Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: XF+UF1wryZwd3RG128owytvgNk6OBthwjYG6+8w4zIM=
Subject key identifier: 8A:CB:B1:C6:BD:0C:02:44:DE:92:69:69:61:CF:A0:3A:03:90:2D:DD
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 0194BC72F9D87E109D55DF681F1E75FAD460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0BEB
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: lJHEE4Jph82MhaxeVWQfm/G9t0K26ru2OPvCsMkzDIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:d8:7e:10:9d:55:df:68:1f:1e:75:fa:d4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=8acbb1c6bd0c0244de92696961cfa03a03902ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:70:13:48:b3:dd:99:44:8c:d3:ef:96:5b:
53:1d:88:98:22:89:c3:11:ae:2c:73:e2:15:8d:56:
dd:c8:c5:36:57:3e:22:df:1b:f4:22:2d:6e:ca:4a:
50:97:57:41:95:99:c7:3e:92:cd:a3:4a:a4:1a:fb:
e0:08:54:91:8f:9f:8e:33:be:04:7a:ed:da:0a:41:
e0:df:d5:88:4f:2d:49:2e:dc:ba:18:75:2f:5b:c0:
2f:e3:e4:87:ee:6b:86:cb:4c:ab:c8:8e:3c:4b:5d:
73:61:24:6b:dc:92:35:4b:56:a4:29:ed:fe:55:2f:
f1:ea:1d:1a:89:3e:b6:09:55:60:3b:3e:64:c5:12:
9d:e8:50:d9:c9:04:28:dd:34:94:6c:5a:f0:a9:03:
20:45:2b:70:b0:5d:5e:ce:ca:13:be:90:53:f5:60:
90:32:68:8e:9d:c4:55:36:d8:e1:06:cd:0b:d3:33:
2f:93:fe:7c:e3:39:79:1f:5e:9d:9b:b4:14:20:3c:
f3:5d:de:6c:76:26:c2:54:1a:f4:66:5c:03:c0:99:
6a:22:03:23:1f:10:5d:da:ff:72:c2:85:4e:7a:eb:
a2:87:84:9e:b6:19:c3:be:e1:d8:2c:02:29:9f:77:
bf:6f:bb:29:68:76:9e:73:72:65:b3:41:9a:7a:d8:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:B1:C6:BD:0C:02:44:DE:92:69:69:61:CF:A0:3A:03:90:2D:DD
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:54:9a:8b:2e:ad:ac:0d:e6:09:95:20:26:7a:cd:6f:e7:
56:57:0a:3c:31:91:2d:34:e5:ee:eb:96:2e:b2:ed:f9:3f:cc:
cb:ee:98:7c:9a:56:e8:42:1f:c4:89:39:60:eb:f9:3d:90:aa:
50:b9:37:1b:fe:63:8a:13:ec:71:35:3b:57:51:92:da:c9:f9:
9d:e9:81:1c:40:b9:5f:cc:43:23:7c:c3:ea:fa:43:a3:d4:ad:
80:87:a9:7d:7c:0a:c2:c2:91:cd:ea:88:22:6b:e3:63:30:ad:
24:7a:a7:e6:26:c3:31:45:57:6f:2f:c9:ad:e6:43:a5:d6:bc:
7c:61:2d:50:4c:08:2a:db:08:0b:fb:d8:2c:57:c1:76:a7:fa:
c4:55:b8:99:17:43:df:d4:8c:bc:0b:1a:c2:5b:33:db:94:be:
5f:45:ae:9f:1d:7f:46:6d:91:8f:67:eb:f4:6c:cb:78:31:6b:
60:e4:28:f4:67:76:f0:91:73:4c:68:63:f7:da:c0:b0:e7:a8:
74:c9:c6:7f:ae:b8:24:19:b6:d4:13:65:21:1a:78:9d:5d:d2:
26:f6:08:7b:28:a0:6c:79:3c:ae:f2:07:42:63:0c:a4:49:7d:
66:bc:34:a9:e2:f5:c6:ec:6f:29:a4:c1:d8:e1:81:d1:50:87:
45:ed:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client