Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: xQgIZxTVt4HbpVLasKUWSLY8QDTmUNNuFwwKdh6WrUU=
Subject key identifier: D4:6A:77:69:B1:81:E9:5B:EF:B8:06:D1:95:0D:DF:6F:B7:C2:66:7E
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 0194BD4EBE2E656B0AD56490B111084A3034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: p5qeM8pBglCmH9S_-by9le3dhdY.roa (hash: gGcCXxeFnJoe5nYFMp9atB7TAawQ8UzeF434Tg+y5lc=)
2: pzUgONhqi68QY0VvGpWltJYJNYw.roa (hash: Uq9NSVRaA6mFyoWNmYT8pc0z0L/fxwW0Qlau9RSv6Cw=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: 0EAa8vcAcMx5m4M9uyB276fm/1djGMvIMNrixO+M0c4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:2e:65:6b:0a:d5:64:90:b1:11:08:4a:30:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=d46a7769b181e95befb806d1950ddf6fb7c2667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:d2:8a:be:fc:67:6e:fb:48:3d:56:a5:f8:
55:6e:50:a7:ca:bc:a4:e9:a8:b5:97:67:05:2c:8b:
18:f3:1b:c9:4e:46:29:e6:14:b7:e0:fa:5a:69:bc:
27:2e:75:74:8f:4b:02:2f:7c:b1:f0:61:06:d4:95:
a8:9d:5b:1a:37:00:99:39:e4:44:0e:9f:4d:de:6e:
f7:65:38:39:d4:e4:bf:85:da:d5:d3:52:2b:ec:20:
6f:e1:e8:f5:e9:c8:af:6a:dd:bb:03:70:61:f7:ac:
09:80:e8:96:cf:a8:8f:e4:3b:95:37:67:23:b2:df:
95:93:dc:d8:bf:db:0e:c0:6b:bc:93:d6:c8:8b:e8:
f2:85:fb:d9:39:b7:22:fc:d6:f2:c8:4d:b6:41:fe:
3d:10:0d:10:99:fd:d8:1c:ea:22:0b:8f:50:fb:cb:
9d:95:d1:2b:e4:af:88:d4:ba:4a:ed:ad:2d:c0:87:
6f:93:5b:77:7a:1e:75:05:9a:02:5a:71:b4:fd:59:
eb:21:0f:87:12:fe:6e:0a:dd:66:f9:ef:dc:bb:51:
5b:c6:7a:a9:b3:02:95:59:09:48:55:2c:3a:86:53:
6a:bf:19:04:39:60:2c:1b:1b:80:42:97:3d:9b:d7:
18:a9:9b:59:df:e7:04:1c:a6:89:cf:6d:54:e0:a5:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:77:69:B1:81:E9:5B:EF:B8:06:D1:95:0D:DF:6F:B7:C2:66:7E
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:61:51:6d:e7:a5:be:da:b6:45:91:1d:75:bc:85:07:2b:97:
9c:06:5c:06:4b:79:50:7c:c9:a5:c8:0e:05:43:a6:24:e3:51:
c6:b6:2f:82:de:68:1c:69:47:eb:4d:61:8e:a4:16:94:0e:0d:
5d:58:7e:33:67:25:64:a0:19:c1:02:c4:84:aa:bb:f8:b6:f8:
0b:e6:4c:a2:3f:20:0e:52:43:11:ad:14:21:a8:c8:39:74:53:
88:4b:41:f6:83:af:3f:4d:86:5c:24:d5:61:e5:2d:0d:59:bf:
9f:51:09:9e:9f:25:03:a4:99:03:90:6f:dd:63:3d:ed:9d:27:
84:0a:25:b4:a9:83:95:f3:6d:fc:29:cb:d1:03:dd:5a:22:5c:
34:99:f6:60:de:5d:cd:97:92:43:62:24:1e:d3:94:2d:f9:44:
37:ef:00:18:fa:5d:ad:9c:f6:e0:05:3c:28:51:9d:8e:bf:0f:
52:c8:aa:a1:f1:fd:40:39:e9:ad:a5:97:b1:e8:7b:f0:13:41:
0b:da:40:bc:e3:64:da:c0:5d:3b:69:af:d7:23:d9:d1:13:31:
95:a1:91:55:56:fb:0e:53:ff:89:64:02:7d:86:ca:b0:96:d7:
86:e9:22:98:6b:c9:ba:27:0e:f9:cc:2f:6c:40:f9:0f:f2:a5:
5d:7c:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:38:51 2025 by rpki-client