Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: khKcdUd9/tlv7fnzwdml8dp0A43V5WzKOgaskXda1d4=
Subject key identifier: 70:35:59:F7:25:EE:DA:60:62:0A:20:BD:AA:6B:0C:48:FC:CE:A1:12
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 0194BC731092275D4E0851A60C2C22CAF112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1204
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: eKBm3+DVL8OzYJsK1zzG7gg3QymqFbAoF8kINScFIh0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:10:92:27:5d:4e:08:51:a6:0c:2c:22:ca:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=703559f725eeda60620a20bdaa6b0c48fccea112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:22:1f:a6:da:9a:df:d0:50:17:f2:1b:e4:
a7:f1:9f:d5:32:1f:fa:28:90:9b:82:dc:2e:2e:48:
5e:bc:78:9a:e2:ae:0a:92:8e:d8:8f:81:66:5b:35:
b8:60:d7:89:8a:39:03:45:62:d6:11:50:62:7c:23:
e5:34:e9:1a:22:4d:aa:ad:62:c0:74:61:b3:5f:df:
92:ad:a1:bb:08:02:8a:3e:48:78:99:ea:da:9b:0a:
1c:1f:f5:77:21:85:ab:b1:97:27:d4:d3:96:ba:b4:
ce:7e:ab:32:2d:50:5b:85:71:29:00:49:db:16:87:
8a:b0:1a:24:e0:b7:2f:62:ba:15:4f:4a:ac:39:2f:
54:e1:55:61:5c:0d:6c:d6:79:8d:50:46:3d:df:f2:
d4:5d:63:92:1c:95:17:94:1b:ee:68:25:5a:d6:19:
a8:06:9e:f4:7d:5d:ce:42:6b:77:ba:c3:ea:37:ae:
59:09:0e:36:e0:83:09:62:0c:03:ea:b6:c4:67:d0:
f4:d4:91:ed:4e:17:b2:c4:65:b2:ed:18:41:61:d2:
fe:06:7a:61:d6:1a:4c:e5:ac:1f:ee:81:37:2e:df:
92:e4:f2:5c:38:be:31:6c:d7:07:2e:68:6d:ab:04:
60:b4:cf:57:22:3a:8b:70:62:c2:93:c8:49:95:9b:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:59:F7:25:EE:DA:60:62:0A:20:BD:AA:6B:0C:48:FC:CE:A1:12
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:2a:63:db:13:a4:58:e0:ab:17:46:68:e2:4a:4a:09:c8:
ea:59:72:60:d2:d1:78:ab:b6:14:3b:bd:f5:8b:ef:26:57:2e:
dc:d6:1b:e9:8a:f5:06:15:e5:25:ff:a8:50:07:9d:4c:fd:cb:
e8:11:e9:7e:b3:5f:7f:ba:77:c1:16:ea:67:c5:62:a1:24:49:
29:c0:54:f5:62:3d:7e:da:cf:37:07:05:0a:44:89:a5:a0:e7:
20:41:b5:6e:08:88:ba:b6:7f:8c:8b:5f:49:e0:41:61:f1:b0:
12:6a:b0:37:bc:f9:6a:45:cc:1a:36:60:f0:0a:47:cf:b1:f0:
50:c2:b7:df:6d:44:cf:4e:db:30:00:78:13:5c:09:cc:9b:53:
16:ce:50:84:27:30:54:36:fc:c4:d5:7d:57:43:7f:d2:42:9e:
52:85:36:dd:49:73:eb:8b:b6:bc:f2:a0:23:68:15:a5:53:d3:
86:d0:17:24:52:53:5c:f3:56:f9:6c:27:ce:74:f5:11:fc:f5:
a0:86:cd:1c:55:76:34:dd:00:a7:5c:80:5b:1c:e9:b3:e7:4e:
6f:1e:ba:33:df:79:b7:74:2a:3a:94:ee:cc:e5:ff:41:d4:1f:
7d:62:eb:3d:31:86:f4:c0:f4:e9:2a:ac:67:79:77:b5:61:1d:
99:3e:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client