Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: cYVkVZnQqKNDr4zOZgOlQ2RYp5OaldGmN/bkOPdCcq8=
Subject key identifier: 8C:A5:4E:FE:0B:68:08:1D:76:DF:57:69:80:7D:C2:BE:D0:30:F1:86
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0194BD4E5357C048E11E5011265E600FD35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 1330
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: EYYlWcvcjQfgHRHtOfYnQlSdTvKGAKpOqVHylhUKUvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:57:c0:48:e1:1e:50:11:26:5e:60:0f:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=8ca54efe0b68081d76df5769807dc2bed030f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:dc:11:d2:95:63:ac:13:4e:20:e4:98:d0:
c9:fc:6e:3a:75:67:93:ff:92:57:16:a7:88:70:41:
4d:4d:b1:79:ca:99:46:3f:52:a7:06:4d:6d:08:3d:
0d:e9:31:c6:87:fe:24:41:86:10:a7:30:82:6a:25:
ca:94:1b:28:41:a4:b5:96:82:ee:8e:e4:33:36:d5:
2b:8f:a0:c4:a8:cd:95:a1:22:21:a4:bd:42:20:4a:
0d:ad:f8:59:a1:2b:dd:ad:ee:c7:eb:83:35:13:2b:
de:f1:a0:f2:8c:70:d1:91:4a:57:fe:9b:88:08:95:
77:ae:ee:4f:ed:9b:52:1d:3b:26:d5:14:ec:65:69:
39:ac:3c:2e:0b:5a:3c:af:39:61:c5:8c:88:1d:f0:
e3:5d:ed:73:33:6a:d1:4b:56:e1:bd:86:06:07:8c:
08:67:d6:dd:de:e9:af:7f:41:33:e5:7b:41:33:5c:
24:15:14:e8:fa:5e:2a:d5:5f:84:4d:01:84:7f:3c:
de:fc:00:96:97:ae:48:a6:31:9c:8a:12:f1:af:88:
20:3e:62:71:1e:e3:03:a3:b5:82:2b:a1:50:0c:e1:
f0:6b:16:3f:09:1a:c8:bb:c5:3c:41:a6:51:a7:15:
d6:3b:f3:f6:eb:1b:31:98:2b:4a:33:a5:99:ff:cb:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A5:4E:FE:0B:68:08:1D:76:DF:57:69:80:7D:C2:BE:D0:30:F1:86
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d1:15:51:8f:4e:23:9a:8c:2d:a3:92:30:a1:09:1c:29:98:
80:a2:20:9b:bd:c1:3e:92:75:ff:0d:0b:86:b1:0e:b1:fb:3f:
3e:55:4b:79:28:cf:69:ec:08:77:ba:a3:a0:ab:30:2f:79:ef:
bc:40:74:8c:a3:16:a9:5c:c6:50:a3:31:8d:3d:03:50:86:a7:
8f:51:5f:26:56:33:9b:10:b2:12:5b:50:75:0a:5d:e4:cd:ce:
1a:e7:85:ac:62:5f:0a:53:35:0a:59:55:2a:3f:0c:a0:74:ef:
51:22:a7:64:d5:bb:84:db:d9:bc:e9:8e:86:4e:1e:ab:34:61:
26:1a:fc:66:46:fb:b7:f5:f0:7f:8b:e6:31:5b:80:e4:c4:db:
02:bb:11:9a:ac:30:cd:cf:76:c6:2c:e7:cd:86:0b:b6:2a:a9:
d5:8a:4c:da:99:ae:bf:e4:19:2a:34:06:2b:b5:e2:11:02:cc:
fa:97:e4:71:1c:1c:2d:89:e4:53:de:6b:2f:c5:a8:62:17:61:
a1:f6:53:13:f9:66:f5:45:24:72:81:53:8b:00:b7:3d:96:1b:
da:93:cd:21:86:29:0d:7d:53:bd:c4:95:6b:44:9c:91:a8:b4:
24:7f:77:01:b0:18:8c:65:4b:05:6e:8f:b8:73:eb:63:67:50:
0c:46:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:59 2025 by rpki-client