Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
File: XmaBWkYx0OeXwfNm5HvxURXJpPs.mft (raw, json)
Hash identifier: mdABvucPymPtnYmqJDFgvRo0576oA/X555LqNEg2Q8s=
Subject key identifier: 60:38:6B:4A:17:DB:B5:7A:13:19:1E:F5:6F:CC:DD:04:8E:08:65:EC
Authority key identifier: 5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
Certificate issuer: /CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Certificate serial: 0194BCA9FDC7A8450E6F66CFAB2AA123B355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
Manifest number: 0384
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: RcsdF1twYJezgr8yrtMpdKX_i-I.roa (hash: eUwQ3KjdQolC1TEdBZkoGCLFeL0MsnJZDlHFt9oWWQw=)
2: XmaBWkYx0OeXwfNm5HvxURXJpPs.crl (hash: KS4kcjIG2dH/2FC1hJ2Gr0u3dNtFugoDBSjU7QcgrcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:c7:a8:45:0e:6f:66:cf:ab:2a:a1:23:b3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=60386b4a17dbb57a13191ef56fccdd048e0865ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:32:af:c2:7a:5f:95:68:90:3f:58:8b:d1:
46:1e:7d:02:8e:e3:df:26:48:c0:5f:18:04:90:7c:
38:24:f3:88:54:32:55:95:af:55:60:5a:a2:9d:46:
c0:80:4e:56:3a:f3:7e:94:2c:c0:b4:2f:ab:56:89:
5d:32:df:68:eb:21:33:33:e1:8a:49:7e:79:f2:5e:
1f:cf:ac:0f:ee:5e:16:68:7c:11:2a:65:83:0d:27:
bc:0d:17:6c:ec:a4:95:40:26:ac:98:e5:90:56:50:
1f:23:1c:78:1e:c6:1a:69:ad:eb:e5:4a:64:e9:96:
3c:d3:72:27:e8:c9:8e:86:bb:da:99:ea:9e:52:a1:
ae:79:e6:04:e9:72:37:21:93:62:99:6e:a5:a6:3a:
67:99:00:b6:9b:05:21:55:9a:60:63:78:4d:84:e6:
69:51:98:d8:77:64:68:ba:c2:3c:2f:95:31:98:86:
77:e3:f7:1d:b7:b7:38:c3:bd:84:94:ee:6a:fb:8a:
33:0e:78:ff:1f:a5:d6:b3:44:68:d8:6a:36:b2:ab:
11:de:2b:3d:c4:6f:c2:30:09:a4:b8:ab:c2:fa:a0:
a4:bf:b5:9b:e9:af:cd:69:f2:25:8e:55:e5:36:3c:
ed:0f:0c:77:fc:f9:05:a2:b6:36:51:8e:4d:31:3c:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:38:6B:4A:17:DB:B5:7A:13:19:1E:F5:6F:CC:DD:04:8E:08:65:EC
X509v3 Authority Key Identifier:
keyid:5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:46:b3:d6:4c:e9:e4:f8:68:48:65:c1:57:05:03:3a:19:53:
f5:28:f9:3e:26:28:a9:74:dd:6e:ed:52:fe:7d:3d:72:22:d5:
c0:cd:c7:ba:a9:fa:7e:e3:be:86:f2:8b:ca:79:e2:45:32:a4:
cc:58:2c:2a:7b:18:08:cc:77:39:d5:49:c5:5a:85:b9:07:20:
56:a7:de:46:1a:03:3e:b1:0f:57:9a:63:c2:a4:7e:c5:c6:af:
5d:89:9d:e9:f2:4a:53:29:b4:82:44:34:14:62:d7:6d:0a:06:
e5:e0:0e:5c:c3:27:d1:c6:e4:01:c9:46:45:87:12:7b:86:6a:
02:1f:91:0b:05:df:c8:3c:e4:2f:c8:98:50:b8:c4:b2:68:02:
90:4c:d2:44:80:62:0c:1c:7a:46:59:2d:9e:9b:3a:69:5f:0b:
3c:52:d0:d1:fd:f2:05:cb:e3:1b:e8:a3:83:d4:bb:c4:da:84:
f3:93:36:57:64:67:d2:e6:a2:eb:58:17:14:c1:cb:9e:53:bc:
67:17:f3:47:9d:5e:23:e9:f9:f4:9b:36:21:2d:3b:cd:e8:db:
0b:c4:70:59:6c:7b:ae:f9:fb:e0:c9:6c:fa:b7:44:33:ff:7e:
2b:62:d7:89:03:89:c5:e6:1f:ea:24:02:58:16:b4:fe:9b:84:
4e:db:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:47 2025 by rpki-client