Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: qgxfx3frs+ESc19tizvlNHEo8autA/0x3QeOgkdV6j4=
Subject key identifier: 4D:1A:58:C7:EA:32:BC:05:90:65:22:39:33:DA:D3:3B:52:97:62:85
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 0194BC04A6D2B26FB32381346C3408FA5717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: qxRUCd9FSvv0SYUjJV4WZpkrQNVuBXSHfqwvCcCyNrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:d2:b2:6f:b3:23:81:34:6c:34:08:fa:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=4d1a58c7ea32bc059065223933dad33b52976285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:99:ae:ed:6a:92:4b:dc:ae:b9:12:98:7e:
d7:8d:d8:31:12:ca:fd:5b:b3:46:96:53:bb:b1:32:
58:7f:58:e6:81:1f:df:07:bf:2d:28:c1:79:d4:b1:
b9:db:c3:70:da:02:2e:d9:d2:46:b0:cd:3b:3c:f9:
27:3f:0f:28:94:7b:73:e1:3e:20:81:17:f1:17:56:
8f:a6:84:21:fe:60:64:61:c4:27:de:87:80:79:a5:
ad:8e:b7:ca:dd:8c:df:a6:38:ef:7c:00:7a:5f:68:
e2:25:40:1c:ca:a3:b3:65:50:ff:d7:d3:40:50:3b:
cb:36:5f:b7:07:3d:ca:1d:2f:d1:cc:e1:cf:e2:c8:
ce:61:fc:7e:98:d8:e2:f2:03:66:42:d4:0c:3f:32:
08:c2:b1:93:c2:c0:f5:9a:d2:9f:46:89:ca:ea:87:
6a:03:53:28:a1:1f:83:29:12:07:7c:8e:60:8e:ed:
79:f6:6f:db:f9:6d:df:70:60:13:b9:9a:fb:d8:aa:
f1:42:0e:27:7e:54:17:00:b6:cd:ee:a6:11:e1:2a:
63:c5:d9:d5:1c:c9:24:65:8d:70:4e:fb:6d:a2:68:
59:5b:e7:58:bb:9c:78:6e:cd:82:f1:6f:15:74:78:
60:aa:c6:49:20:44:34:c6:a4:d5:27:d7:b0:68:b0:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1A:58:C7:EA:32:BC:05:90:65:22:39:33:DA:D3:3B:52:97:62:85
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3e:bf:a8:0c:85:2c:7c:06:c3:75:50:b7:6a:3e:51:a5:47:
36:74:87:be:24:58:97:5b:cd:d5:0c:d5:c2:60:59:e9:01:c2:
04:28:fc:21:9c:16:78:5e:2b:95:6e:d9:e3:1d:14:ad:d8:8f:
f4:38:f0:61:d3:79:9f:c9:da:21:ec:c4:d5:10:ae:45:a8:b8:
2b:92:6f:09:e2:82:85:c3:4d:ab:31:d2:75:5a:03:b4:f5:38:
63:7a:29:27:d5:13:91:98:83:1f:68:3c:64:12:e8:51:df:36:
f8:62:82:c4:67:14:1f:d8:e1:54:8b:70:cb:e4:b1:05:98:ee:
14:51:c5:e7:2c:01:c5:fe:59:1f:f7:ac:be:db:1e:9f:dd:90:
0e:92:6e:87:ef:30:c0:84:e4:e5:11:cb:2e:ad:5e:35:8c:7f:
7d:ae:49:f5:18:55:e2:07:c0:78:e2:f0:a2:52:d4:41:b3:a8:
64:91:af:59:0d:05:e6:4f:c4:c2:35:94:a0:f9:e1:d4:83:29:
41:28:0a:21:e0:cc:c0:af:cf:2a:60:78:5f:0c:3d:cd:86:4f:
3d:eb:dc:67:5d:77:31:2d:06:5b:b3:9d:2d:6b:92:45:1b:f7:
de:94:73:d6:97:d6:47:79:e4:ca:16:d6:e9:5c:1e:f4:66:1d:
b9:11:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:22 2025 by rpki-client