Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: gmsVhm8OfHE3EA40erauciCeDaeRM87EsDIPINwzy1Q=
Subject key identifier: 74:E2:12:BD:71:E5:CD:64:E4:37:2F:12:7D:D7:22:18:2E:80:9A:C3
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 0194BC04F02A74D17EE55B50A02B37DDB803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: zZJG7Pi/V1joWpe4z3y1THZsRahARJJzE3CCofftXWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:2a:74:d1:7e:e5:5b:50:a0:2b:37:dd:b8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=74e212bd71e5cd64e4372f127dd722182e809ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:33:ec:69:f9:0d:ed:be:63:00:7f:92:0e:
82:67:66:ee:a9:ee:dd:c5:a8:61:2a:5a:be:0e:2c:
12:f9:8b:05:f6:93:6a:4a:13:bf:f6:e9:31:61:b7:
18:49:0b:fb:d5:33:7c:6d:65:71:67:d7:9c:61:12:
5f:0a:f3:5f:27:47:b9:d7:26:5f:93:1d:90:bc:6e:
20:a4:cd:c9:73:ff:ee:68:4f:7f:a1:f3:e0:48:84:
e6:25:2a:b2:8e:1a:5e:fc:64:a8:88:90:98:eb:8b:
99:eb:5c:e5:b8:8f:6b:f3:7b:12:dd:9c:df:df:5c:
25:b7:79:3c:bc:1c:46:ed:52:0b:c1:6b:2d:a9:af:
53:33:09:2d:4d:0f:1c:fc:d7:88:14:4a:de:8e:f5:
e3:b6:97:38:d1:4b:c5:e8:5d:ca:02:11:90:67:8b:
ed:c8:ff:bc:55:aa:bb:5c:03:7d:26:53:60:59:2d:
5f:5f:e5:ff:0b:a4:55:cd:0d:d1:dc:77:bc:3d:ac:
d7:a7:30:61:2c:a2:9f:a0:3d:b4:7c:e6:da:8d:73:
24:6d:20:5c:ec:2c:8e:a9:4a:98:db:63:2d:b9:f3:
17:4f:58:55:7d:9e:0a:ed:d8:22:fb:90:cd:ea:40:
70:c9:fb:7d:d5:dc:46:09:b9:1b:e7:70:b6:69:e6:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E2:12:BD:71:E5:CD:64:E4:37:2F:12:7D:D7:22:18:2E:80:9A:C3
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:c5:3d:ea:64:d9:f0:b1:76:8d:be:3f:d8:52:3c:da:c7:
51:2c:e7:3c:b5:94:7f:c7:ea:c8:99:a0:b7:37:1e:b6:f8:ea:
72:f2:08:27:78:51:a2:aa:a9:3f:23:de:6e:b5:07:6b:80:13:
20:a1:91:bb:67:14:2a:e6:9c:d9:6d:09:fc:c3:43:49:aa:1d:
83:ce:0d:7a:14:f1:fe:90:29:86:7c:b4:2f:4e:d6:73:75:81:
1c:bc:a9:5f:72:33:6f:f9:ca:55:68:53:88:76:02:13:c9:1d:
18:ed:65:af:e0:cd:33:fb:09:d3:9d:ff:63:6c:e7:31:81:86:
b9:fe:9b:22:5f:52:fc:d4:31:0f:dc:11:ee:b7:a9:88:f8:4e:
e7:b4:90:1e:e1:12:00:00:47:39:d4:6d:90:1a:e5:57:ba:98:
05:60:23:1b:e0:bf:15:1e:d8:1c:25:08:d9:e3:41:58:8e:a5:
77:f5:12:64:4f:92:a7:85:f4:34:1b:c4:2b:01:93:e0:e6:74:
c9:3b:8e:aa:f1:a0:83:36:bb:79:ba:44:a1:28:eb:1d:c9:97:
5d:10:40:bd:00:6e:f7:6e:cc:89:58:49:74:4d:27:6f:73:7e:
a8:89:fd:d6:24:a5:31:5b:4e:7a:5f:a7:ff:9f:b1:3a:d4:b0:
28:e0:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:30 2025 by rpki-client