Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: mZI3lR4wc9eYNog5I9Y9YmGBk2VeyEcQPlwVcEqWsG8=
Subject key identifier: AC:F7:58:D8:B1:EF:27:7F:DF:3C:BF:D4:A5:4C:27:AC:4C:F1:4D:5F
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 0194BD852DF3E2D0326C47FFAC5F6F6EC517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: IPVqTow4BPog0VgWrmL6j3UlRyc.roa (hash: yHocQSt6Dh1L30jflXp+Oc+mQ08tmbAfLa5FFYWt/64=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: zPRHWRuS9qIenz/rv1WK4oBAvxuj4gHWVTM1Ovb4RcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:f3:e2:d0:32:6c:47:ff:ac:5f:6f:6e:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=acf758d8b1ef277fdf3cbfd4a54c27ac4cf14d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:df:1b:a8:85:01:30:5a:f6:55:16:b3:48:
72:5d:15:32:ff:9d:ad:d4:a9:b2:40:70:1a:2c:7f:
c4:b8:31:0d:28:56:9d:25:41:9e:ad:a9:15:8c:0d:
14:4c:20:fe:fe:d5:cd:40:76:9a:5c:6e:35:2e:46:
8d:17:c2:97:63:22:3d:f4:4f:fa:5f:85:b3:27:ca:
f7:25:a3:2a:38:05:f6:33:7d:34:13:06:08:26:e9:
a7:6d:b2:25:96:2c:e0:18:e7:e2:c1:88:61:5a:79:
00:93:0a:ab:6d:1b:55:48:11:9a:24:96:99:5e:32:
d3:f8:c6:9f:c3:64:08:56:47:24:f6:32:5e:aa:a1:
c1:d3:37:60:f1:dc:a4:5b:1d:b6:1f:74:d2:eb:36:
e9:cf:59:4a:c4:0f:39:d7:50:51:29:cd:51:3c:aa:
05:e1:e6:a8:ec:7b:de:a6:80:c1:24:88:4f:59:db:
90:9b:61:b0:65:2f:56:76:4e:b5:51:fc:0d:9f:2f:
92:5b:27:9c:33:0f:83:ab:ae:be:eb:f7:25:80:39:
db:af:65:7e:c1:84:bd:11:6c:b4:b8:c9:f6:20:ea:
cc:af:d7:71:05:ca:fc:ab:62:e0:6a:aa:07:52:19:
48:85:b6:8f:57:7b:c9:3d:5d:82:6c:e7:ed:b3:15:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:58:D8:B1:EF:27:7F:DF:3C:BF:D4:A5:4C:27:AC:4C:F1:4D:5F
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:6c:4e:f5:e7:2e:21:6f:d4:28:8d:f9:a1:b0:28:ba:68:
58:9f:fd:c0:01:0c:4c:94:c9:1a:56:91:b7:a9:b0:de:f7:08:
ef:dd:61:b8:ed:69:ca:b9:9e:5f:35:af:52:3a:8e:0c:20:2d:
13:26:0c:51:32:71:e4:ae:5e:c8:9d:68:e5:02:df:10:fe:4c:
c2:58:2c:f9:bf:a9:14:8e:8a:a9:c1:09:67:6e:10:d4:7a:02:
0e:0c:c0:e9:2b:b7:b8:ba:66:31:de:59:59:05:19:8c:f4:46:
26:79:40:2e:25:77:c8:ff:6d:0e:9d:b6:c9:a4:ac:03:45:f3:
35:0a:f3:d1:bc:a4:ce:a3:90:9f:d9:36:58:ac:7c:35:57:26:
b6:cb:4a:2d:5c:16:23:b8:79:40:dd:67:3b:89:ca:89:8c:b4:
2f:db:03:7f:cb:70:57:b5:c0:f9:80:4d:b2:09:78:fa:7c:d4:
49:11:36:a8:19:ae:d7:6d:21:31:f7:38:90:32:1a:6c:18:8a:
8e:2a:42:98:90:22:01:c8:55:ce:37:af:6c:68:42:82:c5:53:
e6:b7:a2:fe:6e:e1:25:a2:0a:87:de:24:01:53:d5:36:a6:00:
65:29:74:61:9e:13:2c:b0:72:ae:50:9c:a7:1b:47:82:be:92:
05:87:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client