Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: mp/Fesb53yhrVfxo5sltlB6lRA8SEmF7tXKSV13FW0I=
Subject key identifier: A0:CC:8B:7B:F1:C3:82:4D:2A:E1:81:CB:9E:5D:B8:CD:97:12:22:FC
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 0194BC3BCA2833151DD46B2F1FAE1E775235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: WdzqPj7W2PJ5mepcU4zh0Q9eFLx8wjL9/Syg+pLXfjQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ca:28:33:15:1d:d4:6b:2f:1f:ae:1e:77:52:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=a0cc8b7bf1c3824d2ae181cb9e5db8cd971222fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:c1:8d:42:db:81:9a:a7:b1:70:16:11:fb:
2d:b3:6a:6d:9e:28:33:0c:33:16:7a:ee:d9:5e:e0:
fc:ee:dc:b7:cb:e6:1b:d4:a7:54:4a:dc:69:6d:ea:
ba:05:9d:a6:f3:97:8e:c6:66:c9:bf:a2:fd:69:f3:
d5:1d:ac:e8:39:e0:7f:1b:1b:c8:39:18:2a:14:3b:
c0:97:ea:bc:f9:57:23:cb:f2:91:75:ed:19:51:f4:
88:74:57:df:25:c4:e8:05:36:38:d2:05:cf:75:68:
09:9b:87:0d:43:af:d7:cb:69:6b:51:61:7d:ff:c9:
3d:89:5c:8e:d9:64:a6:94:36:1e:3b:ff:cd:dc:72:
1a:7f:67:13:15:f5:87:58:37:63:74:4f:59:e6:df:
6e:5b:44:4e:11:f1:71:8a:7f:6a:a9:d8:5c:f1:9b:
42:39:5e:a8:d1:5a:82:6c:e5:f3:cd:0f:14:5f:37:
de:1f:9c:77:a0:77:4b:96:97:c4:2f:1c:05:ef:33:
9c:a8:ad:3e:fd:50:13:e5:45:29:3d:d0:12:95:da:
19:35:68:ec:a4:4a:1b:2e:01:62:cf:23:98:3f:b2:
65:b7:a5:eb:f9:d5:4b:52:ca:40:2c:88:73:f3:e1:
d9:d1:06:14:5e:8f:79:04:a2:6c:0b:d2:56:d5:2e:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:8B:7B:F1:C3:82:4D:2A:E1:81:CB:9E:5D:B8:CD:97:12:22:FC
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5d:e9:0c:6a:f4:4c:8a:e5:d2:a8:cf:d9:90:8a:f9:d5:33:
06:dc:99:3a:b1:2d:39:6f:e3:da:49:84:16:92:bd:c4:35:c5:
d1:35:f0:2c:e9:18:d6:61:b7:ac:68:16:31:0c:02:bc:09:b8:
dc:63:a3:2b:6c:4b:ba:8f:49:9e:58:1e:fb:24:4b:ef:db:ba:
4b:36:f5:77:58:97:de:03:4e:c8:87:b7:07:48:c1:02:ee:a8:
c7:5c:d6:55:67:9e:3a:d6:1b:c5:f1:ff:ab:b0:22:e9:c7:ca:
b9:e3:62:54:00:33:88:94:c6:b2:da:5d:6a:ce:19:68:d3:67:
7e:ee:67:0f:82:29:e0:01:77:fc:7a:7e:1a:7a:1e:1c:74:96:
28:92:78:6e:7f:e0:42:d5:1a:8a:a0:11:1d:20:5a:6e:0f:10:
74:20:e6:42:8e:c4:95:d7:22:bf:65:ff:18:2b:d8:ce:03:f7:
05:ac:dd:1e:1e:bf:1a:ab:a8:e8:8c:66:a6:88:fe:f4:6c:41:
26:34:2b:92:b7:2b:58:56:d4:08:70:e6:25:9c:92:1e:87:b9:
55:04:ff:26:5a:02:54:d2:7d:56:01:80:78:3d:24:1f:b1:44:
80:fd:48:ab:bd:ad:61:c1:27:55:64:e8:96:ec:9c:cc:b4:8f:
94:1e:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:19 2025 by rpki-client