Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: TnOhKYIVB9M1E/V65CaGYHribSCYSN/aQSvXXZkTbMQ=
Subject key identifier: 56:90:CB:2F:4C:F3:F9:E6:8F:DC:25:E1:A7:79:19:FE:A9:13:AC:BC
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 0194BC049FA5B0467D6684258DCB0EA8082F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 049F
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: 0gRWfiYqZ9Jyk68GVbuiQv6JEBiReHNBPpsG4VOHVdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:a5:b0:46:7d:66:84:25:8d:cb:0e:a8:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=5690cb2f4cf3f9e68fdc25e1a77919fea913acbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:06:85:c4:f1:f6:a7:6b:a2:6e:34:3c:d3:
e5:5a:aa:1d:9a:ba:a3:9a:d6:36:81:63:49:58:3e:
8b:eb:14:58:ac:c4:4f:62:0c:17:15:aa:0f:77:f5:
16:11:6a:78:4c:94:6e:a3:66:67:0b:1b:de:ec:e1:
a4:fb:fe:4b:41:01:78:ea:11:db:bd:64:ca:d4:a1:
4a:bd:82:8e:7b:f1:7b:7b:8f:ed:e8:7d:53:94:0e:
d1:0a:bf:71:23:89:13:4d:4c:b7:93:b9:9f:08:f9:
b9:ea:9b:c2:51:a9:46:e4:99:c7:d2:bf:0b:2c:cb:
0a:06:d7:6b:2f:21:b4:dd:d6:bc:97:ee:b6:06:84:
79:44:ce:60:0a:66:90:93:1b:2d:88:a0:30:d1:26:
35:33:70:f7:0d:25:ae:a4:30:2c:3d:26:8f:c0:4c:
42:6a:39:4c:08:ef:e5:c7:89:69:ec:18:01:22:2d:
84:90:ef:85:ec:c6:a7:a8:b8:73:92:72:e0:28:b6:
6e:d3:3f:64:9d:d6:07:26:7d:b6:56:d9:2e:41:d4:
d8:c9:61:3b:0e:90:48:7a:65:64:55:e4:26:22:df:
9b:eb:4d:f4:92:03:cc:2c:1d:99:6d:f8:74:ef:05:
81:eb:4a:bd:df:22:ef:c7:80:d0:ad:86:9f:fa:a8:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:90:CB:2F:4C:F3:F9:E6:8F:DC:25:E1:A7:79:19:FE:A9:13:AC:BC
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:67:60:94:01:7c:de:56:38:c7:e1:21:db:62:58:8c:e2:0c:
dd:cd:c3:43:67:f1:d1:8f:de:39:38:f6:e9:4f:42:8d:e2:a1:
11:c9:c1:49:bd:78:76:76:ba:b5:8c:6a:56:f8:cf:df:de:28:
1f:ed:53:8a:9d:4c:db:8f:12:3b:2b:63:a8:9a:7b:ae:36:cd:
ee:b0:d4:6c:16:99:90:d3:38:d3:96:e4:99:26:4e:47:03:e1:
c7:92:63:db:78:3c:7d:22:c0:3e:9b:c2:a3:3a:f1:f1:b9:56:
c3:db:81:76:f7:d8:5b:af:76:71:ed:8d:20:ec:4c:41:88:bc:
8d:49:22:54:b3:5a:5e:36:d8:63:9e:26:1a:ae:62:80:3e:2d:
9b:8b:2c:7a:b4:04:fa:e3:47:bb:10:9b:5c:0f:49:73:39:88:
76:37:a3:32:5a:03:90:ab:60:a5:db:ae:86:9b:ae:09:87:7f:
6d:31:2f:23:23:0d:53:66:dd:27:ba:21:7a:5d:d5:e8:9b:ec:
17:b3:df:72:0d:29:57:fa:f4:9f:47:25:f6:b4:12:e0:2e:79:
95:d8:c5:20:87:d1:6b:62:dd:d8:62:fb:07:26:ee:52:25:5e:
57:66:97:8e:93:8c:1b:44:b3:fe:40:28:1b:44:d4:21:3f:04:
bb:61:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:54 2025 by rpki-client