Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: ltYmtWrMj7jMKpiyITZ+kEBoILo/88Q4Fmq1hK8P4mg=
Subject key identifier: 35:CF:F8:F4:BE:BB:F9:BB:68:EC:F6:0C:32:C6:A0:DA:81:C1:35:AC
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 0194BC731E3984C20575F3C63951EB9F6EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: nEzOH1Fwnt8uYjrSkNci4fciCDN/rViveOj+JcgyqLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:39:84:c2:05:75:f3:c6:39:51:eb:9f:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=35cff8f4bebbf9bb68ecf60c32c6a0da81c135ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:f5:74:6f:69:34:68:40:db:e9:fe:f5:13:
14:e8:86:e1:0d:f1:f8:0a:e4:50:8e:8b:85:bc:df:
b9:c8:92:67:9a:8a:e3:45:dc:23:37:90:e4:9c:70:
68:f6:c5:a0:4d:6f:06:98:17:4e:eb:3e:74:a6:89:
6c:21:21:aa:7e:7f:fc:5f:32:92:ca:9a:10:a2:b0:
81:fe:dc:ca:d7:17:05:28:32:17:a1:02:52:1c:90:
d1:61:d5:de:47:36:6c:dd:c0:23:a5:14:1f:a9:2e:
6d:00:cf:05:3f:36:a3:53:91:ad:78:59:be:ae:ee:
04:14:c8:19:6f:f6:40:eb:c4:8c:6d:ee:0a:22:05:
fc:6d:b6:d5:6b:23:f5:4e:c8:c4:b9:f5:3a:80:73:
d9:57:87:9f:fd:d4:88:00:b5:02:8a:73:75:86:43:
d1:f2:bd:5c:b6:5f:6a:01:1f:ea:8f:ab:c4:1c:4a:
d6:0d:d9:6d:93:52:e9:79:0c:6c:a7:58:5e:38:b0:
b5:46:3e:d2:83:c9:5f:4f:74:eb:33:d2:1d:63:a8:
9d:1d:6a:b7:29:4b:cc:91:65:3c:58:a9:2a:37:4a:
4e:02:eb:0b:47:8f:7c:76:19:b4:b8:00:14:89:59:
1c:a6:1a:fd:12:14:8b:b9:65:02:e6:8b:d6:06:af:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:F8:F4:BE:BB:F9:BB:68:EC:F6:0C:32:C6:A0:DA:81:C1:35:AC
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:95:62:b1:2e:0c:af:e6:49:bd:f8:2c:53:b7:be:94:0a:
17:b9:bd:cb:6b:66:39:0d:31:4b:13:58:76:a0:1e:75:3f:78:
21:ef:b6:47:9a:4e:a7:13:e1:ef:73:96:6b:e7:73:21:d3:dd:
aa:2e:5b:e1:82:20:8a:d0:a3:5b:24:dd:59:69:fb:1a:4e:a0:
ac:76:1f:c0:92:c7:e6:37:85:08:12:46:32:59:31:0f:ed:11:
dc:c3:85:b6:bc:d6:58:5c:57:eb:50:ab:bc:b7:cd:96:c8:ca:
0c:d9:e1:e4:c2:43:fe:4f:f9:7b:cf:06:c6:ec:b1:6c:96:9d:
03:8d:db:08:30:be:80:83:b2:4c:f5:ba:21:36:f6:3e:02:06:
d9:85:f4:63:26:28:91:70:ee:e9:df:89:a5:36:e2:a0:81:a1:
53:b7:e3:f2:a5:bf:28:f4:c5:6d:f2:2c:79:e3:5d:3c:82:36:
c9:07:1b:1e:28:c8:94:ee:76:7d:21:40:00:df:07:8b:2e:ec:
2f:ba:d2:db:64:c2:81:6c:e4:20:af:d2:2a:67:00:82:32:51:
24:a2:5a:5e:a2:48:16:44:77:c6:21:0d:c5:c6:da:1e:77:6a:
22:4c:c7:75:d1:48:db:e0:33:28:72:c9:3b:51:6a:75:d7:ef:
b2:94:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:11 2025 by rpki-client