Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 6qP27PR0d7dFjWUx5uuksCYU7l5MZ74yG2ojNDLwaPg=
Subject key identifier: 65:5E:08:B4:78:74:41:7D:73:85:2D:EA:54:E2:8D:23:EF:8D:AD:3A
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 0194BCE0DCDA19D6F5403F12000AEEA4D40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: etO/ou7tNj5HYdyLoIU4zYhODv/rLXA7fhHPF62W4Kw=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:da:19:d6:f5:40:3f:12:00:0a:ee:a4:d4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=655e08b47874417d73852dea54e28d23ef8dad3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:2a:1a:24:1e:bf:fb:d0:a4:ee:e0:27:8f:
aa:f1:9c:6f:46:7a:6d:81:e6:0b:ce:ad:e4:70:b8:
1a:dc:9f:07:4a:6f:9e:a5:eb:9f:3c:48:24:7c:66:
24:ef:e0:db:41:38:fa:e6:a2:61:b7:ad:e5:10:05:
4d:ba:1e:b8:52:52:90:a4:eb:5d:11:48:b7:ef:07:
be:e5:09:68:ee:b1:41:c2:a6:ca:41:83:25:5a:8c:
80:1e:51:73:52:80:6c:f6:cc:17:a9:ff:6b:ff:09:
9a:44:15:bd:b1:22:15:2d:0b:36:fa:8b:e0:98:74:
99:b5:07:7b:1f:f1:7e:60:f7:7f:0f:dd:4d:47:55:
d3:ac:70:f4:7c:88:7d:86:4e:c4:80:51:88:4e:95:
db:19:3c:d0:cc:52:39:e1:99:f4:37:1a:05:2b:9f:
02:87:d1:fb:4b:da:2f:5a:7b:42:64:ea:cf:33:c1:
f8:b0:78:4b:49:79:73:e5:89:88:a6:7d:80:72:a4:
da:c0:b9:f1:60:7c:24:22:57:21:39:f9:dc:b1:ba:
16:66:d6:eb:8f:cf:22:74:4f:11:cd:b8:15:90:9f:
53:99:e8:6a:28:b8:27:cb:b3:eb:fc:70:27:f1:2c:
88:94:5f:c0:4c:0e:af:5c:04:77:7f:63:a7:5e:f8:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5E:08:B4:78:74:41:7D:73:85:2D:EA:54:E2:8D:23:EF:8D:AD:3A
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a3:a5:d0:e6:06:d4:a8:d7:ea:07:fb:5d:d0:04:f6:88:0a:
a9:aa:09:9a:fe:3d:d7:73:cf:3d:9f:14:5c:2b:08:42:9f:1a:
36:49:8c:21:78:e1:79:66:7c:2d:e7:90:1c:a5:91:7d:98:d1:
01:0a:cc:97:da:d4:ab:dc:00:6b:77:8f:9b:b5:71:fa:6c:66:
89:0c:a6:56:f1:c1:17:6c:cd:14:b2:7d:4b:c8:aa:28:7e:0f:
d0:46:74:1c:10:86:39:b9:20:54:50:e3:5b:79:75:2a:af:bb:
3c:48:e4:fd:36:a1:ea:97:3e:27:33:d4:73:dc:11:11:b1:fe:
8c:50:72:b4:0c:cd:ab:a2:b0:d3:27:2f:1d:c9:22:14:fa:f0:
57:51:7b:24:4b:51:30:7c:4a:7c:37:c9:14:73:ab:59:dd:3a:
87:aa:42:13:d8:2f:98:d1:a6:ab:68:e5:2c:ff:a8:e0:ba:bc:
7e:04:4e:8e:90:e8:e1:20:d3:2f:90:db:8f:49:90:a3:01:b5:
7b:50:e8:cc:e0:54:e1:4a:79:e6:9a:c8:a3:21:8b:63:5e:cb:
fa:ea:bf:c3:28:b9:b8:be:85:4c:8d:aa:2a:73:37:7a:08:a8:
1c:95:b0:04:80:8b:43:2a:71:22:9d:0d:8c:d5:96:9b:b6:13:
93:fd:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:49 2025 by rpki-client