Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: QS25fEx4gum0koExZcoizL9UO+3/+oYbuG2fVkgLfLY=
Subject key identifier: 97:02:EB:0A:14:7C:83:25:1A:FF:C6:7D:22:AC:20:18:E3:E6:92:3B
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 0194BBCDFB126BC877D2DA66A2D001590298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: vmtIBTxzoBwk7jEBoQ1qr7hKFlwZug7GJ/SVRPYoNwo=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:12:6b:c8:77:d2:da:66:a2:d0:01:59:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=9702eb0a147c83251affc67d22ac2018e3e6923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:37:31:79:b4:62:95:26:df:06:24:7b:25:
10:60:cd:4e:42:86:d4:2d:bb:17:46:f2:1b:d7:7f:
61:e4:d5:e6:d4:cb:dd:36:eb:54:f2:63:e6:73:68:
f2:83:86:2e:6e:6a:1e:49:3d:eb:42:a8:09:fe:a8:
f8:64:92:32:70:a7:a1:78:c4:41:b2:b9:e5:aa:fc:
48:4e:1f:c3:a5:1f:5f:a7:75:1c:0c:a8:a9:da:79:
e6:8c:32:c3:c6:1e:47:94:c0:bc:2e:01:16:fa:70:
35:fb:15:1b:e5:01:e2:0e:33:6c:d8:59:e6:11:66:
3b:1c:13:29:6c:ee:e3:c3:b4:1b:b9:64:1f:7d:14:
1e:22:6a:05:86:17:4e:c5:d7:74:8a:b5:af:32:6d:
ec:4b:d9:93:8d:9d:ed:87:78:d2:30:3b:bc:9a:79:
e7:4a:a3:c6:77:91:2e:5e:b1:ca:78:32:6b:60:12:
7a:12:5c:ff:04:cd:ea:b1:3a:de:7e:df:d3:57:7d:
1d:94:3e:58:a2:05:4f:4b:12:0f:e8:9a:8e:29:9b:
02:31:03:3a:c4:5b:ff:c2:f4:6c:97:b7:8d:e4:81:
90:e6:09:6f:8b:56:3b:aa:d9:12:7a:84:47:10:32:
73:09:9f:97:c9:85:bd:86:c4:bb:8b:bd:ec:d0:20:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:EB:0A:14:7C:83:25:1A:FF:C6:7D:22:AC:20:18:E3:E6:92:3B
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:90:09:7e:52:f7:7c:cd:3a:94:31:5c:17:b2:fe:d6:c9:40:
c9:b6:6f:a4:ab:8c:20:1b:39:89:4b:cb:82:3a:5a:e4:65:56:
b6:58:92:6b:51:ed:a3:99:24:b2:4f:fd:8f:2e:13:7c:44:aa:
f6:f5:2b:00:f0:3a:f6:4b:f6:19:35:e9:f8:19:4f:c7:f8:48:
81:07:14:83:5b:33:6f:c2:24:37:ac:4d:f6:68:ef:97:2e:42:
63:fe:aa:51:8d:ee:01:cc:3e:c9:cf:e6:1b:dc:39:fd:d9:61:
93:a2:12:03:b8:9a:4b:62:9f:de:64:a3:86:03:c8:2b:5a:2f:
a0:56:b3:01:24:45:a2:b5:5b:93:b2:63:8b:76:36:a4:bf:b9:
f1:3c:5e:32:71:a0:50:ba:f1:61:87:23:47:16:36:0c:73:25:
d5:98:34:3f:33:fa:f6:6d:61:10:7a:a1:31:68:de:d5:52:20:
e1:e9:59:19:d1:1b:35:93:15:d7:27:43:76:66:a6:90:8e:22:
f8:1d:21:f4:32:b0:64:e4:c9:b0:4f:35:35:27:0a:af:d6:83:
ed:fd:cc:76:02:6f:ce:00:ec:38:ee:7f:35:a3:58:13:32:06:
00:bb:1b:e3:b2:2c:e4:fc:42:18:ed:67:c3:36:df:d1:f3:c8:
8e:27:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:17 2025 by rpki-client