Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: dIk05s1piIXfXkFynUUIlcGPiqtM2nm91VjayDqdZNg=
Subject key identifier: CB:62:7F:E3:99:90:E4:2E:3A:9D:AF:08:B4:42:B7:15:7A:78:C2:88
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 0194BD4EB75137EAC243317E063F05194840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: eT7nKC8vXG4CUPYgXnyTttnfe2G11YAD2tN4YVhXVbU=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:51:37:ea:c2:43:31:7e:06:3f:05:19:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=cb627fe39990e42e3a9daf08b442b7157a78c288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:39:01:5b:e2:7a:96:3f:88:b4:ab:aa:27:
38:c6:49:1d:a6:e8:3b:c1:99:bb:39:3e:fb:29:eb:
f5:b7:ac:9c:91:38:0b:99:9a:92:87:37:79:fd:b3:
e6:3e:df:37:46:bc:0e:8b:5e:a3:22:7f:cd:18:60:
b2:d9:8e:24:5a:f8:aa:67:01:bf:81:ca:0d:93:92:
7e:fe:6c:a9:dd:6f:fe:88:87:63:f8:dd:03:53:ab:
27:e1:48:ac:ab:d6:1e:95:86:14:ac:3f:13:05:3d:
25:0b:b4:8c:6c:11:b3:c0:9a:23:1a:30:ec:e0:28:
47:a2:b9:9f:93:2d:6a:02:f6:a1:fc:20:a6:b7:64:
50:24:f4:9d:50:47:f8:c5:45:25:0b:ff:8d:d3:6c:
d7:2c:29:f1:15:de:09:3f:9b:34:88:f1:fe:a9:27:
c6:cd:8a:01:be:4d:64:8f:55:e6:3c:11:5a:a2:b1:
fd:11:0e:f0:c7:31:3e:a7:7b:ca:81:ba:c7:35:14:
bb:e8:e2:d5:9c:aa:aa:5d:a6:c6:88:bb:1b:a6:26:
02:5c:41:9e:df:65:d5:6f:a8:13:53:75:50:fb:ee:
08:42:bd:2d:42:3a:6d:87:ac:ff:71:9d:e6:a0:da:
a1:9f:10:55:5d:7c:e3:23:eb:32:e9:a0:07:0d:ea:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:7F:E3:99:90:E4:2E:3A:9D:AF:08:B4:42:B7:15:7A:78:C2:88
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e9:cf:b7:73:7f:15:9b:ff:3f:d8:44:a8:7c:72:72:61:e9:
7a:33:e7:2d:a6:ff:fe:1f:ca:d0:48:9d:7c:24:6b:7c:a6:e3:
1a:a1:01:be:e4:9c:19:09:7c:39:2d:33:66:76:61:06:73:04:
64:32:5d:4d:d9:2a:0d:a7:a9:bd:32:84:c6:3d:c4:96:4a:c8:
14:5b:de:29:2c:3e:c2:63:11:3e:5b:c8:b1:93:92:07:64:8f:
ba:96:56:d0:d4:48:6c:1d:ac:78:8f:29:36:b5:00:78:73:94:
6e:f2:19:89:12:70:fa:19:1c:d5:55:dc:b1:da:52:de:e3:d1:
41:10:03:3e:d4:bc:89:5c:15:62:86:01:87:f9:69:d9:51:92:
63:83:1d:cd:3a:28:a7:8a:f4:88:69:ad:c2:97:15:57:e4:e1:
93:30:a1:9b:a2:7c:8e:2e:d3:36:db:8b:4d:71:3d:4a:5d:4b:
d4:a1:8f:dc:73:39:65:6c:7e:99:3d:6a:79:5f:96:c3:3e:ea:
a9:7e:79:d3:6b:d9:ba:de:77:17:78:74:4a:b0:ee:e4:78:41:
e9:47:1f:df:5a:43:f2:d2:56:d9:94:33:ef:9d:d9:ad:e3:49:
b6:e7:60:7f:84:fa:2a:b9:72:f5:6f:f5:8b:c3:29:33:e1:2f:
64:f4:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:42 2025 by rpki-client