Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: JcUOQaU1XaXph+AtVTu7ljCbA7x5ru03c7fvtH1lnuk=
Subject key identifier: 99:99:32:8B:FE:D6:4E:25:85:B8:8A:79:E5:22:7E:9D:2E:83:40:69
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 0194BBCE400360279D096ECBED2BB06515DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 0308
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: 4aLpoXObM3ew7yN9vHEAPc0fnWk.roa (hash: ar8XjMMpMsT7IlojVLcbANVoZnXxQWrx82eUQGbYerI=)
2: 9JKRkQ6tixRwrA_H5DjUUwh-ctU.roa (hash: 1YzNRCBg6x+18WuRd9cXRg3/XpSac8PJp6N6ff66a+c=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: +twjxrhSBw/5AArnbPwXb0cLf53eY/GzomLZrv5TKuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:03:60:27:9d:09:6e:cb:ed:2b:b0:65:15:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=9999328bfed64e2585b88a79e5227e9d2e834069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:9a:7f:2b:bb:1c:25:5d:34:36:7b:08:c8:
29:8b:c9:ef:8d:8f:87:db:a7:fd:33:80:13:7c:c9:
21:3e:3b:c3:f8:ac:90:db:8c:ec:25:77:c5:d5:4d:
fe:cb:59:67:28:66:89:86:76:57:05:f0:e6:79:3b:
51:b9:75:d6:88:5d:16:77:e4:58:b2:3d:0c:57:ab:
44:16:b3:33:bf:2b:75:73:ea:cd:30:de:e2:74:46:
61:62:23:8b:85:46:80:04:4b:2e:03:b2:a2:ba:7e:
b8:01:42:49:13:ce:ec:ff:c4:0d:d2:42:e0:db:26:
09:cb:0c:7b:0e:71:fd:68:9a:4c:e8:81:f8:a8:47:
f8:10:6d:3d:39:30:e4:51:8f:75:69:c3:ba:7e:ac:
25:61:38:f3:15:f9:4f:81:da:39:9e:e4:bd:c6:38:
26:d0:8d:5e:85:ed:c8:80:e3:78:f7:ff:8d:fe:5b:
e0:a7:d9:4b:f9:54:f6:2a:e1:dd:14:48:6e:97:02:
8b:14:6e:34:bc:7c:56:ce:b8:ed:3f:31:43:cc:6b:
84:b2:9f:a7:bc:c1:2b:30:66:be:26:f1:0a:39:7b:
b2:0a:27:f2:cf:0a:83:8f:b2:c3:ab:cb:4a:35:4e:
1d:33:53:46:56:64:cd:a7:6f:45:3d:a0:5f:2e:95:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:32:8B:FE:D6:4E:25:85:B8:8A:79:E5:22:7E:9D:2E:83:40:69
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:73:c9:e0:07:ab:d6:4c:6a:c1:c7:3b:a5:94:27:2d:ea:
7f:12:52:d3:a8:01:94:26:c5:78:57:c7:6e:9d:a5:e8:ad:bc:
27:cd:1d:39:a1:80:ec:bb:15:5f:57:c6:4a:9c:18:1e:4d:79:
f5:20:07:b2:17:39:52:91:00:89:e0:90:fd:28:4e:ac:1d:33:
b1:6e:35:a6:a2:a4:58:f3:13:11:08:04:96:52:c9:37:d1:7b:
d5:d7:d8:9d:14:80:69:51:0b:fd:e0:4c:f1:52:6d:ee:02:45:
f3:40:54:ca:c6:4d:77:36:60:80:85:02:4e:8c:f6:af:bb:60:
1e:b5:3d:97:bb:57:a9:79:d0:f8:12:80:b8:6c:e8:32:8a:d6:
35:72:93:d9:97:bc:38:c1:23:c7:16:8e:10:9e:a8:fb:36:3f:
4b:32:c1:bf:07:bb:65:ce:27:b2:1b:b5:4b:a7:b1:8c:79:d2:
68:37:f8:25:c8:ec:55:4d:55:74:49:d7:b5:7c:7d:ef:9a:34:
82:48:bd:9c:39:f7:61:a6:fc:ba:09:08:94:d0:92:f9:95:28:
cf:cf:fd:a6:95:7f:f7:91:1c:df:7a:39:0d:b2:d1:69:68:22:
08:bf:99:8f:27:90:d0:7e:8e:00:04:9b:82:55:b6:3c:a2:46:
eb:ce:79:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client