Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: gDzQsQXLm4UlYCk3NNoGGkiF1vyH72zlXlmLn1S+YHw=
Subject key identifier: 2F:38:EB:8F:00:E5:CC:53:75:F4:1C:6D:A4:85:42:DE:BB:1D:EF:D8
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 0194BCE0854190414B2A69E61E88527734F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 13C7
Signing time: Fri 31 Jan 2025 15:00:18 +0000
Manifest this update: Fri 31 Jan 2025 15:00:18 +0000
Manifest next update: Sat 01 Feb 2025 15:00:18 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: fwxUsKOYgBJmh/BEZiYNDVtu1K/VXy+X0tlO4H42LB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:85:41:90:41:4b:2a:69:e6:1e:88:52:77:34:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jan 31 15:00:18 2025 GMT
Not After : Feb 1 15:00:18 2025 GMT
Subject: CN=2f38eb8f00e5cc5375f41c6da48542debb1defd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:2c:f1:c8:be:80:ce:62:0e:0c:a9:d4:09:
9f:d5:00:01:32:61:3e:a9:69:d6:ae:4e:b1:0c:06:
b7:70:62:a8:ef:c8:c2:b8:27:b0:c0:ed:72:5a:ab:
d9:e8:8d:9e:51:e6:a3:5e:41:9a:a7:9a:aa:7f:e6:
e5:3b:3f:70:45:54:a4:86:bc:0d:06:8d:a9:a8:83:
8e:92:80:74:2c:5a:be:f4:b8:4d:7a:0a:fc:da:54:
81:e8:0e:e4:b4:97:c4:5e:e4:fe:ce:27:d0:53:2f:
38:5d:06:fd:e3:40:21:be:df:34:1d:58:0e:26:4f:
ba:5d:5f:97:92:43:21:aa:b2:70:54:78:8a:a1:35:
8e:de:fb:e9:9a:c7:3a:06:84:53:0e:9a:ac:77:26:
02:bd:3b:69:85:fe:fa:14:9a:90:74:13:f7:19:68:
be:7f:1b:8f:be:6e:6d:42:5e:f7:3c:aa:5f:8e:76:
be:42:79:50:cb:e5:83:e9:a7:57:e6:18:04:ba:9f:
9b:ab:0f:65:11:f8:02:eb:8c:31:bc:33:cc:fc:8b:
5f:89:d1:60:14:34:49:ed:aa:24:47:4f:1a:c5:3b:
50:4d:50:a4:4f:20:45:9e:85:8f:73:5a:d5:1d:86:
8e:3f:a8:3e:71:92:96:0d:c2:b4:c9:57:05:06:d6:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:38:EB:8F:00:E5:CC:53:75:F4:1C:6D:A4:85:42:DE:BB:1D:EF:D8
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:92:07:84:02:eb:e0:83:b1:c7:ec:7b:4c:c3:b8:66:d1:42:
81:32:a9:11:6e:38:d6:e3:12:f4:6f:3c:c5:93:2e:bd:57:d5:
45:0a:cb:22:a9:59:e7:15:d5:0b:57:92:65:f2:b1:f9:75:84:
8b:b9:24:c6:d9:1b:cf:9c:68:3a:97:cd:a1:52:a0:54:73:ad:
5f:bd:0d:cc:27:53:b0:b7:ed:c0:78:5f:16:12:f3:ac:0a:b1:
7a:6d:ff:50:c4:57:f1:21:ac:11:70:0b:74:cd:9d:87:31:46:
9a:49:82:a3:a7:93:78:c8:0c:64:6d:66:cd:df:dc:1c:8e:65:
1b:90:8c:40:d6:48:fc:11:8d:8d:50:51:bc:9d:83:7e:c6:ad:
2e:91:65:7b:4e:57:93:c9:14:94:2e:f5:e4:a0:99:da:db:95:
30:d2:e0:8f:37:0f:5f:ab:f3:d5:65:b4:20:8d:45:67:91:f1:
67:c2:20:5e:00:4c:37:1e:f7:9e:8f:c0:c7:e5:4c:94:3b:04:
92:6d:b2:b6:d7:be:00:3e:50:fd:2d:69:37:33:b2:49:0c:40:
92:e3:3c:13:60:41:8f:04:12:17:56:fe:11:bf:f5:4c:5f:e5:
05:09:eb:64:2b:31:b3:c5:50:9d:a5:13:25:8a:ff:c8:dd:14:
1f:fd:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:29 2025 by rpki-client