Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
File: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft (raw, json)
Hash identifier: 3xPUmwH5tLNqseM6Ce4ER1XemMBaYUckxd+fA5NGv28=
Subject key identifier: D1:D4:AB:25:8E:6B:7A:76:0C:9D:00:0C:E4:D0:86:6A:D5:B5:93:3C
Authority key identifier: C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
Certificate issuer: /CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Certificate serial: 0194BCAA15AC050472056547954DDF4E080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: OvOkWatHrFgmj60O6Cjij4Ojo9Q.roa (hash: vl4YZSTqxlbqeunj3GnUeIqLip/YzNXqb6yP9ApEp70=)
2: W_HszaJ5NOP0MnKr_gX_tIwwzrM.roa (hash: KBxuRHIVq96Z+ZSk6DOhyPHLuGESXEU5ZMYMHCDEzBE=)
3: xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl (hash: w19ZRV27aM4WSffQaWfbps5oMwXf1WkgTpfz60LX5g0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:ac:05:04:72:05:65:47:95:4d:df:4e:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c52aa9ea84db41ad9f045049d8e146f975e42fcb
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=d1d4ab258e6b7a760c9d000ce4d0866ad5b5933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:68:2a:e3:88:26:29:43:4a:4e:a7:ef:96:
ae:68:e8:e7:98:25:6c:b4:f1:3a:3b:71:60:c8:81:
aa:f3:ac:b3:30:ea:1b:93:2f:67:f4:b4:27:88:e4:
a9:35:6d:c0:a6:cc:e0:a2:fd:f8:36:97:08:e9:d4:
2b:0e:1b:09:78:68:ea:ff:d4:a2:c4:c6:78:f4:d2:
d2:b3:7d:e8:f5:4a:2a:6b:57:17:c6:d5:98:82:b6:
1b:6d:78:5e:f3:bc:73:8b:3b:20:31:6d:60:65:c9:
71:7c:10:ac:4f:5d:37:01:b5:ae:03:8b:7d:ae:a7:
01:42:54:a9:2c:64:d5:3b:26:9e:45:78:42:d8:f7:
66:db:24:02:f0:72:94:20:4c:b7:ec:66:15:dc:4b:
df:8a:93:ba:4d:a3:c1:65:55:42:db:01:86:fa:f9:
1d:4b:d4:58:d3:9d:a9:75:e8:8b:fe:e8:73:99:4f:
5b:fc:0c:78:b4:fd:76:82:69:15:45:1d:2c:a6:1a:
aa:6d:ec:95:05:7b:18:df:3b:52:29:b2:23:33:ce:
34:09:dd:18:ac:37:7e:7c:ea:b8:3e:18:88:fe:0a:
f0:60:69:c4:4a:ff:0a:24:1b:86:e9:5d:4c:6c:c8:
84:6b:54:81:16:bf:9a:0f:3d:6f:51:10:3e:b9:38:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:AB:25:8E:6B:7A:76:0C:9D:00:0C:E4:D0:86:6A:D5:B5:93:3C
X509v3 Authority Key Identifier:
keyid:C5:2A:A9:EA:84:DB:41:AD:9F:04:50:49:D8:E1:46:F9:75:E4:2F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ab8545-f8b7-4c5e-98ff-25035c1d14dc/1/xSqp6oTbQa2fBFBJ2OFG-XXkL8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:91:39:ab:8f:30:a7:3f:70:f3:ce:69:87:09:35:69:81:76:
9c:0c:89:4a:17:af:05:e4:26:1f:15:8a:c7:75:04:e2:8e:ff:
6f:b5:ef:84:de:fa:79:dc:a2:f9:cb:2b:2f:df:19:04:8d:90:
33:72:35:d0:2e:18:1f:5e:cb:c7:7a:f0:63:e4:49:25:5f:37:
a6:bd:bd:04:81:7e:9c:5b:f6:2d:a7:c3:97:40:d1:55:16:ec:
1a:cc:2c:30:6e:76:6f:e4:6e:f1:79:7d:10:0f:d2:c6:33:a2:
3d:e4:d3:fb:35:e1:c5:ef:c5:c2:27:41:eb:41:fc:b1:83:d3:
5e:0f:53:ee:83:11:72:d1:33:9e:83:0c:de:6d:aa:17:b4:4f:
75:d3:d2:13:43:22:67:5c:55:91:67:e7:3b:3d:f4:17:24:8e:
a1:e3:ac:ce:e6:e4:19:ac:62:53:2a:19:6d:64:02:d8:93:84:
7b:6e:e6:72:ed:17:b2:c7:9c:d2:c6:bf:79:b4:12:aa:8c:cc:
15:21:ed:68:67:ae:3a:b7:60:27:19:cf:21:00:e0:ff:ab:ee:
86:57:34:a2:38:6a:da:f0:08:1b:97:05:b3:c7:c8:b4:21:fb:
15:91:ec:cc:a0:ca:87:8b:6d:64:fa:a2:b7:81:f6:1a:5a:7d:
dd:32:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:39:24 2025 by rpki-client