ec:84:be:f5:f0:db:
79:39:32:e1:00:3b:d3:68:23:18:64:66:63:d7:24:
2a:a7:35:4a:59:3e:44:7c:a1:65:d0:09:30:7f:e2:
83:11:d9:02:c5:7b:28:b7:3a:1f:94:bc:88:61:81:
c6:05:a2:fd:33:fc:d2:6c:d2:95:f4:a9:b9:c2:72:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:D0:AD:C8:3B:CE:D6:AF:A0:BB:AC:AC:8F:6F:9D:BE:87:7B:4E
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fa:5f:32:ac:bc:d7:5e:3d:15:af:20:b4:b2:e2:26:74:3c:
fd:24:5f:34:1a:28:5e:4f:8a:d4:93:09:2c:76:77:3a:1b:e5:
22:45:91:92:06:8b:89:9f:a6:b1:cf:16:61:e1:30:51:a8:9e:
f0:0f:5f:57:35:d3:9f:8b:27:17:0f:57:b8:8e:0f:b3:3a:e1:
99:e2:6b:95:3e:c6:18:bb:b0:96:3d:8f:18:07:2b:bd:46:f7:
1c:ce:c1:c1:26:93:b7:69:be:bb:3d:ed:a5:00:69:0b:76:28:
2b:f0:0f:70:42:11:50:68:88:eb:9b:12:75:7e:bb:90:d0:8b:
c9:8a:ad:73:fa:32:71:c6:d0:d0:3b:03:91:e6:18:8c:51:8b:
4f:28:b5:f1:d2:09:86:06:b9:1c:90:1a:b2:85:53:cb:47:a9:
01:e0:41:78:37:46:5c:d3:f4:60:b4:4f:2b:02:57:55:07:61:
29:0a:ea:fe:f5:88:99:a8:66:cd:d7:12:8a:14:11:74:ae:71:
5f:a3:40:d1:8b:30:2c:f6:70:fc:32:5d:57:cb:b4:e8:4b:b7:
52:86:1a:b1:c6:a9:78:c3:15:da:ed:2d:cc:39:e9:c8:9a:75:
44:1e:87:32:4c:36:3b:b3:72:8a:d8:c8:d6:fd:33:7e:a4:03:
5c:d0:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:56 2025 by rpki-client