Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: N1+TebUuj98iis20oxGJxWHfdG5Hbhhw3h1NyKtXr/g=
Subject key identifier: 3C:C1:30:24:3E:C3:87:F4:E0:8A:75:2C:DF:E9:43:16:55:08:37:D0
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 0194BD4E3C9F523C551ECD4D05049BEDBA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=)
2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: exWwIKv+YLsE1FPcJMAJy1qpHln+fEShcXljXOtyb1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3c:9f:52:3c:55:1e:cd:4d:05:04:9b:ed:ba:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=3cc130243ec387f4e08a752cdfe94316550837d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:03:3c:ba:17:07:5e:97:f3:a3:d2:ad:9b:
84:d0:9b:18:9f:de:eb:2f:66:87:95:93:98:c8:8a:
85:d5:9f:d2:5d:80:d1:91:a4:b9:a6:18:16:29:1d:
37:f6:0e:f8:09:de:38:6d:e6:17:1f:e1:44:19:31:
57:44:70:a0:12:81:c7:ea:14:d5:1d:83:ff:09:0f:
9c:15:a0:60:7e:a9:d5:97:9f:c1:66:3f:eb:0b:7c:
d1:61:da:a2:f8:3c:ba:ce:47:b2:48:db:72:ab:aa:
b6:8a:70:3d:11:aa:a8:45:bf:58:8e:c4:28:6b:89:
76:50:25:2c:3e:b3:42:64:82:b4:7f:fb:41:5c:12:
85:05:b7:7d:f7:3f:06:f0:94:e7:91:fd:b7:72:e1:
8d:b8:f5:ae:03:bb:69:5d:5b:17:71:ad:a4:de:ad:
0b:7c:ab:b0:73:3a:90:fe:cf:89:87:db:33:15:13:
ef:ce:ad:bb:7a:97:39:f1:ab:95:32:b9:c2:48:5a:
8c:ef:ce:59:8f:f8:3c:9e:9f:ae:2f:09:a6:a4:b5:
8c:ac:65:4c:c3:b3:2c:1f:46:b7:20:58:72:65:db:
89:cd:de:94:b4:c9:7f:13:88:b0:64:dc:d2:e1:45:
c3:05:80:1c:f7:c8:29:6d:8d:36:bc:28:2a:27:b6:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:30:24:3E:C3:87:F4:E0:8A:75:2C:DF:E9:43:16:55:08:37:D0
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ef:0b:3d:d1:48:ee:02:f8:46:d9:b9:2d:0b:20:dc:c2:a0:
0d:68:d4:9d:ff:54:ac:70:d4:50:2c:49:0a:c2:7f:ef:9d:d0:
e1:de:f6:79:5c:b4:bf:ba:77:93:64:c9:1f:95:ac:d7:ad:72:
31:dc:89:fe:99:d5:2d:86:cd:2e:9e:39:b8:de:74:35:bd:cd:
d2:77:63:d1:e5:ef:75:49:4b:15:37:59:a5:9e:0c:5d:88:31:
0e:57:2e:0b:4c:a0:d8:e8:d3:ab:c5:c9:c4:d3:d7:18:ea:45:
e1:ec:af:fb:85:c8:32:53:61:2f:31:63:33:2a:6f:ed:ad:49:
3e:ad:b8:b0:dd:b2:09:68:2c:75:8d:d5:32:3a:04:d3:5c:2e:
95:dd:05:6b:11:28:4a:72:6f:e7:a0:e2:51:cd:43:fc:40:8e:
91:83:5d:b7:46:fe:75:c4:22:c3:72:1e:90:a3:76:79:b9:c0:
17:9e:e3:89:cb:f3:75:cb:de:0c:d3:74:b4:dd:33:0d:19:c8:
e3:89:82:cc:54:4c:ba:1b:03:5d:d4:95:12:71:85:69:e3:3c:
a4:3f:a2:c6:c4:62:d8:ff:6a:a6:ee:c0:b9:24:19:60:a8:7b:
75:62:55:4e:4c:d5:ff:cd:e0:18:b8:93:a6:e7:39:2a:d6:c2:
a3:f1:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:45 2025 by rpki-client