Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: 6d8z83aLWSrwtnWCG1b1JfSGxku9y5PRcADU5hIMShI=
Subject key identifier: C8:9F:88:33:B8:6A:AF:C8:17:FC:71:6C:6C:DD:88:59:E3:7E:A4:4B
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0194BBCE054F3292B16A97A74612C0E61A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 09DF
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: 1wXz0I71VwNsCsh2rZa9XYDGB0/5yWOHvxHfdiLo+oI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:4f:32:92:b1:6a:97:a7:46:12:c0:e6:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=c89f8833b86aafc817fc716c6cdd8859e37ea44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:38:ce:d0:12:b2:e3:83:e6:a9:0c:99:49:
d9:93:90:22:82:93:16:44:11:64:34:0b:9f:ef:26:
38:1a:ff:ac:79:93:02:f5:ac:42:d4:31:50:d0:b8:
4a:57:ee:14:ce:38:78:1d:de:19:04:01:5e:ad:78:
f6:18:20:3e:72:bf:e7:6a:39:67:e5:4d:8d:0d:6a:
fb:ba:85:8b:75:6d:b6:77:a3:47:02:69:f5:4a:1c:
ea:30:42:58:11:47:99:f9:7c:58:38:80:54:ec:b6:
9d:7f:0e:7a:62:c7:5d:cc:fe:6f:7e:01:85:cf:09:
b7:40:36:0c:40:cb:85:4d:5a:db:eb:97:43:34:8c:
a6:6d:e9:d0:fe:9b:69:2e:ea:07:72:11:45:9d:bd:
52:34:ef:f4:4d:12:0a:c9:7f:5d:10:2d:82:a8:ef:
44:ad:57:31:12:08:4b:9f:47:3e:9c:98:6f:ef:98:
78:b9:43:d1:b3:71:c1:1a:c5:e8:08:de:0f:35:51:
c3:1d:58:f6:aa:85:ac:59:60:13:bd:bf:a8:ea:11:
4d:2e:65:e9:9c:8e:5f:12:80:66:a2:c8:c0:f7:7f:
21:d8:8b:8f:75:bb:da:a2:ef:4e:c4:3e:40:f8:50:
ed:cc:ff:8c:05:23:13:f7:58:92:df:6d:08:2c:3d:
12:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:88:33:B8:6A:AF:C8:17:FC:71:6C:6C:DD:88:59:E3:7E:A4:4B
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:7c:9c:a0:ab:60:95:06:c6:40:a2:66:2b:85:0a:5e:cb:
1f:48:49:af:a2:65:ff:ed:77:a4:e5:13:07:4c:a4:b2:f5:4f:
7f:4c:af:af:65:9b:c1:b4:87:86:df:32:4c:11:cf:e9:08:b1:
89:8d:f7:a9:aa:55:cf:6c:a3:1f:83:dd:b6:bc:a2:46:cf:b9:
a4:59:a7:62:1b:58:24:d2:31:8e:cb:3a:43:ad:f6:0a:b3:8e:
bf:3a:3a:b4:b1:24:d5:bd:bb:21:34:8c:ba:25:ca:b4:be:8a:
26:2c:b6:9b:26:b6:f7:5c:54:be:4d:b0:72:36:50:d0:3b:a0:
f8:54:ff:7b:92:01:55:78:64:ea:47:0b:46:c5:ba:47:b0:7e:
0e:f8:3d:c5:ca:56:c7:1e:bd:df:4c:a7:3f:ce:d8:4a:d2:2f:
d1:30:f3:e9:ae:3f:b2:07:76:f2:f1:e3:cc:bc:b6:d5:22:51:
83:73:b3:b2:88:1e:2b:e6:1e:da:f7:52:57:c6:b5:b1:3b:71:
be:5b:76:05:f5:37:cc:b2:1f:bb:e2:2e:2f:bb:c7:40:b2:04:
3c:7f:46:c4:db:47:90:d1:f9:cf:43:ab:0e:62:2c:77:95:76:
14:20:9a:3b:c7:fd:df:fa:78:4f:2d:c0:bc:a7:ac:fd:80:f0:
8e:9d:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:19 2025 by rpki-client