Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: Uduo2ryS+Fh486JWJjhkcZbucHdtpji1rZmHB8Iiji0=
Subject key identifier: F6:2D:A6:24:EF:09:C7:D3:AE:B0:73:96:05:A6:3F:12:6F:EB:E6:84
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 0194BD4E7A42DED481FC56B7ED985BCEA3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 11D6
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: 1YLPpt0xVKGXawXBdOGKM6janbmmCl0HHMzD90YTC10=)
2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7a:42:de:d4:81:fc:56:b7:ed:98:5b:ce:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=f62da624ef09c7d3aeb0739605a63f126febe684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:c8:9f:83:e3:a0:50:96:5a:8a:6c:a6:f9:
0c:fc:8d:47:ba:d1:11:ea:fe:87:d6:b9:1f:ac:f5:
8f:43:01:b7:06:14:3f:20:c6:4a:05:fd:cd:63:1b:
0d:f9:4e:c5:68:7f:be:00:e6:8f:79:3a:f3:50:86:
d2:38:6e:04:a5:79:ca:56:38:9d:99:17:0f:3f:b6:
8a:0b:87:d6:86:55:9a:b5:3b:db:16:9b:b0:30:a9:
72:51:7a:f1:c0:2f:f3:b5:3b:d5:96:20:28:7b:50:
1d:23:13:a3:36:64:c9:57:f5:10:77:47:70:ed:f0:
e7:2d:d8:f0:de:d9:93:23:fa:ce:ce:91:77:ab:88:
c5:4d:20:a8:4c:c7:c8:64:ad:bf:5d:bf:74:27:60:
35:07:e4:f3:1d:e0:3b:21:2d:97:e7:e6:0d:0a:07:
52:f5:32:d5:92:8b:f7:da:9b:a5:75:bf:25:ca:cb:
f5:be:2b:fb:95:c6:d0:37:d9:1a:bc:b2:bb:16:b8:
5d:3a:5c:3d:97:a3:da:a2:46:e3:eb:37:0b:7b:b8:
61:c6:fc:dd:6e:51:59:7e:e5:00:0f:56:4f:87:43:
fa:b1:e7:37:63:51:65:27:6d:70:79:06:78:bc:71:
36:0d:10:c5:b9:88:41:0b:f9:2b:60:31:77:89:07:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:A6:24:EF:09:C7:D3:AE:B0:73:96:05:A6:3F:12:6F:EB:E6:84
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:31:d9:03:86:f3:60:13:85:3b:db:dd:7f:fd:c6:76:f5:
4f:fa:5a:d8:67:46:2c:5a:b9:aa:c2:41:8b:43:01:7f:ef:69:
55:d4:49:b5:6c:71:7b:93:24:ab:65:af:df:e5:96:31:ab:1b:
76:80:00:4a:15:eb:a1:7c:36:81:6b:a1:b1:b9:a0:83:3e:ac:
e0:e3:20:2e:36:0e:7f:5a:54:0c:68:b8:ae:da:1a:4d:c3:09:
ba:8a:40:91:64:f2:d8:21:55:78:53:d6:f1:8e:ab:14:d9:bd:
b7:32:5c:35:f2:95:80:ce:7d:20:9e:f6:56:de:38:18:b0:87:
f0:c6:4e:21:a7:be:19:56:8b:6f:3e:d7:50:e7:14:b1:78:c5:
dc:56:62:41:f1:51:e8:36:d9:ff:bf:ed:a3:b9:9d:73:54:ec:
ac:1a:a6:4f:16:5d:3a:5b:f5:6c:20:62:1e:a0:84:cf:55:7c:
81:53:6a:22:fa:bb:99:ed:f0:c9:31:3a:30:48:f0:1e:65:fb:
5b:44:0a:bf:9f:d4:d0:c3:20:a8:62:af:8f:5b:ec:44:9c:eb:
36:94:d8:da:c6:4b:b6:95:a0:8e:3c:0d:49:a8:3a:08:d0:77:
77:b0:87:d2:9b:f7:80:a8:16:25:c8:3f:66:cc:e3:02:9b:81:
f9:4e:11:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:11 2025 by rpki-client