Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
File: xKMWKFZYILOlo-HPyHdz4oP7lcE.mft (raw, json)
Hash identifier: c3L31tdB1DNC5eKfrIk1ud+5kB3Bwp4TkBnlWFAauxY=
Subject key identifier: 7E:7A:EE:5E:4D:13:92:DB:4B:8F:40:ED:27:0E:24:B4:7C:CC:93:68
Authority key identifier: C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
Certificate issuer: /CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Certificate serial: 0194BD4E4849B36E5C5BAA2E486BDDE93E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
Manifest number: 0970
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: O7JK_R6ip6iR244uyf3DBgROHco.roa (hash: GKH7o0xxF7nZfmB+4s7mUapBQQrsXrRHoDwbM7Hh8hA=)
2: xKMWKFZYILOlo-HPyHdz4oP7lcE.crl (hash: ePC7BWICty0hyptoQoiR0WlP9BzpHXN//Qh89wbSu0A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:49:b3:6e:5c:5b:aa:2e:48:6b:dd:e9:3e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a31628565820b3a5a3e1cfc87773e283fb95c1
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=7e7aee5e4d1392db4b8f40ed270e24b47ccc9368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:37:2b:44:17:e0:e0:94:8e:c5:fc:5b:c6:
1b:71:0d:1f:03:7c:12:4e:dd:dc:98:0a:8a:0a:3e:
78:fc:eb:b3:3e:3a:27:c3:83:fc:0f:cc:17:ee:80:
c6:fd:c6:93:3b:87:d8:0a:c4:3b:d3:38:16:e4:b5:
ac:fc:8d:eb:6b:60:e2:eb:63:4a:8a:44:bc:36:dc:
80:0a:af:27:9e:b5:2c:ae:27:02:a4:f9:a4:9a:f9:
12:7b:05:3b:2c:3f:d6:10:62:dd:0c:51:19:cf:55:
77:2b:19:fb:af:4e:f6:8f:31:11:04:23:8c:f8:51:
47:d8:ef:1b:8a:1e:57:9a:b3:82:4a:14:0c:ca:42:
a6:ab:ff:20:c1:37:a0:8c:f3:ab:d6:15:2b:73:62:
8f:5e:b0:36:58:4a:72:f9:31:98:77:dd:2e:47:3f:
6e:39:f8:32:06:63:45:c2:37:84:b2:14:1f:a9:37:
3c:0b:4d:f5:4d:9d:5e:38:c2:4b:00:88:0d:1b:1d:
9a:38:dc:59:cc:30:9f:d8:c6:21:55:03:d4:71:57:
5c:06:a8:40:28:b7:3a:d9:4c:3f:3c:05:25:d7:f4:
9a:21:73:9f:ff:75:6f:94:77:97:19:2c:69:97:79:
8c:b3:96:c6:ad:71:ce:25:c9:83:b7:e6:a8:25:c4:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:EE:5E:4D:13:92:DB:4B:8F:40:ED:27:0E:24:B4:7C:CC:93:68
X509v3 Authority Key Identifier:
keyid:C4:A3:16:28:56:58:20:B3:A5:A3:E1:CF:C8:77:73:E2:83:FB:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKMWKFZYILOlo-HPyHdz4oP7lcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7a80aa-000a-4714-a2fa-fb307badec4d/1/xKMWKFZYILOlo-HPyHdz4oP7lcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f3:89:e8:21:3b:07:e7:4e:b0:63:99:1e:24:41:d4:d1:bc:
f6:42:ae:17:17:f3:02:cf:8b:f2:bf:17:7e:04:45:62:2b:fb:
60:f3:3a:ec:05:67:08:79:4b:f0:3c:35:ba:82:cb:e8:ce:61:
8a:17:f5:33:3d:7a:be:71:b8:27:77:9b:df:4e:99:32:08:5b:
75:31:df:2e:60:69:59:47:58:b9:41:27:4b:2e:7d:04:36:04:
94:11:7b:a6:19:f5:a1:95:4d:50:73:da:8a:51:02:52:8b:c3:
55:01:a3:f5:2c:e6:52:0c:ce:71:65:39:24:ee:cc:09:b5:4c:
15:25:01:57:0b:7a:54:65:b7:06:d6:8f:b9:e4:99:09:49:0b:
7c:f7:38:91:61:fd:8a:77:85:5a:91:3f:3c:33:cd:85:36:7c:
d2:44:8d:7b:f8:69:5f:bf:47:91:81:24:0f:b1:ae:8d:37:d0:
27:91:45:80:00:f8:5c:22:bb:55:5a:cc:45:b1:72:7c:8e:de:
82:cf:55:c3:cb:f1:d9:1c:58:fe:14:5d:db:39:13:82:fc:fa:
86:31:58:83:b2:b9:b6:71:cb:bd:6a:a1:85:82:b4:98:c1:63:
15:0d:cc:db:08:27:5f:58:17:b7:c3:57:7c:e9:84:d4:b5:f6:
29:65:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client