Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: TlD1VmGbQ6Qt6605YTY5UJlZkL8ReWCMj6T9VADwBZw=
Subject key identifier: CE:0A:24:85:84:FB:23:07:C0:87:95:70:27:5A:28:89:D5:07:C8:1A
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 0194BBCEF765325B863FDAE682E7452C1A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0CC6
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: PJ9gHrBCojJdEZU+Vp0bsVuyV1ZSGL6xMWOwxBLyQpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f7:65:32:5b:86:3f:da:e6:82:e7:45:2c:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=ce0a248584fb2307c0879570275a2889d507c81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:4a:f0:c2:0a:d3:5c:ac:79:38:e7:06:69:
2f:0f:38:ab:2c:29:6f:f9:2a:db:1a:a6:8d:25:54:
b5:ba:b1:b6:71:fd:cf:68:78:cf:b6:20:ff:7a:d7:
c1:35:a1:fb:9a:75:d8:d0:e9:c0:43:1c:1b:00:0f:
e8:7b:96:9c:23:a3:ad:aa:ba:22:81:d6:dc:e8:06:
65:2d:eb:3c:1d:ef:44:9e:29:f5:0a:c6:42:d5:5e:
64:c1:6f:69:0d:72:17:81:da:0c:7d:cc:ae:7f:87:
b5:31:6b:c4:4b:62:8e:c7:cd:31:b6:14:28:f6:e0:
68:ff:a4:fd:1b:31:44:6d:4f:b3:70:e5:b2:bd:d9:
c4:29:ff:40:55:3a:f1:2b:22:f7:4a:3b:75:07:eb:
60:8d:6a:b6:cd:36:0f:2c:27:9b:21:b9:46:1f:96:
ae:cf:16:31:8b:c8:74:82:94:4d:15:85:b9:5b:f8:
5f:d8:38:60:0c:b0:c4:5a:b2:fe:c5:19:62:48:ec:
eb:77:5f:7c:99:29:32:fb:95:23:30:40:28:a5:95:
cb:29:86:50:8d:ba:63:d1:00:93:f4:f4:99:49:a2:
4e:cf:04:5d:46:17:30:36:72:f5:b8:ca:3c:3b:8c:
8f:72:11:b0:40:9c:c6:7b:45:7b:fa:da:9a:f0:a0:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:24:85:84:FB:23:07:C0:87:95:70:27:5A:28:89:D5:07:C8:1A
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:ee:fb:e6:89:e5:35:74:8a:09:90:6e:ec:d8:4a:30:24:
c6:26:95:56:ec:68:77:cc:e4:20:a7:dc:12:e5:50:2e:1a:3b:
d3:b1:58:00:f7:e5:08:48:df:77:ce:1b:eb:b1:2a:5f:c2:d6:
41:1d:8f:92:13:42:ec:3e:b4:eb:b8:26:88:b9:31:f2:e8:40:
76:a8:3b:b9:2a:3f:8e:9a:76:ea:cc:79:7d:e5:3f:16:c4:0c:
aa:b3:33:95:01:d6:07:63:97:66:f8:06:94:19:4b:5d:9a:69:
16:8e:7a:12:ed:c5:4b:be:b4:c0:34:ef:b0:6f:11:82:de:7d:
79:13:55:7f:1d:7b:8f:42:00:c2:51:6f:63:83:28:1c:86:06:
84:c7:5b:45:eb:e6:7a:04:60:b7:71:2d:15:e3:6f:2f:f6:d5:
6f:3c:e3:1f:ab:7b:52:7d:cc:23:bd:f8:e4:dc:02:94:7a:2f:
5e:49:2a:61:38:3a:20:ad:2e:8d:da:8b:77:17:f7:a2:f2:ff:
40:73:8e:48:47:56:4c:03:70:cc:ef:07:bc:f6:65:30:24:58:
5b:5b:4d:ac:ac:22:e6:17:73:57:3e:96:f2:01:ab:5d:a6:c0:
1b:b7:49:bd:29:f8:88:07:da:8f:b4:ff:18:88:0d:52:bc:01:
f6:fc:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:49 2025 by rpki-client