Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: Zsz5e04ZlqvNLv/Cr0UGFtIY5ls8jQqhw3ngTgUmiws=
Subject key identifier: 60:24:61:C1:AA:D9:BA:BE:EE:D0:26:18:7A:F8:40:8C:8C:3A:A0:17
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 0194BC3BD0F1CB603EBAB6BCD421741A9E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0BC4
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: z3dreCsFmyQJBUXMW9x2wFTllPql8DLQwyXFh6xkGAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:f1:cb:60:3e:ba:b6:bc:d4:21:74:1a:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=602461c1aad9babeeed026187af8408c8c3aa017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:7a:72:9a:40:f6:fe:ee:2b:cd:08:6a:4e:
26:cb:74:1b:0c:2d:ae:44:5e:bb:f5:d6:2a:81:c7:
2d:cc:44:8f:02:79:48:15:68:61:76:c8:6e:5d:45:
99:fc:ea:24:2e:a9:02:92:6a:ac:c3:91:72:ab:56:
60:c2:a6:71:40:8e:d3:9e:c0:ef:04:fd:8a:e8:f0:
55:2c:24:67:ce:2b:57:02:20:53:8f:cb:8d:57:f7:
fd:9d:e1:0f:21:76:c9:ae:7c:ef:6f:45:bd:20:61:
82:a4:69:06:63:b8:fd:64:65:2e:99:4d:a6:ab:f3:
3c:6e:d1:b2:bc:9d:66:94:91:3f:e7:cb:24:2c:ff:
c7:c7:e4:1d:f1:92:02:ba:f7:67:4a:fb:7e:81:77:
52:5a:0f:3a:d7:78:1a:fb:76:1a:ec:75:c1:a4:99:
fd:b9:b8:3e:4f:97:e3:b6:8c:4d:1f:f1:19:25:aa:
02:cf:a1:cd:e5:4a:a4:4e:3d:74:06:27:71:e7:05:
1f:46:63:74:14:40:da:20:f2:eb:65:82:fc:18:39:
0c:3c:57:9b:22:32:ec:ea:6e:ce:7a:16:36:16:db:
b2:95:75:64:3b:10:12:3c:19:f9:1a:1c:31:15:79:
b7:2a:d8:7a:d0:97:ae:35:fd:d7:43:94:99:fd:10:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:61:C1:AA:D9:BA:BE:EE:D0:26:18:7A:F8:40:8C:8C:3A:A0:17
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:41:e5:38:63:77:c8:c9:0a:75:21:43:ad:8e:26:47:3d:a0:
d6:11:73:a2:2b:e7:e4:01:73:3e:ba:1a:ba:e2:97:2f:ca:c8:
36:6c:2e:78:79:a4:6e:50:24:f9:c2:9f:49:fd:1f:87:3a:f8:
88:bf:c8:5d:7d:aa:8f:64:33:fc:c8:48:b7:60:32:8f:b1:4b:
48:39:a3:d2:61:6e:4a:84:16:62:2c:6d:83:32:af:f9:8a:8b:
f0:b6:6f:76:29:f9:24:ca:15:33:7e:cc:b4:ef:fb:2c:e2:ca:
62:82:0e:45:c6:b5:52:bd:50:7c:05:55:a1:e3:ae:cc:98:2e:
c9:5d:3a:04:94:24:d2:9a:d8:68:70:4f:58:2d:5e:ac:86:bb:
b9:ec:a6:af:15:92:c3:52:bc:cd:63:60:4c:8d:ca:d4:61:ba:
dc:2c:54:ea:3d:f9:90:c7:66:33:83:04:31:72:34:b5:92:6f:
87:7d:bf:53:5b:7b:d3:9d:00:16:79:75:f5:d6:09:8d:fa:2e:
b4:b6:2c:0f:86:5c:45:91:04:71:7e:84:4f:a4:1f:47:9d:b4:
f1:d8:a7:de:de:dd:bb:76:3b:3f:b6:ab:b7:64:98:93:c2:d1:
52:2d:e2:60:94:ca:3d:23:77:2e:43:58:7b:15:9d:2c:69:fa:
f5:35:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:39 2025 by rpki-client