Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: 5GCj8mf21Au/nZsHiBH9zcgyzW3d97+PtecQvOp5WpU=
Subject key identifier: 36:A3:2B:68:2B:29:1D:05:54:30:F7:00:ED:F5:55:7B:C0:A7:5F:84
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0194BCAA08C24441BAF05C6953486C90C59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: XWiP7NaguPU2heVBLZ8VS5eRZH2jyNX1eoPF44JsHgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:c2:44:41:ba:f0:5c:69:53:48:6c:90:c5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=36a32b682b291d055430f700edf5557bc0a75f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:56:11:22:a4:c8:49:c0:c5:63:69:29:24:
62:7e:cd:af:6e:02:46:89:29:fd:2e:63:39:58:1c:
85:0f:33:9b:4c:d1:14:3d:00:48:18:e6:62:22:95:
a0:a6:c2:a7:fa:43:bd:28:e4:26:2a:6e:72:11:17:
fd:55:ed:ce:4b:ad:c7:77:46:8f:a8:e8:68:81:ba:
e5:f6:c1:c5:e2:94:56:8f:93:27:4e:39:cc:e7:e5:
a6:af:a8:e8:23:59:64:ca:23:3e:4f:e6:92:dd:7f:
eb:98:3e:45:71:f3:bc:16:a2:b3:ea:40:65:a5:63:
1b:9e:8c:cf:2d:39:38:14:2c:50:28:95:af:08:66:
04:03:e7:53:f6:7c:61:de:77:a1:91:d8:2d:12:89:
59:41:eb:38:80:fc:ae:54:19:9b:2b:ae:bb:1d:b5:
c9:7a:18:70:67:49:22:77:b6:bf:73:3c:e1:3e:90:
89:6d:bb:fe:c2:4c:28:f3:25:7f:6e:7f:58:0a:e1:
12:63:95:b2:45:99:e8:d6:48:2c:06:dd:d7:ae:64:
01:3c:60:e6:98:6f:ac:ca:45:d3:c0:24:46:85:ee:
c1:17:fc:01:cd:b9:3a:44:ab:09:1f:1e:c1:09:4e:
df:67:07:0c:ae:1e:61:16:28:5e:6e:34:e4:fd:5f:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:2B:68:2B:29:1D:05:54:30:F7:00:ED:F5:55:7B:C0:A7:5F:84
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:92:da:b4:2f:72:bb:63:6c:15:fe:0f:b4:e3:2d:22:00:ff:
a7:a0:bf:f4:bb:0d:ff:dd:d2:0f:69:92:ee:43:78:03:da:92:
00:44:bb:53:7b:13:79:94:fd:3c:e3:11:3b:91:8b:1e:44:3c:
b8:fe:9a:d3:24:17:e5:9d:25:fa:4f:ba:cf:4d:40:55:f2:bb:
31:2e:4b:96:a7:6a:3f:40:71:ff:f9:1c:08:88:34:ca:bd:f3:
03:b8:08:10:63:9c:f1:e0:43:ef:c1:16:9b:23:da:c4:d7:9a:
73:ef:a3:db:1f:e1:eb:81:84:58:4a:30:4f:ce:68:56:b0:88:
cf:55:1f:db:e2:3e:a0:6d:4d:2f:6c:5b:70:85:d8:04:dc:13:
97:b4:8c:4b:3e:32:bd:85:8a:54:45:a7:16:be:c0:69:b2:e6:
2b:41:b4:28:0c:e0:aa:50:75:3a:f0:c0:2e:ff:e9:a1:f1:53:
9f:e9:ec:ce:cc:db:bf:ce:45:c9:5e:a5:c2:77:07:04:76:c0:
f5:84:7f:b0:07:8c:2d:56:e4:2b:3e:82:9a:6d:90:f0:86:d1:
1c:5a:5b:39:55:8c:7d:f9:c7:65:34:44:76:3b:cd:88:99:96:
0a:2b:2f:61:54:95:e4:dd:68:aa:ef:e0:1f:6a:4c:5a:1a:9c:
18:5c:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client