Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: aOYKmTvNc430aFuE907JHuY71QZkJb0/F41Gfk/zQuk=
Subject key identifier: E7:91:D4:E9:5F:38:44:45:D5:96:37:AD:7E:28:39:98:EA:F5:CF:E2
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 0194BD856E43D66E2EBE92564C4190397E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 0380
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: Ieq5X9URc4H7aW6d3cFED4rVbgydbviIT7HoEXu8Lys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:43:d6:6e:2e:be:92:56:4c:41:90:39:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=e791d4e95f384445d59637ad7e283998eaf5cfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:61:ac:be:d6:d5:98:d5:95:62:9f:2c:55:
5f:b4:37:f4:39:d8:e2:5f:3f:45:15:4d:70:dc:ab:
40:0d:07:64:b7:7d:af:4c:82:16:a5:19:0d:91:1d:
a1:31:a3:d2:04:a6:3f:65:6c:42:ee:35:d2:b2:85:
34:e5:a4:ce:41:1a:e5:93:7d:9c:2c:89:e5:c3:c8:
8a:11:4d:8f:0b:e8:9c:cc:37:6f:cc:aa:73:9d:d5:
09:45:0e:5a:1e:79:18:65:e7:1c:13:5e:1e:9b:73:
d5:fe:c6:fc:30:66:13:dc:a6:61:c8:b1:50:9f:d3:
7d:93:70:48:87:c4:d3:a1:1c:55:29:67:43:47:36:
9e:16:06:2a:c2:83:3e:10:d3:41:19:75:57:ef:d1:
3f:f2:23:ec:41:a7:a5:c2:d0:07:a5:6e:e3:13:d0:
4b:c3:62:4a:5c:df:ae:2e:30:f1:26:a5:61:2c:2d:
62:2b:26:67:f2:10:74:69:f0:28:65:bf:1b:16:41:
5c:04:ca:9d:bd:6f:d8:46:e9:29:c8:b6:de:32:ab:
24:d7:8c:1c:46:f7:f9:5e:60:b0:0a:9f:e9:32:87:
71:fb:e3:b2:5d:aa:56:20:dc:2a:23:20:d2:0d:e0:
70:5d:1c:4a:b5:0f:4f:93:e0:83:5d:3d:54:67:b3:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:D4:E9:5F:38:44:45:D5:96:37:AD:7E:28:39:98:EA:F5:CF:E2
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:37:2b:56:90:f1:e0:f5:b6:cc:a5:b4:ae:e5:df:6c:fb:b7:
db:11:63:2e:71:e7:50:62:c0:0d:17:a7:32:f9:86:cf:08:37:
6a:8d:9f:b6:54:c5:4e:df:95:7d:45:47:4d:8f:a1:d6:5b:5c:
76:77:f1:48:c4:52:cd:5d:f0:36:24:cf:f6:59:7e:81:b3:b2:
39:76:23:86:dd:f0:75:d1:4d:33:59:3e:46:58:39:cb:ef:08:
26:ab:15:c8:51:4e:ef:c5:ec:ee:3e:ae:63:9b:72:02:7c:c7:
d4:63:d3:34:58:0b:40:a5:5f:3c:35:a3:3d:4c:e8:96:ca:36:
26:a6:ab:b0:9f:dc:cd:3d:d4:73:74:c5:fc:c3:c5:49:16:85:
13:1d:58:6b:c4:41:24:46:be:f0:19:5e:a8:ac:21:b8:39:fa:
ad:3c:be:9b:1c:cd:5c:56:72:c4:aa:11:74:c6:dc:65:14:f9:
34:3b:5e:fe:3a:0c:c3:b0:c2:fa:dd:a4:35:bb:a3:ac:b1:a3:
f8:47:69:1e:69:40:95:9c:1c:e7:ba:b0:bf:21:a0:93:2f:db:
44:2a:f1:b1:23:34:2d:0d:55:6e:1b:d8:4e:7b:f2:29:a4:5a:
34:98:cc:e6:e9:7c:e9:b7:17:d2:7a:6a:cb:98:3b:f3:9b:04:
1a:a1:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:31 2025 by rpki-client