Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: OjwLdNg+a3jEXi9P+tmpc+YhKfaCpQVm/54TgDPCxSw=
Subject key identifier: CE:DF:14:A6:ED:C7:39:5A:4D:B6:C7:05:2D:7A:BD:DC:DF:E9:54:76
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0194BD4E44E3F3B10677A75D14EE412A0DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 108C
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: WzT0uncLABzBZCrdB1Hh/g2W/Mw5oWiinAVPwBtzD+c=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:44:e3:f3:b1:06:77:a7:5d:14:ee:41:2a:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=cedf14a6edc7395a4db6c7052d7abddcdfe95476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:41:c8:c2:88:b8:c7:db:b1:1f:c8:61:2d:
93:35:d7:fa:fa:6a:6f:c9:92:5b:e4:c7:16:d9:d9:
ee:61:d5:57:c2:11:69:03:4f:a5:3a:b0:00:c5:60:
da:38:d1:0e:97:21:7e:61:f8:1f:10:57:36:84:67:
ce:63:da:fa:d2:f8:cc:91:74:ef:2a:38:fb:aa:4d:
67:86:64:f5:ee:91:26:75:4e:f7:a7:d7:1a:69:ec:
50:6a:1d:f8:aa:40:2d:91:91:d5:f1:c2:fe:d1:56:
8f:b3:bd:8e:59:32:fe:04:b1:26:05:bf:42:6e:3f:
6e:c6:75:72:27:6b:ea:a7:37:b4:2a:78:23:e7:f5:
f6:3d:ad:d9:c5:eb:4f:29:75:ea:8a:f2:ff:50:e9:
79:ae:3d:28:6f:c6:62:84:84:67:d0:33:72:eb:5d:
97:50:fa:47:1d:31:4b:12:bc:a4:9a:89:c2:43:b0:
3a:52:2e:86:45:0a:55:6b:ff:15:40:38:8f:00:ce:
b7:54:0a:43:19:ce:b7:9c:c4:39:76:13:0a:68:71:
dd:33:00:25:38:49:ce:3b:d3:c3:ac:6c:1b:f1:f2:
01:39:11:d6:f2:6e:92:7a:f8:4d:fe:71:19:a1:f0:
d1:a9:2a:27:bb:93:ab:1a:c0:a1:69:40:e1:3c:81:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DF:14:A6:ED:C7:39:5A:4D:B6:C7:05:2D:7A:BD:DC:DF:E9:54:76
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f1:33:b3:be:68:94:cc:c8:ed:36:d9:18:a8:38:bb:e3:ed:
46:43:61:f4:5e:a5:db:88:d5:b0:11:38:c8:3b:8b:56:00:5e:
b5:1d:d7:20:eb:bb:e0:72:36:3d:dd:3e:f0:84:26:84:5a:d3:
16:db:a3:33:e7:7f:8f:9f:6b:f9:b1:04:4f:a5:57:9c:7d:d2:
7f:31:75:7b:78:46:b1:38:cd:f2:32:80:8b:97:b4:d8:91:ed:
5c:39:42:01:9d:0f:da:3f:4f:35:f6:34:59:8d:e2:a9:3d:bf:
dd:c3:82:ba:65:2c:32:89:ea:fa:46:b1:9e:95:dc:c3:a5:4b:
7e:df:67:4c:7b:08:16:dc:d2:66:74:6c:98:30:7d:24:bd:9e:
d7:d7:6c:0d:da:5b:03:79:3b:59:af:4e:c5:db:1c:82:71:a9:
cf:10:f7:5f:6e:a4:50:e4:c5:f8:47:42:3d:d4:47:ba:d0:88:
71:2c:5d:a8:a3:17:43:87:05:43:42:81:58:3a:41:a3:17:0d:
b9:48:ef:4f:f2:75:87:4b:5b:f7:c7:14:e8:64:c8:de:0b:21:
39:3d:f8:cf:9c:76:14:c5:b4:0c:92:bd:ab:06:3f:61:b1:62:
91:f0:76:05:32:1f:9c:2a:0d:b8:2c:e9:c6:82:c8:07:ea:ab:
71:6f:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client