Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
File: xTG2PRGmzC0c5p4TEch6waanBzM.mft (raw, json)
Hash identifier: lkpV698E5IKxctfW77AmNxOgAUCV7VByStdfVRwOkw0=
Subject key identifier: A4:F9:61:2B:34:E1:F0:7D:50:57:8B:E6:60:58:03:EE:7F:E1:09:3D
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 0194BD4E3EEDA221B55E1D76074DB8E6EE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
Manifest number: 0CAE
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 3cKiOm3cqL9AuF9PS6f53tN4Gdg.roa (hash: HiF4cbbVkgMNvvCZGg36cGuMWinu6Z8X1/cmYfYlH0w=)
2: xTG2PRGmzC0c5p4TEch6waanBzM.crl (hash: L1VtXFtUql3aZ/I3Ts2wAqRH608sRKSZazfAgPJC6gU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3e:ed:a2:21:b5:5e:1d:76:07:4d:b8:e6:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=a4f9612b34e1f07d50578be6605803ee7fe1093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:43:90:84:13:c1:a6:93:2e:0c:8d:c1:e0:
21:fb:f0:b7:2e:f3:b6:a1:21:de:f3:ba:71:11:03:
93:fb:6c:e7:2e:8a:e8:49:05:73:53:a4:9a:9e:62:
c8:fb:bf:58:80:c3:8a:ed:23:db:3c:b6:c9:f6:a2:
dd:ef:f4:50:82:c4:b5:b4:c4:51:cb:86:42:9a:28:
20:0c:87:47:31:3e:9d:0c:19:d5:1a:58:4e:bb:82:
6e:3f:9f:7d:62:0b:80:a0:0e:03:c3:c0:34:96:71:
0b:8a:5b:32:0e:33:f8:05:db:20:73:b6:08:51:14:
ae:d8:35:c3:42:04:ff:e4:1a:35:d8:81:97:aa:7f:
4d:0d:ba:c1:6a:2e:bc:46:2c:ba:d8:1e:1e:34:25:
e2:93:13:e9:01:2d:13:b7:3d:ce:65:d0:e6:f7:69:
36:5b:ca:b0:48:d2:c2:54:bb:77:f8:1c:93:ae:5c:
f3:b2:87:cd:10:64:7c:fa:ae:43:48:41:9e:77:7e:
39:cd:c7:58:7d:5f:ef:48:18:d8:49:04:6e:42:70:
39:82:91:a4:d2:7a:8b:3b:f2:cb:7c:59:ce:5c:ab:
1b:5b:5e:fe:71:35:0e:64:3e:ba:8b:bb:90:94:3e:
11:d0:5e:29:9e:48:62:92:96:64:0c:0a:80:3b:cb:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:61:2B:34:E1:F0:7D:50:57:8B:E6:60:58:03:EE:7F:E1:09:3D
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f3:9a:6f:f6:f9:5b:23:3a:8f:8b:da:4e:31:c8:df:74:7c:
0c:41:39:32:55:a7:e2:6b:87:f2:ad:9f:6f:df:21:03:cd:42:
6b:46:d9:01:0d:55:6c:b6:93:1b:e4:f3:55:4e:c6:c2:a5:2f:
b3:6f:df:6c:ea:f5:f4:2c:41:26:80:8e:9b:a2:e0:c1:3b:8f:
02:63:85:50:13:a4:94:95:0b:86:0a:ea:2a:a3:92:6c:7d:49:
6b:0e:35:19:53:86:ec:03:f7:d9:d7:a1:19:3c:a6:1a:68:c4:
1d:c3:e3:ca:04:6a:80:6c:71:22:f5:c2:84:ab:dd:17:bf:cd:
61:33:fb:49:c8:a6:c5:9c:ff:9d:b2:d4:f0:c8:f7:29:c3:f7:
d0:ce:07:47:d7:ad:ac:d8:ea:17:72:3a:18:a4:fb:6f:d2:58:
6a:15:0f:9c:69:0a:9d:1b:d1:e9:9a:d8:56:79:c3:a5:5e:cf:
bf:ab:16:12:c8:51:2e:a1:1d:8d:8c:66:ec:da:77:82:65:54:
8a:71:10:a4:eb:0d:35:b9:d6:69:65:b9:25:a4:60:13:02:eb:
3c:5d:63:c6:52:72:f4:2c:67:74:12:0f:e6:2e:a3:e8:6c:7b:
6a:2a:36:5b:4d:ed:fb:5c:1c:98:99:db:89:7d:43:e8:66:7a:
7e:0b:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:14 2025 by rpki-client