Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: 4zIniaaLLH+gZ0vJPU+0FQnjLtZMbO/5KCV9PhhV1wA=
Subject key identifier: 77:93:BD:76:BC:1B:0E:EF:7D:37:6E:F5:CA:DD:79:C3:0B:93:E3:E4
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 0194BCE0B3620025192895D44FBD4FA36677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: 4FHMieBpgOYtTCWIPANX07Dn2YH7eq25dlDPLt8Vpuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:62:00:25:19:28:95:d4:4f:bd:4f:a3:66:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=7793bd76bc1b0eef7d376ef5cadd79c30b93e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:0b:06:e6:9c:b0:0e:de:4c:40:52:ae:ab:
b6:83:65:5b:39:4c:b7:b7:d2:ea:b7:7f:c0:22:03:
03:8b:15:f6:88:d5:1d:69:a2:e8:9e:d0:1d:5d:de:
ff:d0:f5:0a:3b:d4:80:f2:ed:65:12:62:52:01:f5:
0b:a9:72:e8:c6:1e:21:58:0a:96:76:80:e0:d6:6d:
92:4e:22:47:4a:10:e0:45:bf:f6:2d:ce:d4:91:26:
90:25:49:8e:c9:87:e9:15:9e:58:dc:f1:34:f6:f7:
14:91:8f:38:de:5d:49:ec:a3:b9:00:84:6a:03:53:
6d:a2:1d:23:49:ab:51:bf:cb:0b:f1:4d:a9:0c:d0:
28:99:f8:8f:72:14:7b:9d:e0:f2:1e:e8:47:d6:2c:
79:41:d3:aa:40:53:a1:14:9c:ad:22:65:dc:18:42:
ef:0c:91:35:bb:bc:44:29:e9:07:9c:89:ed:77:7e:
5b:da:2f:c9:a7:34:ab:06:65:e8:bc:ea:ae:a0:ff:
0e:93:37:e8:7c:39:0f:b4:cf:4c:a5:2e:fc:4c:95:
16:e5:a2:d9:bf:61:5a:d3:0e:dd:35:8f:2c:16:35:
5c:b3:35:17:b2:4e:36:ec:a7:29:83:c5:d7:e4:20:
ad:31:b1:6a:cf:92:30:f9:0a:b3:3d:9a:66:ba:92:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:BD:76:BC:1B:0E:EF:7D:37:6E:F5:CA:DD:79:C3:0B:93:E3:E4
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:35:9c:71:f2:bd:2b:6d:30:59:79:60:2e:28:c5:b8:50:19:
72:9d:59:0a:78:33:69:05:d2:ed:85:2e:db:df:3d:95:60:91:
45:09:44:9b:45:2c:4b:10:f3:48:d4:29:6b:9a:2c:fc:c5:c4:
3a:98:ac:1f:e2:96:88:22:6a:c5:bb:4b:2b:27:d0:45:3f:f9:
4d:b2:29:14:79:b3:1f:f9:c4:29:8e:55:f5:19:ae:34:09:3b:
fd:1c:87:31:a2:92:c0:5c:7f:a5:cd:95:99:bf:47:7e:ee:d3:
f4:6a:e1:58:da:bc:27:c7:b5:b4:77:0f:ae:2f:fd:cf:0b:10:
49:30:f1:c1:34:c1:d7:83:06:6c:ec:8e:85:4f:f0:d9:2b:41:
a4:b8:ed:fe:e0:79:c6:b1:0e:16:44:c6:99:73:50:5a:f4:12:
11:c8:f9:37:59:4a:92:75:41:03:64:73:4a:27:0b:bf:ae:76:
67:30:60:63:e5:60:12:37:72:4b:36:65:be:92:3a:eb:a3:0e:
ce:d2:27:5e:a9:96:07:de:12:9d:d4:af:c7:84:71:cc:1d:90:
b9:7d:e0:22:07:48:d8:63:d6:17:db:6d:6e:42:42:6d:54:e0:
eb:b9:db:55:0b:c2:79:3d:68:92:fd:9a:3a:8c:07:85:00:8d:
33:9b:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:43 2025 by rpki-client