Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: YgYfSQJCCmdtv8ZxcOfHffrGxFP7ZcQ/o455w3S09FY=
Subject key identifier: BB:F9:B0:0C:D1:F3:CD:46:D7:88:F7:8A:17:82:CC:FC:B7:3B:1F:1C
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0194BC04EA6122B3284E95C2644665B8FDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 01B5
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: d9Z4DwpxE+SjQeIPEsoJu/zE1+CUOpR7nsX/TM5qm3I=)
2: rIOjntCgXCMEFBCmZfSli4kv3C4.roa (hash: Sob7vOHpDIg5S5aLpP/Jh9rqHAHaROOpp1y2KA8hGzc=)
3: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ea:61:22:b3:28:4e:95:c2:64:46:65:b8:fd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=bbf9b00cd1f3cd46d788f78a1782ccfcb73b1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:99:e9:c4:ee:72:d8:d8:be:d3:75:f4:5d:
a7:09:ad:ed:21:fe:0f:82:8b:65:5e:9a:8a:07:86:
8f:37:b9:62:e6:af:21:f2:22:06:fa:37:fa:c6:30:
9f:97:1c:c0:fe:98:69:dc:8b:57:2a:52:cf:52:20:
25:13:d8:23:ff:68:23:f2:3a:20:2b:0d:11:4e:22:
09:22:b9:54:85:58:bd:12:02:28:8a:21:cf:97:30:
4b:07:16:da:9e:b2:92:32:7f:9b:97:64:1e:29:73:
f1:f2:79:bd:f2:ca:e1:11:ae:16:de:4d:23:9f:85:
50:ab:18:78:f5:3d:70:f9:ac:b6:96:55:04:70:e7:
f6:e9:41:0e:7a:f7:5f:20:e1:07:84:0f:26:05:43:
d4:5e:53:c5:70:b9:13:11:15:5d:bf:3e:66:ac:15:
23:d9:fd:a7:11:0b:ac:69:67:9d:ca:aa:a1:92:69:
98:52:82:73:79:0a:2f:ca:ad:6a:1f:ed:0d:81:15:
eb:8a:e7:61:8b:f3:e8:6d:82:2d:2a:eb:a1:54:2f:
e7:d7:4c:55:2a:f6:41:f1:05:98:32:21:4b:a1:6d:
a7:c7:c9:fe:d7:1a:41:a2:0e:2e:05:8a:4f:cf:71:
0f:dd:41:aa:89:7d:97:1e:78:ad:99:b0:ac:c2:78:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:B0:0C:D1:F3:CD:46:D7:88:F7:8A:17:82:CC:FC:B7:3B:1F:1C
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:67:e0:3d:66:f1:5f:bc:43:5f:7c:9b:a8:45:64:16:e9:dd:
c1:3f:94:09:30:a6:d4:3e:bb:47:99:cb:53:9a:c3:2e:2d:ba:
e5:94:e4:b9:64:98:ba:14:bd:6e:11:24:4e:d9:e6:74:fc:b9:
d6:69:80:86:89:33:b8:11:7d:f4:1d:8e:df:96:58:2c:69:e8:
47:2a:1f:cb:d1:87:e9:ee:53:2d:d2:e8:e3:24:22:e6:ab:57:
24:c1:de:89:70:4a:55:07:8d:10:14:b1:cf:b0:f8:de:e4:c4:
54:0c:fa:dd:8d:6f:0a:53:c0:6c:2d:12:70:42:39:fa:0d:1d:
34:97:42:b1:ac:20:a7:5c:2d:a6:d9:0c:1a:d5:34:f3:a8:da:
8c:94:be:6e:cf:33:32:43:bd:8a:d6:e4:33:86:8f:52:59:93:
fe:0b:c4:0a:a0:ac:81:38:03:b6:17:5f:66:c0:9b:fe:ef:d5:
63:e0:80:a8:8b:1e:04:c1:a4:72:1a:0f:1b:ab:60:57:89:f9:
41:dc:db:ad:24:80:f7:d7:21:cd:79:41:d9:5e:f6:0c:b3:04:
db:a5:0f:65:b0:6b:14:42:98:6b:6e:95:1d:45:be:86:1f:52:
54:e8:61:02:97:01:52:3f:5f:94:40:1d:38:d2:66:65:e9:5c:
65:dc:75:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:15 2025 by rpki-client