Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: XlTDh6dbR4wy0yqPmQsqvwxXxooHF/5qlbz/5UBvkzY=
Subject key identifier: 0D:04:3F:50:2E:5F:71:CA:00:56:B4:45:6E:37:43:3F:EA:9E:35:FD
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 0194BC3C8AA503F268465E89AB40BACD961A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1195
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 9IL3cOLgV825piKJML4YuWjeJrw.roa (hash: WgYGxZdjBPsDK2nLI0aD3UDTfEXrKgAMLmB2VIGZnQQ=)
2: LUD2e9X5YgRI-3ZtkCHu9Yflftw.roa (hash: xNtD+g99F6IM6Fc5L57RcYCtCnz6FTymTmJECNWv3U8=)
3: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: FgZxQoYa1Sqb/Oh697wDQNG6qyYs+tOosZ3TRkTDRSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:a5:03:f2:68:46:5e:89:ab:40:ba:cd:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=0d043f502e5f71ca0056b4456e37433fea9e35fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:b8:73:44:df:dd:f5:c0:25:82:71:f9:cf:
a0:61:a0:46:0f:1b:12:da:27:64:58:9a:b8:ed:4a:
bc:03:26:7d:f7:f9:e8:76:50:1d:e3:0a:51:94:65:
8a:90:76:35:e4:aa:5b:04:03:24:f1:23:82:be:27:
91:9d:3a:6c:02:d0:4f:5f:4a:26:2e:d5:a6:22:51:
bc:db:36:68:22:22:13:be:e9:d1:2c:3d:a2:5e:c0:
f1:6c:43:78:64:92:43:31:24:95:f0:9f:15:6d:67:
28:e3:f7:a8:8b:fa:6b:e4:c5:57:d7:2c:7d:75:47:
f0:da:5a:bb:8c:13:c7:f4:74:20:50:7d:a2:39:93:
01:d0:4d:68:d5:a3:cb:ca:52:f4:72:12:6a:c6:24:
7c:d1:74:7f:53:98:29:f3:e7:8e:36:56:73:44:81:
0d:1e:7d:d2:71:2f:fe:86:74:66:d4:03:5c:84:b4:
7b:f5:0c:37:78:80:93:fc:92:76:06:5f:6c:70:e7:
55:13:2b:12:da:b9:82:cc:ae:98:a4:72:82:be:7d:
55:42:02:e3:df:05:84:ef:7d:e1:08:38:d3:ce:20:
13:4e:06:29:73:64:ba:50:bb:be:b9:a5:27:76:6f:
23:fa:e5:7e:35:83:d1:54:49:c7:7f:dc:6a:db:c8:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:04:3F:50:2E:5F:71:CA:00:56:B4:45:6E:37:43:3F:EA:9E:35:FD
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:41:bc:cf:e8:47:e0:2c:ff:b9:b6:60:73:57:3a:6d:35:
0a:24:60:a3:33:2c:1a:a1:fe:3c:b8:d9:34:de:de:08:0a:7b:
01:30:2e:f4:8d:0a:d1:df:f9:3e:44:6f:5c:ff:a7:c3:f8:45:
82:5c:70:53:42:4a:6d:2f:7e:cc:ac:93:2e:30:75:58:27:73:
af:f9:b0:af:9a:c1:85:be:3b:84:13:dc:71:9c:31:01:ec:ee:
01:f6:95:a8:3e:7f:12:fb:d0:1e:eb:47:ff:c4:36:6e:2c:f3:
10:97:db:85:58:2d:bf:3e:ac:99:7e:c2:47:cd:be:33:0d:4c:
19:94:4d:1d:9f:77:eb:fc:3f:d0:bf:6e:d3:07:18:43:fc:4d:
bc:2a:f4:1f:71:de:78:23:ed:b1:48:6a:e7:ab:a2:26:37:3e:
13:c7:2a:4b:8d:03:ba:fa:47:81:db:07:49:86:ff:f3:fe:24:
75:a5:2b:ae:55:75:56:71:d7:c7:ab:1b:fa:c7:06:b1:cb:eb:
32:1e:5f:4e:7b:a0:b2:2f:22:0f:91:69:f1:f4:35:f9:57:4b:
87:80:ae:c3:8e:4f:9c:e2:9d:59:77:d2:29:52:bf:48:0d:d4:
eb:42:ed:af:50:e6:a7:99:40:09:76:e2:4a:91:d9:e0:0c:b3:
f9:c9:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:08 2025 by rpki-client