Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File: xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier: dY9tyb1NZ72BJV4Kt9Za4jIh/l3NPdcdbaPDTJ9gmCg=
Subject key identifier: 7C:6D:08:50:2F:F6:98:76:A5:DE:D1:AD:0F:1A:A8:00:AA:C9:22:75
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer: /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial: 0194BCE07496D1814597A9C0C30DB0610BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number: 05AD
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: g500VdhbkL6oMGtyg7NUgYQpncSa5FfIyavWD9j6heY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:74:96:d1:81:45:97:a9:c0:c3:0d:b0:61:0b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=7c6d08502ff69876a5ded1ad0f1aa800aac92275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:de:87:6b:34:4e:4b:96:80:10:cc:3a:b0:
ae:bc:1c:10:00:be:02:27:bc:d3:0b:7b:f8:9d:10:
00:e4:67:7c:fc:f2:69:08:ed:55:6e:c2:dc:75:b8:
88:35:d1:63:bb:6e:ff:cd:90:d2:de:d7:3a:71:2c:
97:14:a9:ea:a2:3a:9d:74:d4:0f:90:30:5a:98:c7:
1e:d1:45:3a:99:d5:58:47:00:bc:a5:c2:18:4c:23:
31:c5:5c:75:aa:73:9f:13:05:09:d8:b5:3e:b1:23:
0a:93:2f:3a:a6:c1:25:c3:f9:57:39:35:8e:86:c0:
46:38:d9:1f:1d:a7:34:c5:b3:58:f5:86:e0:84:1c:
24:51:fb:6d:a9:2e:11:3d:2e:80:a8:00:04:e7:12:
6e:96:b1:bf:6a:29:63:e8:70:a5:44:e7:96:aa:7b:
a4:b0:99:57:50:6c:87:80:c4:e0:f0:c7:56:b5:b0:
7c:b9:c6:a5:3c:03:8a:bc:0c:a5:da:7b:c4:1e:40:
b3:c8:a0:d4:7b:f7:9b:7a:08:0d:12:c3:c2:e8:9c:
ee:99:76:1f:a5:ac:3e:7d:b1:4d:bb:17:c7:4e:60:
5f:f6:b7:97:1b:75:49:87:e2:84:48:d3:e2:e4:c3:
a5:8d:54:ef:26:69:45:73:ec:be:7a:5d:ce:63:aa:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:08:50:2F:F6:98:76:A5:DE:D1:AD:0F:1A:A8:00:AA:C9:22:75
X509v3 Authority Key Identifier:
keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e4:fa:a8:c3:87:55:4c:ab:28:54:fd:3e:67:42:ee:34:0d:
01:a4:ab:7a:b0:88:f9:05:99:6e:f8:de:33:a1:21:8e:f2:b4:
28:eb:ce:53:d4:e0:42:15:b0:81:0c:16:53:1a:66:72:03:5f:
6c:41:20:09:f6:00:a9:c2:19:3a:82:97:f7:b4:b4:de:29:b0:
63:ef:df:ae:e3:2d:15:ef:4c:da:6d:47:7f:61:dd:6c:02:90:
70:a8:b9:fe:98:9f:00:17:68:ae:48:26:cf:0a:3a:cc:b1:92:
75:7c:ad:26:6e:ac:0f:2b:a6:0e:66:c4:37:b6:d5:4a:1e:dd:
87:58:4f:c0:ed:db:db:1e:24:c0:21:80:f7:a3:a7:ad:f7:cf:
dd:58:1e:14:cb:dc:48:f2:a9:f0:15:1a:4c:50:b7:46:61:e5:
07:7e:1e:13:25:d0:03:66:70:51:e9:64:16:80:f2:4d:f9:e6:
8c:ae:42:35:5f:ad:77:6f:16:d2:ca:7a:28:e4:82:54:01:c9:
56:1c:bf:cf:e6:2e:67:2f:56:aa:54:9a:46:df:75:b0:4a:90:
c4:c5:29:7b:64:5c:85:34:6e:73:34:fb:1b:5c:bc:8a:20:38:
fd:d7:da:33:61:0b:83:f3:c6:76:00:11:fb:e9:c6:1b:b1:f3:
57:be:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:30 2025 by rpki-client