Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
File: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json)
Hash identifier: S3qALmHqtKaB99BmkAO9Wz/KZPr/xHCoBYiHZ9ShiSc=
Subject key identifier: 36:E1:3A:5B:92:6A:11:2B:61:2F:C9:6D:8B:12:FF:8F:B6:83:28:B0
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial: 0194BC3C6ED7A8189093ACD0F04BB4C6377B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
Manifest number: 035F
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: SzmhUfWJuFhyT5TGLouRAgBLoIM.roa (hash: Qov0MeRXvHn6kZBTJQaoc48+Yw0xT2B5xVOV+b6Nifs=)
2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: mD21IVPepwJAdGeYM9hNLIdp5/LJ8Pz1wWOjyxMG3Q0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:d7:a8:18:90:93:ac:d0:f0:4b:b4:c6:37:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=36e13a5b926a112b612fc96d8b12ff8fb68328b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:7f:e7:46:ad:a9:d7:01:88:0e:ad:1e:2d:
e7:6a:f9:8f:9c:bb:6d:bf:e7:72:58:39:25:65:a7:
06:4b:97:32:21:ba:6d:5e:38:2f:a4:d4:c7:3b:9f:
41:2d:97:fc:af:76:dc:d7:12:0a:36:73:a1:cf:9f:
81:d7:be:f6:e2:50:48:4e:a6:2c:5b:24:36:5d:0d:
87:c2:66:62:56:be:81:4e:7d:40:98:ab:5e:7f:45:
17:df:10:c0:ff:dc:ab:c9:2a:24:9a:f5:18:f0:0a:
48:1f:f3:f2:f6:87:2a:c6:bb:2a:15:31:bd:41:0e:
46:6e:54:84:8a:3d:02:f4:7a:5d:7d:4c:07:a1:c9:
9a:88:4f:d7:d4:1d:f6:86:18:0e:a1:08:65:45:1e:
81:6e:2f:42:f1:e1:c6:09:c2:f1:36:ac:72:11:92:
17:84:5a:ca:f4:7a:47:b6:75:30:4e:89:28:2c:5b:
c5:37:83:1b:c6:cd:98:08:74:f5:21:3a:c9:10:0d:
f5:23:89:14:71:6a:d7:53:96:52:fb:d6:cd:40:c5:
86:f8:29:fd:8e:a9:9a:24:b4:18:69:95:48:9f:8f:
8c:29:eb:9c:e2:38:cf:04:ff:68:db:d7:96:5a:8d:
c6:ce:b6:4b:d4:bb:19:a6:15:11:81:1f:49:50:f1:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E1:3A:5B:92:6A:11:2B:61:2F:C9:6D:8B:12:FF:8F:B6:83:28:B0
X509v3 Authority Key Identifier:
keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bf:17:03:97:69:d9:08:8f:58:dd:de:f0:85:cc:b8:e1:5e:
58:f0:c2:24:fe:d2:d6:f6:6f:d4:ae:7b:d8:b9:cb:b8:e6:d4:
97:10:93:c5:59:75:cc:bb:38:37:02:ba:e1:ae:ca:e0:ab:d3:
44:65:61:e8:32:fc:5d:44:82:20:74:ff:93:70:94:c0:0c:0a:
74:fe:8a:e6:d5:86:8a:1f:19:23:1e:21:02:94:5e:e0:6b:f1:
b9:d5:df:ad:dd:77:4b:ff:f4:f0:12:6a:7a:d3:6f:02:60:6b:
71:85:10:11:e4:37:e4:a5:cb:3a:7c:22:22:ea:64:b9:89:74:
a6:fa:91:95:bd:f6:01:08:0c:ad:39:b7:da:78:81:5c:30:90:
35:4e:87:92:10:60:c9:f0:aa:54:c5:52:8d:51:77:01:e9:dd:
55:5f:63:87:e0:6d:81:9c:0b:1d:d7:7a:1e:16:70:6a:2b:62:
cb:24:a3:1a:ed:c0:5f:f7:e5:f9:37:ed:4e:f4:64:4d:53:c2:
8c:11:af:bd:21:cf:d0:24:41:7a:38:27:14:7a:bb:15:ea:97:
59:61:be:b7:e8:f3:4f:c9:9e:6f:e2:23:18:69:88:a2:ed:7b:
01:50:2c:0d:f7:d6:39:78:3c:b1:3b:8b:fa:e4:93:e9:69:70:
57:0f:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:13 2025 by rpki-client