Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: wDW8O6VJTfDAYfHnJDyRDVRqhg58UCe51EkLwHMv9Xo=
Subject key identifier: 4C:97:86:8E:24:2B:7D:53:5B:C6:8D:EE:70:0C:7C:81:8B:B6:C4:D3
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 0194BC3C9C1D400E775BD6B9A9B234B1D97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 030A
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (hash: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: wZ3VP1+ftuSV2+3mj2aGiLX2oBopYp58tjDo2pepZYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:1d:40:0e:77:5b:d6:b9:a9:b2:34:b1:d9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=4c97868e242b7d535bc68dee700c7c818bb6c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:e1:d1:35:b2:1b:a1:18:db:c3:42:83:27:
d9:e3:4a:74:9d:73:e0:e0:4f:ab:0b:bc:54:ae:68:
6c:97:ba:9d:8a:2d:13:32:31:79:a1:8f:0d:b7:38:
d4:f9:c2:50:44:7e:be:ad:f7:a6:14:6c:04:f2:f5:
f2:ee:94:cf:12:99:a5:ca:fe:80:31:6c:c8:40:1d:
db:a8:56:47:22:60:14:66:47:5b:25:8f:2b:76:23:
6c:a6:5f:2f:f5:46:7e:63:10:5d:00:7b:29:cb:c6:
ea:48:34:1b:35:fb:9f:dc:15:40:79:91:51:74:7a:
d5:59:ee:e3:e6:87:f0:de:58:72:a3:ca:48:ea:8d:
e4:c1:a2:c8:9e:41:0e:7d:b3:94:5a:33:db:90:c8:
0d:4a:5c:05:3d:a3:70:5a:74:a5:63:d6:eb:86:0f:
f9:43:30:65:1c:36:82:08:7b:7a:b0:78:4c:94:e1:
89:15:b2:49:a4:5d:2a:6d:c8:bd:68:0c:55:81:a3:
d2:9d:d3:9b:a7:11:88:cf:c0:5c:41:7c:18:c2:e3:
cd:5d:f1:30:4c:5e:e7:e4:68:a0:4c:9a:17:a4:de:
de:85:32:c7:8b:a8:9d:b0:df:55:6c:23:1e:31:28:
04:52:9d:37:7c:3a:ce:ca:6f:a0:1f:2f:ef:99:a6:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:86:8E:24:2B:7D:53:5B:C6:8D:EE:70:0C:7C:81:8B:B6:C4:D3
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7f:78:e9:5f:52:37:da:31:e6:99:f0:a4:77:d3:e4:0b:69:
de:05:51:74:48:12:3d:eb:d9:95:fe:94:87:99:67:2c:a1:b6:
e8:5d:9c:67:be:e2:50:02:18:9c:2a:a0:2c:91:5c:40:b6:6d:
63:ec:44:28:25:c7:c2:38:a5:2e:43:93:24:03:04:52:66:db:
75:d5:d7:6c:2b:4b:44:76:6c:5a:f0:02:3c:aa:a4:84:e9:90:
d3:ad:ff:ed:38:57:5c:b0:a0:fa:f5:04:66:3e:cb:5a:8a:3e:
2d:89:8c:15:b3:f0:a0:62:c8:29:f4:c4:47:e1:52:0c:9f:86:
7d:f1:05:64:44:18:b0:dc:1d:fc:f5:fc:3a:4d:84:db:ea:3f:
88:8c:8e:a0:a2:68:45:72:f0:39:d4:4c:5a:f4:8b:ad:e0:3f:
ec:c7:9c:af:16:ca:6c:60:35:cf:ed:5c:f8:91:5f:f9:25:fb:
d3:1d:1e:41:22:a6:b6:ea:df:6b:3c:59:8e:fb:ff:6b:05:57:
d1:2e:32:fe:d3:bb:18:30:02:be:8b:e4:f1:d7:79:23:33:85:
a5:51:b6:c7:32:a2:81:87:ad:d9:48:39:96:58:7f:12:57:3d:
98:5d:4f:bf:43:92:d2:33:40:14:fb:da:ea:73:c6:2b:d8:50:
50:46:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:51 2025 by rpki-client