Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json)
Hash identifier: AAVU/ZxX8xysFw/v84DDe+GYEUFgWmfVPmvWjKx7L+8=
Subject key identifier: 76:95:56:B3:88:33:A5:DC:4A:BD:F1:E7:53:F6:D2:30:7B:97:1D:78
Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b
Certificate serial: 0194BCE09A1FF26E16B9E372F98E6CB41241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=)
2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: F97L4dpRxh2liW1xss7I/Bgp4oQAmGApJ/yRFh/pgVQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9a:1f:f2:6e:16:b9:e3:72:f9:8e:6c:b4:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=769556b38833a5dc4abdf1e753f6d2307b971d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:bc:99:73:4c:c4:81:89:9c:a4:43:0e:0f:
33:03:36:3d:e5:73:be:0a:d0:e3:18:c6:f2:80:05:
c8:73:83:30:62:67:de:7f:da:93:c3:68:e4:b0:cd:
94:08:29:34:fc:6a:0c:78:4b:ec:05:93:e5:25:fc:
11:11:39:3b:ac:a2:a0:23:34:00:5a:62:dc:da:7b:
bb:ff:b6:9b:32:cc:38:df:c4:aa:e9:31:a8:57:cc:
b5:50:83:f8:88:2a:32:0e:a9:dc:f6:59:06:32:5a:
9a:67:fa:15:9a:71:0d:2c:9b:dd:73:74:78:e7:75:
1d:37:e8:d6:29:d7:61:d2:6d:cd:0d:88:77:73:bb:
9d:26:bb:88:58:e4:7d:c0:7b:30:16:0f:71:19:54:
f3:90:67:90:c4:52:e6:9e:1f:6a:70:f5:cc:ac:17:
9c:6f:58:ae:eb:70:d7:74:36:a2:1c:48:83:98:83:
8e:de:23:cd:ff:46:e7:33:c2:86:de:7d:1c:c9:5e:
07:98:66:be:4b:e0:0c:41:a7:51:61:d3:aa:6d:71:
09:6d:17:60:c1:5e:1c:aa:90:9a:e1:74:9b:5c:47:
e4:d3:48:02:6f:50:29:20:d7:c4:5f:5a:b9:9f:0c:
b9:f9:d9:e2:08:f9:f7:42:ed:1d:ec:64:47:7d:7f:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:95:56:B3:88:33:A5:DC:4A:BD:F1:E7:53:F6:D2:30:7B:97:1D:78
X509v3 Authority Key Identifier:
keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e8:7f:0b:1e:e5:0b:28:ba:f0:7e:c0:21:18:8c:a4:6d:4e:
c1:b4:b6:5c:82:88:37:05:d5:0d:ab:4b:bc:8f:cc:c2:27:c1:
4b:ae:8d:52:65:0a:90:02:42:c1:e7:bd:d4:bf:55:14:31:83:
4d:96:91:eb:bb:44:04:de:f0:d1:90:cb:e1:3e:65:5d:6c:c6:
91:7d:e9:a0:5a:00:6b:3b:f4:2e:6c:14:98:85:32:d4:10:9e:
3b:c9:22:e7:89:cc:50:ce:81:6d:49:b6:c4:00:11:b9:c3:6f:
dd:43:09:69:9f:d5:ac:ad:27:a8:b7:0b:1e:9e:77:97:55:30:
91:ed:d7:2f:28:3c:1d:ce:33:f8:9f:c2:1a:ea:d9:00:5f:76:
0a:d6:14:5f:ef:3b:03:8b:af:16:20:27:c3:82:78:5e:f3:a7:
04:bc:93:59:05:0d:de:b3:8b:0d:57:6d:cf:0b:ba:3e:32:23:
6f:87:82:14:12:e5:c1:68:db:ac:16:c7:48:fb:d0:3e:2e:37:
f9:12:f6:99:a0:cb:1e:07:25:67:3c:78:5b:d4:83:31:65:3d:
9d:44:06:09:46:39:0c:14:64:67:cc:01:77:88:00:de:65:eb:
45:25:ba:c0:fe:91:7a:7b:39:cb:67:45:27:e3:0d:ae:e1:2c:
f1:e6:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:43 2025 by rpki-client