Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File: x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier: rYYOLdmrm+zhP3T+PB3pZ7BXVD/pfPdCvZreQ3iCq/I=
Subject key identifier: 5B:F9:00:2B:45:6B:37:C9:A6:BE:4D:C3:A3:14:22:18:E7:81:D1:E3
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 0194BBCEDCB6CCB2915A3DCE959FEE8E0338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: 0aBy0mrTvG+SPbpM//mhTurwLN+8dnFSCZSitXm/PfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dc:b6:cc:b2:91:5a:3d:ce:95:9f:ee:8e:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=5bf9002b456b37c9a6be4dc3a3142218e781d1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:c8:4b:af:e5:3f:25:55:71:9b:a3:1b:ba:
dc:25:ff:c2:e3:64:77:0c:b6:5f:75:2e:d3:b6:81:
b6:27:cc:4b:13:a5:4e:a7:db:9d:b2:4d:a8:a1:74:
2f:c2:18:cc:09:f0:41:45:61:d5:11:03:ae:a4:2c:
34:86:9f:0e:86:92:69:9e:b4:a8:9a:7c:35:a9:28:
fa:07:1e:ed:d7:95:1a:62:15:bd:8b:e4:4b:5f:5b:
99:86:aa:7f:9a:a8:3e:61:f3:08:a2:35:48:5f:b6:
84:49:86:d9:73:e7:fb:c5:41:ce:40:27:b0:12:19:
ae:1c:79:ed:00:b0:b5:9c:dd:1b:a4:12:c5:a7:34:
ab:8e:92:af:42:45:0b:90:da:99:6a:bc:f5:d1:57:
85:52:39:ef:7c:77:7a:0f:a2:99:c2:1c:9a:86:9d:
4d:16:fd:81:08:7a:84:a7:5e:9d:a0:8b:0f:e3:fb:
e7:69:6b:85:d8:6f:a1:73:a7:a6:ba:fd:65:3a:11:
04:0a:15:5d:13:f0:ad:b4:be:51:5b:33:2d:27:1a:
55:c8:f0:fd:92:12:2a:a2:44:1f:15:64:0b:d9:11:
ce:e4:41:15:1e:c5:85:9a:c9:fe:24:53:5d:b8:81:
cf:ce:cb:db:e0:17:1e:ee:5e:cd:6c:49:00:d7:70:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:00:2B:45:6B:37:C9:A6:BE:4D:C3:A3:14:22:18:E7:81:D1:E3
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:e5:db:5e:8a:82:b5:f8:cd:c0:da:7f:75:08:c7:54:30:
e7:49:dd:b6:9b:0a:6e:82:82:52:d8:b1:7f:62:77:28:63:53:
3b:1d:e9:fb:da:60:57:a9:b7:9d:c5:87:58:71:c2:ff:4d:31:
fe:60:39:e1:4e:1c:f2:99:f4:55:65:90:32:3f:e5:44:df:c9:
07:1f:85:50:a8:6a:f6:38:13:fe:f3:a1:97:a0:24:3f:4d:6c:
df:0b:10:c0:ee:3f:73:4a:f4:60:bf:36:3f:0f:b2:cd:38:43:
a6:32:6d:e6:99:6a:56:92:f5:61:52:5a:d7:20:cf:9a:8c:d9:
4a:f6:f3:42:d1:0e:1f:28:85:b1:1b:55:4d:5c:45:71:6f:2c:
fa:f2:c4:43:46:05:47:39:2d:85:a4:4d:07:c4:50:6c:94:9f:
10:cd:3b:14:d2:67:51:7c:fd:4d:9e:90:6f:65:9d:90:3a:ea:
ca:3a:61:90:9b:81:35:de:2d:f9:97:63:78:5c:ae:9a:1e:30:
a1:0b:8f:65:3b:3a:4c:3e:b3:0b:d3:63:78:65:49:2b:f3:4c:
91:b3:3b:e3:af:3d:f5:f9:f9:b6:0a:72:8b:25:0e:b8:5d:f9:
7f:99:3f:ec:5a:fe:db:03:fa:74:1a:fa:25:fc:85:88:93:99:
dc:df:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:37 2025 by rpki-client