Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: eLykqv31N8kHZyf1fy/5CuZyw2kDnOyi/QcrhZvEwl4=
Subject key identifier: 72:81:2D:81:5C:96:BA:80:34:4F:E4:36:FC:A0:BD:F4:99:66:FD:1F
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 0194BBCDD4BE53EBDD2901D42AA1908193EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 1285
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: SnJdCYjQEynlTmoqeZxNk3zpDSSgfkPOhCL7W59UAQQ=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:be:53:eb:dd:29:01:d4:2a:a1:90:81:93:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=72812d815c96ba80344fe436fca0bdf49966fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:c7:30:81:0b:21:a3:6d:c4:75:fe:1f:e2:
89:89:40:95:3f:13:81:a1:77:8c:ee:8a:b6:ab:1c:
c4:c7:5f:07:21:f1:2b:ca:38:f1:68:83:a4:ab:dd:
df:91:87:7b:d1:04:f4:a4:61:9a:15:56:8e:9c:2d:
06:63:b3:d5:99:82:43:f4:87:89:4e:9f:fe:ad:65:
43:13:55:a4:b8:46:3d:21:fd:27:93:83:38:05:82:
db:82:cf:9d:98:66:7b:c7:8f:ce:7d:6f:b5:e6:f5:
af:44:ff:1c:59:88:13:6e:2a:b1:32:4c:50:37:d5:
6d:fa:ee:88:d6:3e:21:6a:4e:8e:db:4f:9e:b4:6f:
fb:5b:2f:7a:3b:1f:a7:57:35:c1:6f:1d:e0:c8:05:
d1:d3:d0:20:13:df:77:94:16:ad:a0:3e:69:a3:0d:
9e:d3:9f:0d:e8:80:fb:02:e6:f4:d5:27:7e:e9:0b:
e7:23:ad:1a:0d:2d:e8:c4:47:8c:b6:6d:92:d3:4c:
16:f0:72:0f:f3:50:e7:0f:4c:e9:69:fb:50:f6:0d:
fe:23:ae:12:04:90:e4:8c:d9:de:ad:f4:d6:fa:23:
04:ba:93:b7:33:80:56:14:04:55:13:b7:5e:a0:8c:
d8:af:07:b5:bc:76:a6:ec:9f:d0:5b:80:63:e0:ea:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:2D:81:5C:96:BA:80:34:4F:E4:36:FC:A0:BD:F4:99:66:FD:1F
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b0:73:d0:54:a9:c7:a2:92:6f:86:3e:3e:f1:8d:08:be:43:
a0:39:a4:57:c0:56:09:fa:7a:ce:c1:e1:6d:a3:ed:f1:10:6d:
31:66:e9:75:1e:39:ac:d7:31:dc:10:8e:17:56:60:dc:85:d8:
8f:6b:d7:68:c8:65:ae:35:67:9b:29:dd:fb:04:6d:d8:a3:26:
a8:64:17:1e:4a:fd:a0:4d:c0:e4:51:32:95:a2:38:a5:c1:45:
d4:8e:0d:ba:3f:14:dd:9b:4a:17:d9:23:25:86:7d:ac:57:9f:
1c:35:04:c7:e6:90:11:48:85:6c:d9:2d:15:6d:be:06:fd:a6:
dc:06:53:a1:4f:9c:20:c4:08:46:53:ca:f6:ed:76:8f:6c:4a:
54:27:e8:9b:a0:14:c8:7f:44:c8:38:82:32:79:0e:f0:27:8c:
55:a2:06:a1:86:2d:c0:82:69:10:83:79:57:3b:01:9e:85:02:
db:65:f1:8b:20:1f:92:f5:2e:2e:aa:0b:65:cc:88:0d:7e:c7:
f2:6d:37:a9:fe:71:5b:fd:0c:bb:06:3c:4b:64:b9:49:17:0c:
92:e9:83:1c:d9:03:53:9a:b7:c2:b7:9d:5d:e0:25:dc:46:36:
e3:78:a5:3b:ca:12:99:46:60:4b:c7:41:1b:f2:58:b3:b9:ac:
59:0e:25:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:58 2025 by rpki-client