Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: mEuFV3QOP+fQHBn43Tg+15kBeVzY1BInn3ETHVviykY=
Subject key identifier: 7C:B1:B3:B7:D9:E7:02:5A:FC:50:89:02:D6:FD:6E:54:4C:C7:91:2B
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 0194BC04D25B61F5E1BA935897E9B269E97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0A55
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: aKM7cTqonM2+s7J8lMVMyKV/YtuWD0dzqWhmX+uQX1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d2:5b:61:f5:e1:ba:93:58:97:e9:b2:69:e9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=7cb1b3b7d9e7025afc508902d6fd6e544cc7912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:e3:cb:e9:d8:39:d1:85:ba:f2:38:12:64:
90:59:f0:09:cc:44:6c:d8:ad:66:1c:f9:c5:df:84:
0e:70:34:c6:85:87:93:21:54:0c:d3:5c:78:0b:dd:
c8:e2:cf:8a:c1:68:19:b4:28:76:2e:ba:8a:a7:05:
0a:8d:75:f4:e8:f8:b5:28:1a:74:99:42:d3:df:6e:
fd:8a:23:b1:c1:c4:62:fd:68:b7:ad:54:f5:4a:3c:
b4:8e:68:bb:84:5c:8a:52:2f:04:85:a0:ef:ff:3a:
40:90:88:48:9f:1a:a3:9b:34:6c:0e:dd:63:41:2d:
55:18:50:18:cd:c8:5f:cb:6c:c7:29:06:8f:37:78:
f4:62:a2:e5:33:a8:6c:7d:be:9e:c8:38:0b:a6:11:
2c:44:3f:16:c7:ae:f4:d0:fb:c8:db:b8:a3:cf:9a:
ab:53:2b:92:11:22:7f:97:2d:12:0c:ee:7a:cd:5e:
d3:bf:52:63:63:85:b3:e9:8b:aa:c0:05:9c:ce:63:
6a:e1:b3:9a:f0:e1:ad:dd:cb:08:77:35:34:41:59:
ad:95:3a:8f:8c:46:32:a4:54:0b:f8:a3:af:8c:75:
82:26:04:fd:3a:79:02:e5:21:0d:48:e7:fe:28:2b:
a5:04:68:14:e6:cd:95:53:fe:8f:c2:09:c5:c0:d8:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:B3:B7:D9:E7:02:5A:FC:50:89:02:D6:FD:6E:54:4C:C7:91:2B
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:21:20:54:70:26:be:bb:d6:5a:53:26:00:dc:b0:30:f8:e6:
bd:f2:da:ab:15:84:f4:30:50:80:95:f1:77:b1:c0:ee:15:2e:
1e:2e:17:f2:09:19:96:be:1e:14:6a:3d:cc:c8:57:21:66:e6:
ef:e7:84:50:b4:a8:ef:53:9e:7c:00:18:45:50:fd:c0:cf:d2:
a0:b5:f6:15:b7:ad:b3:18:aa:cb:1b:1e:10:b9:80:a1:ff:31:
72:c9:69:69:0b:8a:b2:d7:f9:52:6d:75:a4:2e:8d:0f:89:07:
b2:08:37:ec:ff:04:35:4c:a0:b3:e9:a3:78:3b:da:fd:d4:0f:
ac:7e:93:d1:f7:c5:d3:89:e6:6d:e1:d2:91:18:69:4c:ba:2a:
8b:90:61:b4:7d:61:03:06:fc:39:a0:67:70:7a:60:4b:1a:66:
73:b6:33:2d:be:e1:8b:5f:c9:26:c3:04:a2:2d:be:76:03:ed:
af:3f:b2:7d:18:9c:5c:82:79:5d:d0:b5:0b:b1:53:5c:b6:9f:
4b:3a:2b:95:3c:60:c6:17:cf:f8:ac:e5:b9:7e:d3:09:f5:53:
1b:28:01:c7:6d:76:75:56:d5:41:a5:e5:8d:6f:31:a5:30:af:
07:aa:09:ce:53:73:91:5e:db:99:3e:70:69:6c:e8:95:e0:fa:
ce:1b:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:03 2025 by rpki-client