Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: TvuGFrCFFM5tbMwRO79w6zD3byxTCswwwhdMFkXnL7g=
Subject key identifier: 1C:30:ED:08:D9:42:F1:02:90:65:61:7F:85:38:7D:A1:D5:C5:10:0A
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0194BC3C403F8FEA04B9BDCE3224F4883353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 13AB
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: FA5kIU24hM_qMfpPw3H0FEFE5Rg.roa (hash: h787qQINJkY9AEcKodXyVYw/H10um2LVQVfl/N4LsrI=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: AA3HX+x2wkR8s9jeA0ZCOLl4tAzaXRQh0hLHSU5OU54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:40:3f:8f:ea:04:b9:bd:ce:32:24:f4:88:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=1c30ed08d942f1029065617f85387da1d5c5100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:72:f8:e3:48:22:9f:e4:4c:28:5c:73:97:
32:74:8d:71:f7:ee:53:48:22:41:c3:52:5e:cb:75:
5e:b2:a6:09:33:7a:71:60:c2:68:02:a3:35:46:ad:
9b:16:c0:e0:11:e2:33:ee:a5:96:30:6b:dc:bb:ee:
8d:3c:81:f8:33:60:3b:a9:e8:c2:97:5c:5c:56:d0:
f5:09:f0:9b:b3:0d:a1:83:fd:6b:d2:74:05:de:06:
c3:9f:9a:0b:32:ba:94:26:86:55:92:24:77:65:5a:
04:56:ab:9a:6a:50:21:64:57:0f:33:0c:20:0f:96:
a5:8f:6f:21:55:21:aa:43:08:83:d0:56:bc:10:f3:
89:5d:08:50:9b:e2:57:65:62:f9:ef:42:e7:11:e3:
44:d7:2c:67:1c:18:6d:f3:1e:a8:9e:40:c3:8a:0e:
31:f4:86:a9:9e:56:40:16:4d:3e:4a:37:c6:2a:ba:
b8:61:a9:d9:85:36:43:93:f4:be:0a:a7:0a:2b:12:
6e:26:7d:1e:b9:44:6c:3e:25:92:b6:75:8d:a2:36:
28:e2:df:e1:a1:6a:28:a8:7f:48:0c:6a:59:ac:f9:
c9:23:b0:78:cc:b9:34:b4:3d:2d:98:21:c1:3d:af:
71:6b:68:60:ed:ac:05:a7:bc:69:4b:5f:0d:ba:74:
0f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:ED:08:D9:42:F1:02:90:65:61:7F:85:38:7D:A1:D5:C5:10:0A
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:2f:c3:5c:4a:63:7d:8d:ec:30:a1:be:b1:1a:cc:bd:a4:
39:7e:dd:e6:b1:ef:3f:6a:e8:77:2c:97:37:3e:1e:b1:d8:4e:
b0:8c:83:c5:7f:eb:1e:12:6d:27:3c:06:58:a5:3c:31:37:9a:
0a:7d:82:20:29:3e:ca:d0:ac:86:86:fc:59:98:3c:fb:bc:90:
c7:a2:e4:b2:3d:c4:6b:60:ea:d6:0a:a5:9f:83:06:3e:a4:29:
e6:79:72:24:50:02:6e:d2:63:8c:ef:13:78:9b:b2:6f:48:03:
bb:72:b7:2e:7d:0b:0a:14:ef:02:e9:ed:eb:69:16:b2:c5:70:
56:39:53:c5:e9:35:49:56:bb:75:23:59:14:db:83:ef:96:f7:
7b:70:27:9e:95:44:a5:30:76:e0:aa:11:5a:6c:0d:b1:51:53:
cf:78:b8:82:06:5d:7c:41:c9:5a:d1:3e:ee:9f:fe:db:db:c1:
5d:a5:ee:80:7d:58:ab:27:cf:4f:1d:f3:1e:cc:0c:bb:58:71:
02:84:98:b8:e4:61:27:93:b5:1f:74:17:82:c8:9a:7d:78:ae:
d9:5b:a4:33:40:53:08:7b:c8:4f:7b:7e:80:e5:94:08:21:03:
89:1f:21:e1:20:b8:6e:4d:bf:04:4b:1b:85:32:66:1f:a6:8d:
2b:57:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:37 2025 by rpki-client