Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: PP+QPdtsnWE5ZDyWpu9SREHiXqOalgx6zFk6oZnigSw=
Subject key identifier: 10:B7:50:FD:53:C7:13:FD:F6:A5:68:F1:9E:34:5A:FF:2A:0C:D2:B9
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 0194BBCE710F7631C61F35613862172DE5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=)
2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=)
3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=)
4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: 3WglD/XIx2mAHW0tXZYBm8KPHydxVBAVODDK1lKb8pg=)
5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=)
6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:0f:76:31:c6:1f:35:61:38:62:17:2d:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=10b750fd53c713fdf6a568f19e345aff2a0cd2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:59:08:5b:58:3a:b6:be:1a:35:d4:11:f3:
0f:61:26:6d:9a:a3:4a:a0:54:11:6c:5f:43:06:d6:
1a:97:e0:50:f2:d1:eb:26:8f:39:a3:bd:a4:ef:f2:
27:06:51:b0:45:33:0e:19:2b:26:14:10:f3:ba:ef:
cd:07:be:9b:25:f4:66:15:78:4f:46:00:7a:3a:6a:
51:b6:b5:ad:0e:2a:6e:e4:0a:4e:e9:92:28:f3:53:
d6:31:af:71:c7:a5:0c:12:25:0a:a1:09:1e:5f:cf:
14:f0:d0:a1:53:a0:79:14:a6:91:cc:be:95:f2:6f:
45:c3:ae:17:63:f7:eb:a0:74:47:f5:d9:60:a6:43:
57:8f:74:37:27:cd:79:0d:82:40:de:4e:46:6e:56:
b0:fe:48:a0:b8:5d:7a:a7:27:8a:d5:e9:50:8d:c5:
e2:1b:99:e1:0f:07:5b:dc:b3:c0:9b:2f:88:ad:ad:
19:60:6d:62:49:16:6c:de:df:5e:e2:49:a4:52:70:
ec:b3:ba:54:82:d4:12:58:61:00:bd:e6:f3:c6:2a:
51:f4:e0:77:6c:90:03:77:87:cc:d5:db:d3:4a:14:
e6:2b:4b:7d:09:0b:67:9c:1b:41:a9:af:37:b7:ef:
fc:ca:3b:62:3f:cc:26:49:5a:c5:fd:00:08:5a:fc:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:50:FD:53:C7:13:FD:F6:A5:68:F1:9E:34:5A:FF:2A:0C:D2:B9
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:4c:d1:32:37:a8:58:94:4a:d4:fe:09:12:a0:6e:6b:dd:
37:9a:2d:90:1b:28:83:d2:a6:ad:42:ec:2e:ac:60:34:9c:42:
df:7e:ee:22:ca:93:e5:3e:02:0e:8d:22:bf:59:58:83:f4:05:
47:7e:62:d5:14:84:1f:4b:75:60:16:c0:c1:1e:d2:46:8e:b5:
d5:17:b1:10:62:b7:33:df:00:d7:55:ee:b1:c7:51:ee:32:87:
47:84:f9:05:f2:64:47:64:3d:aa:3e:94:a3:80:72:85:e3:63:
cb:6e:4a:61:b8:28:06:64:dd:ba:17:f1:53:68:c9:ac:14:19:
07:de:56:85:3e:48:63:16:89:7b:ec:4b:95:6b:e5:a5:a2:c7:
46:85:93:a3:18:4a:c6:7c:14:26:a8:bf:21:1b:8a:99:7d:a7:
7b:26:18:ca:14:68:2a:eb:d9:63:b2:c7:d9:18:10:03:e0:4f:
8b:22:6f:16:1c:f1:56:88:ac:97:c3:66:04:cb:2a:7a:ff:a5:
98:68:3a:5a:f1:56:90:a9:70:d1:47:4e:dc:7b:70:b5:99:80:
e4:61:e6:54:fa:aa:28:e2:20:c5:a8:34:fc:b0:c2:71:30:02:
97:d5:81:1f:6a:c5:43:b9:e6:ef:ed:60:cc:62:ac:0b:49:d7:
7c:68:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client