Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: tpDcD/A6kqxD8pEX2raIK2qQmt+zEGUHbtNWMhqDl7w=
Subject key identifier: 0E:1D:A7:50:C4:38:09:83:6B:29:10:F9:87:B8:20:A4:75:97:78:86
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 0194BD4E7EB6DD26C750CBC23BFB56DB3B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 2FnxWjtwh7KFv_hykkrSOYGbvY4.roa (hash: lHqB/84b/tnNxb+0w+5WU9XioMN+I/3MvGDQZ2GLdEw=)
2: ajuoeFVs3Wv6piEKCQm-YDbacGU.roa (hash: uiCyFTO1It1gDM/Wfhrrlyxb4WrD3apKehfP5R4U3W0=)
3: bMNPQ0JvZwzx-pZYER1G_knAfSg.roa (hash: W+fVC2UnLIyGTc4qX8q7TadCkeRxz6sUHiIjTmi3R8k=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: LZMmuo/KfaeN50/RXt9aTlO8A9KGJPEmRN9Tx0zZGVM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:b6:dd:26:c7:50:cb:c2:3b:fb:56:db:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=0e1da750c43809836b2910f987b820a475977886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:f8:37:a5:6e:f9:71:48:4f:81:f3:66:7f:
65:83:80:c4:b7:31:18:63:9d:6d:1c:ac:97:92:89:
ae:88:e1:3d:e8:40:60:23:63:bd:bf:0e:5a:b7:c2:
0e:88:4a:91:f7:78:fc:09:fe:0d:b1:3a:e0:26:dc:
a2:33:9e:08:46:c8:c7:77:45:e6:aa:ae:a1:26:b1:
31:f6:d8:d6:e3:50:74:f3:31:ab:68:bf:f1:0d:b7:
6b:9e:96:09:32:8c:49:c4:4e:f2:d5:36:df:ca:21:
8e:8b:91:ff:15:25:9c:0c:58:d7:e8:31:fa:4e:5d:
78:04:85:1c:bd:d6:3b:d5:49:bc:b7:33:94:d1:ba:
a5:57:e9:19:ed:e1:b2:ce:cf:3d:dc:70:e7:79:d9:
ae:d1:5a:39:56:b4:23:da:e6:4b:f5:4d:49:01:e7:
71:a9:e1:71:bc:38:68:e2:22:b1:29:9c:05:b4:5c:
31:9a:f2:98:01:bc:e4:bb:a1:c7:d1:c9:88:40:94:
90:09:63:43:13:f0:ee:2e:ca:12:d4:39:ce:6b:3f:
cc:51:49:41:bb:26:c1:38:f0:41:2f:5f:74:ce:f7:
85:54:2e:94:c3:a2:14:22:2d:d8:f5:f0:80:0b:5b:
79:7b:7c:3f:41:76:31:8a:35:78:59:6b:53:fc:e7:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:A7:50:C4:38:09:83:6B:29:10:F9:87:B8:20:A4:75:97:78:86
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:15:d6:3d:e1:15:59:f5:b1:e1:d0:0d:b0:0a:1e:33:59:fc:
7f:10:47:ab:91:3b:78:4a:89:d6:2b:95:47:09:93:79:43:3e:
e1:44:48:cd:74:a2:83:2f:13:9f:29:c3:99:cf:f4:f1:b3:86:
32:55:68:b0:06:6d:14:f2:3a:9e:26:56:e2:52:f0:f5:2c:f8:
ee:26:66:02:fa:2a:2c:c3:9f:d6:df:c4:bb:ed:76:c2:77:57:
03:cc:d6:4d:a5:d7:7f:f3:cf:75:e5:18:ff:ab:2d:c7:f7:3e:
0c:65:f0:0d:55:5d:08:51:06:24:e4:d1:2f:ff:24:d6:f4:be:
33:4b:4d:ca:47:b4:06:85:5e:b5:98:52:66:9d:2a:da:be:25:
68:b1:18:4c:b9:f2:68:3a:30:e0:45:29:30:6f:cd:93:46:01:
34:23:f1:4c:69:43:ee:c8:43:e0:b3:ce:40:91:4e:01:ee:db:
6f:93:8b:c2:07:4c:55:10:90:fa:eb:ed:ea:2e:28:09:f5:8a:
2f:c7:6c:2f:c9:09:5b:e2:2b:06:59:2c:66:f1:ad:5b:bd:b8:
09:19:56:33:32:0f:c6:7d:28:52:90:c4:1c:c5:50:bc:6a:78:
fb:fe:cf:78:ce:96:9a:33:53:ef:70:88:48:e1:fc:50:0f:a9:
8c:a1:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:45 2025 by rpki-client