Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: aeBGtgDuLxmxWiQjPPUZGnB2KP5k9TApBzDd88ELnPk=
Subject key identifier: C3:77:61:3D:41:39:88:5B:89:DA:EF:79:47:36:16:8B:2C:C8:D3:8C
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0194BD17F33E77F4CAA690FA089B6472BD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: 95gfeORrzFU1baOm9FNRF4z-Awc.roa (hash: yu0lodJztF5C/Epqr7ypdXxVzEpgYNXlQQQ9uDXoMnU=)
2: bZrVS8WuW53ASxE4okDBpBOCwh0.roa (hash: w2PEwykH39C/1+UmhN82v6h+HaE/QVQsyCE9ab/AZNI=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: ABqGIT3pz4AimnQxzLN+ZY/BPfwzDz4u3dMGhdfi510=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:3e:77:f4:ca:a6:90:fa:08:9b:64:72:bd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=c377613d4139885b89daef794736168b2cc8d38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:02:72:db:fa:f7:74:68:8b:1c:85:69:61:
4e:bb:27:11:49:06:de:f3:2e:9e:3e:40:69:98:f9:
4e:72:5a:15:aa:30:e0:d4:91:1f:bb:9f:93:ea:c8:
43:9f:35:12:81:f0:f2:1e:0e:de:b6:f6:dc:63:57:
3f:18:0c:40:09:64:3d:07:d2:2b:a6:02:03:e1:0d:
74:6a:96:6e:99:27:9d:a0:cf:5a:61:19:a2:e1:bb:
72:af:d5:80:fe:5b:64:b3:d6:6e:fa:2a:d5:c6:47:
33:73:98:a8:d9:22:3a:07:d4:0c:90:d3:87:ec:45:
9b:65:ad:11:c0:fc:40:d3:2c:ee:04:07:4e:29:69:
46:51:ab:86:94:00:d3:37:fc:13:b5:08:9a:11:7c:
00:d8:19:bf:5a:eb:5e:2b:5e:f6:6f:cd:83:86:89:
1c:93:a4:1a:39:1d:1e:38:20:7f:cb:76:73:03:32:
1c:49:c3:aa:0d:ba:79:a9:a2:38:62:7b:b8:95:ea:
d4:52:60:98:22:be:35:f8:35:38:e9:29:dc:3d:fb:
73:23:1e:72:c5:62:bd:f8:de:62:10:01:50:44:1a:
5c:cb:65:48:c7:ff:d1:06:a2:d8:94:e7:1e:ca:1e:
67:07:a4:3d:4d:c4:c5:33:f1:e2:d4:d3:b2:d5:26:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:61:3D:41:39:88:5B:89:DA:EF:79:47:36:16:8B:2C:C8:D3:8C
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:ad:77:47:d6:87:59:c6:e2:11:57:c2:d0:4d:88:75:83:
71:6d:c8:03:a3:a4:06:bc:52:b7:a1:d1:fe:c9:6b:da:d1:a9:
9b:9b:96:36:c0:ee:6b:83:81:9a:01:bf:f1:83:9d:89:83:3d:
4a:01:e4:46:de:42:7d:44:09:44:dc:6f:fd:15:ec:77:db:ff:
37:73:56:7e:09:68:2a:ac:59:0a:66:b6:94:6f:a3:1e:d9:e9:
13:ad:84:dd:76:0d:60:c7:9e:8b:ba:8d:d7:e6:9c:fb:e4:0d:
c7:c6:a8:94:e0:94:67:f5:d1:01:ec:09:e9:36:d2:ad:ca:54:
f5:f8:2f:9d:59:a1:b2:b0:1e:66:2b:01:ed:8c:06:eb:76:6e:
cf:82:d6:ed:10:4c:72:e6:8b:04:fc:cc:ca:5d:75:67:f7:c7:
91:6d:a5:dc:30:ce:e2:e6:12:a4:af:9a:54:57:9b:7b:29:a4:
c1:4b:25:a4:37:70:27:51:e4:95:9d:23:20:13:9e:42:52:16:
78:fc:e3:ce:e2:ba:f2:4b:03:c6:39:3d:a1:54:af:6e:cc:f9:
ec:b9:05:87:ed:2d:6e:6a:e3:de:3a:aa:a2:ff:1c:9a:34:1b:
ad:72:f9:09:b0:c4:df:e7:9a:74:9d:60:dd:23:b2:d1:13:53:
08:69:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client