Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: StrXk5/zGP3CG54EdKZzFAXMqgGZiZlrZ0TsdTxdX6Q=
Subject key identifier: 1A:C6:47:61:D0:72:AD:32:FE:01:5E:5F:3D:E9:6A:D8:FB:63:CD:7F
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 0194BD175EFD5FD296A7EB4411C28CE430B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:12 +0000
Manifest this update: Fri 31 Jan 2025 16:00:12 +0000
Manifest next update: Sat 01 Feb 2025 16:00:12 +0000
Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=)
2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: +dqGjDvuQvWljQMaYriSNFB9Yv4ZyFSvEpP4G651koo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5e:fd:5f:d2:96:a7:eb:44:11:c2:8c:e4:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Jan 31 16:00:12 2025 GMT
Not After : Feb 1 16:00:12 2025 GMT
Subject: CN=1ac64761d072ad32fe015e5f3de96ad8fb63cd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:0c:74:6f:9e:95:60:cd:25:c9:09:32:70:
98:04:ae:cd:88:20:db:f3:22:f5:8d:e5:c0:9b:9e:
4b:69:cc:04:f3:58:f5:94:24:6e:d9:2d:ad:54:fe:
2f:4d:40:d4:e2:a5:11:3f:6b:69:a9:6a:b8:4c:5e:
13:e8:65:81:a4:24:33:0b:51:a9:6c:f0:7d:e5:54:
61:9d:61:ab:ba:96:2e:c3:c8:d2:8d:ff:c2:e9:2e:
c9:c2:fe:89:0c:c7:83:ba:60:24:fc:a6:f7:27:eb:
93:09:05:58:a7:b6:4f:4d:0e:2f:78:51:0d:8b:cc:
35:16:ab:1c:32:cb:4d:49:63:11:0d:d1:42:3b:ec:
47:d2:ab:1b:19:5c:27:6f:ab:83:a6:90:45:91:f7:
64:cf:d5:d8:32:b3:8a:17:50:87:0c:a6:13:a2:1b:
48:ea:f1:5d:ba:fc:ca:28:dd:4f:b3:8d:b5:dc:c3:
85:3a:e2:59:fb:c7:21:91:76:77:eb:59:e2:d7:27:
27:ba:96:41:f6:75:1c:8a:d2:63:1c:94:17:f5:a1:
32:d9:59:9c:20:ce:c0:ce:2a:33:bb:3a:a2:06:71:
9f:7c:00:1e:27:37:e0:d9:95:33:ab:d7:35:44:53:
67:23:a1:55:36:ca:c1:bc:38:ef:ec:6c:aa:42:2f:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:47:61:D0:72:AD:32:FE:01:5E:5F:3D:E9:6A:D8:FB:63:CD:7F
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:99:c9:5a:9c:e3:b8:50:32:b2:40:c4:df:25:ec:1e:9d:c6:
84:c7:a2:14:f6:2a:e3:3a:74:c0:68:75:46:12:60:67:6a:3b:
fc:3e:ea:de:6e:be:36:55:db:60:17:6a:51:bf:76:37:03:00:
27:62:d3:7e:cf:97:26:70:de:c5:b5:43:79:ee:4a:75:a2:a3:
9a:8a:3b:b5:aa:27:26:8e:c4:05:4b:54:e2:7e:26:09:c4:0e:
6e:37:31:65:3f:5f:45:a4:e9:3b:0d:17:74:57:47:2b:f2:52:
b0:09:c1:f0:72:4b:ab:9f:30:d8:79:11:5a:9a:db:2b:b5:e1:
66:04:82:bd:d3:8a:d4:fe:75:86:ac:26:1d:c0:9b:43:71:8b:
d6:48:3a:b0:ee:67:93:bf:63:ef:c9:f9:ea:2e:9a:66:83:5d:
78:82:cc:18:99:ca:3b:7a:77:a0:29:fe:fc:02:ac:52:a3:ff:
26:30:af:34:0a:ca:50:08:32:3a:bb:74:c2:59:f8:11:f2:a2:
e5:03:0b:28:27:09:18:34:e7:82:fc:57:ed:11:50:29:6f:78:
0b:30:8d:fa:01:1d:25:da:c7:90:d3:24:5f:81:5d:3d:03:f7:
47:27:fd:c2:3b:38:18:98:4a:08:45:52:81:3f:66:54:a8:35:
06:d6:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client