Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File: xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier: 3TefDqLJCFjpxU5iL+oCCxkgsI9b4pzaflfWmPNOlVM=
Subject key identifier: 89:FA:55:18:04:B5:2F:9D:8A:93:B9:EF:3E:FD:00:40:C7:C2:A0:8A
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer: /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial: 0194BC3BC84EAAE0F5157DDFB2F1379801BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: Hmr7dkr0W7JFrepttGlqLP6NKbM.roa (hash: yDBwYp9xrxrLaEiVdQGFDv7xOzCGwLdfuFI8YUzQtLo=)
2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: tH7MB6tEjlfIV+A2a3gAvAVd8qh695JaTn7dUVphBHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:4e:aa:e0:f5:15:7d:df:b2:f1:37:98:01:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=89fa551804b52f9d8a93b9ef3efd0040c7c2a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:54:d8:d2:f0:5c:1f:e5:10:9d:76:2c:27:
c5:0f:b5:1a:26:d3:de:cd:dc:08:66:66:f5:c4:7c:
a5:4c:c0:b0:35:16:bc:c2:f0:44:91:25:da:f2:43:
1d:7e:db:91:a4:78:7f:64:07:aa:38:9a:95:67:f2:
83:6b:e1:9c:c8:2a:9b:0a:b0:1f:b4:b7:c0:01:cd:
ac:d7:e7:a2:e2:40:c0:eb:26:e9:6a:90:0d:32:dc:
44:8e:7c:5a:fc:4a:02:ba:d8:98:33:27:33:d1:57:
a3:4c:f6:81:b9:2c:6c:e3:e0:e3:c6:7b:d7:1e:88:
b8:f1:76:39:37:d8:e9:6f:a3:c5:14:f9:d9:b9:ee:
e0:9d:59:18:54:e7:f0:ed:05:07:fb:cd:e2:9b:b0:
37:d1:12:5e:c2:44:11:6a:71:40:27:59:3e:1e:c5:
20:9c:f0:be:6b:ad:6f:77:d1:12:a3:81:d2:48:81:
aa:a4:26:cb:e5:52:b5:30:7c:3e:af:e0:1f:b4:e3:
a1:4a:cb:b9:37:59:c1:74:45:58:2c:7a:83:00:16:
27:23:70:b3:fa:f4:60:fd:fc:2a:e6:5a:74:d3:f3:
5a:11:6d:10:b2:4d:8a:db:bf:57:12:ac:3d:96:e5:
51:14:c2:6c:81:8e:3a:66:04:9b:39:b8:59:20:1c:
17:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:55:18:04:B5:2F:9D:8A:93:B9:EF:3E:FD:00:40:C7:C2:A0:8A
X509v3 Authority Key Identifier:
keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:ea:4b:67:0e:bd:49:40:04:cd:c0:69:b8:da:b1:82:d6:
83:37:c4:07:7b:88:fd:08:db:67:8f:f6:54:9b:19:e3:fd:e6:
cf:f7:be:86:82:b6:2e:f7:41:56:59:1d:93:a5:b8:7e:21:78:
b7:8a:f3:42:e3:b9:9b:5a:f8:fa:bb:50:d3:a6:c8:bc:f7:97:
1f:12:dc:a3:69:fa:ba:10:2b:a3:a8:d9:72:33:e6:a4:e2:5c:
ac:b5:d0:6e:b0:9c:20:db:6c:50:b6:e8:1d:5c:1f:d7:df:04:
67:91:9b:29:86:05:7a:c5:cd:e5:4d:b1:58:1d:13:c9:0b:54:
82:51:2b:4b:f8:24:e5:31:61:2a:5d:e2:1d:20:e3:d8:a1:c3:
50:3f:88:f3:9c:b4:53:cc:5c:38:26:21:98:5a:ea:95:95:62:
e2:4b:99:e1:86:7b:ab:33:dc:af:5d:6e:ca:07:7e:ab:ee:dd:
0a:f0:dd:94:0d:a3:7b:87:29:c1:a9:e2:8d:ec:b3:23:7c:2e:
f7:3d:a7:9b:84:1b:fe:92:db:b7:9b:1e:4e:c3:b0:5e:78:ae:
f0:b0:9a:b1:72:3b:e1:ef:83:9c:38:5f:dd:76:b7:42:c5:4d:
22:e1:30:18:ba:2b:86:5c:f7:5a:c1:fc:0d:d4:23:9a:42:fc:
e6:b1:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:40 2025 by rpki-client