Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: R6zP1iYNGC1tIAGhJBXrsYlPxwfYgYbeLW/VuQQbZgY=
Subject key identifier: 5B:A8:09:41:51:D3:FA:10:7A:55:D9:13:9B:9A:85:DF:CA:80:CC:8F
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 0194BBCDCCCEF86CFB8536D3AA124B76E49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 04AA
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: nvCV4orXBwkCxx9cHa5KANTyCwE.roa (hash: UYmf5tNY0RyuPAulCxJX/IA+maHZOZx5xFiCAM1bwuM=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: RC25fh6kIsdQvmkXLoXENNsDItaxWOW66E6lh6mLCaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:ce:f8:6c:fb:85:36:d3:aa:12:4b:76:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=5ba8094151d3fa107a55d9139b9a85dfca80cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:57:2a:be:9b:db:48:14:b1:8a:c5:74:6c:
9c:e6:91:f6:1a:11:bc:42:a3:f3:22:6a:e9:9a:0b:
d7:16:eb:27:5c:17:7d:48:4d:21:1e:71:ee:8d:f6:
bc:35:ac:74:9c:34:ff:49:47:ac:4f:0c:2d:d0:da:
2e:ff:3f:ab:6d:fd:b7:3a:e0:fd:27:cc:3e:f2:bb:
a2:92:05:dc:87:0a:f0:a7:ed:9f:07:5d:bf:bc:ad:
55:4b:8d:8b:00:8a:99:e0:f5:b8:f1:98:72:91:b6:
96:8d:bf:3c:31:67:01:b8:77:46:8d:72:7a:07:96:
46:19:83:7c:02:76:43:53:99:c4:99:bd:7a:e4:a0:
0f:b4:5f:12:0e:3a:6f:36:12:45:4c:49:d7:f7:fc:
32:6e:a9:fa:64:4c:da:1e:5d:5a:ea:81:60:65:5d:
1a:03:8e:14:0c:a6:38:c6:58:b7:52:d7:42:71:5d:
20:2c:c9:0e:39:23:f4:2c:71:e4:75:23:a9:d1:dc:
41:05:b6:c0:2c:b1:de:26:a7:a2:70:2e:53:94:55:
06:70:49:71:7f:7b:df:dd:55:4e:31:79:5c:44:da:
5f:04:a1:c2:9a:5b:3a:f2:dc:3e:ef:f6:17:51:95:
be:a4:bd:e8:f9:f5:94:cd:0f:ea:9e:e9:94:e2:a4:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:09:41:51:D3:FA:10:7A:55:D9:13:9B:9A:85:DF:CA:80:CC:8F
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e7:6e:3f:3d:96:0b:4c:64:75:aa:ca:51:47:4e:dc:2b:a3:
48:ab:07:33:a5:11:80:07:12:cd:dd:68:14:c9:0c:96:db:5d:
b9:ec:ad:3d:03:e1:ae:4f:b9:2a:06:63:4f:fc:4f:9e:fd:b5:
1e:f7:be:64:01:f1:57:cf:df:83:2f:01:53:d8:50:50:88:93:
af:79:ea:0d:23:04:19:a8:30:de:7c:dc:f0:21:da:35:4d:cd:
b2:df:89:15:2c:c8:f5:c6:8a:10:53:5c:e4:9a:24:c6:d3:f9:
c6:e7:33:41:48:26:05:fa:d6:13:bf:ba:a2:a8:0b:32:eb:13:
31:fc:c7:24:04:de:af:40:92:76:9b:60:44:e1:02:16:0c:b5:
4f:b2:20:b0:94:46:24:59:0b:2a:6a:2a:8e:95:a0:ce:d3:49:
9e:d8:7e:f9:b5:e8:a6:98:09:f6:69:9e:11:e2:7d:52:ba:34:
be:08:ab:4b:4d:1d:b3:ee:d3:c0:3c:5d:4a:bd:aa:6f:74:a0:
35:ce:2e:3e:b0:03:17:97:7e:a4:e9:01:4c:8b:76:c0:4f:dc:
8f:c9:09:a4:6f:0f:09:12:a7:fd:13:66:2c:55:bc:84:d1:e8:
5e:2b:90:ce:b4:dc:63:c2:22:cc:f6:00:57:34:ee:96:f3:ab:
a9:84:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:38 2025 by rpki-client