Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier: a+4g0kyJrtmUTtV1lta5nLtUxycAk1gmXBTz44HUsD0=
Subject key identifier: 93:91:E1:8D:83:0E:91:C7:D6:CF:87:16:5F:74:28:8D:07:34:D4:99
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 0194BD4E4A28DD4902D5941042E5CA82E323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number: 1397
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: 2ywpCRCtpz6hrb_B5Z2UyYL2m-g.roa (hash: Z+2VK2G2lzN86LoPcE9VgbDrrppkQUiQOHGoi5RCAY8=)
2: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: uBw3Rp6FFPhcwP9YO1gAeHjd13IpiyvU7XZ9fvwtqQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4a:28:dd:49:02:d5:94:10:42:e5:ca:82:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=9391e18d830e91c7d6cf87165f74288d0734d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:62:e4:bc:ad:b0:a6:06:c3:2a:ec:37:84:
36:ed:ae:46:1f:1d:02:46:82:80:c2:98:ce:57:5d:
db:9f:08:b7:21:3c:74:7c:a9:de:f5:da:f5:4e:93:
cc:10:d2:93:f1:4f:6e:98:47:46:5a:68:b8:20:28:
28:8a:25:14:6a:54:2b:7c:b1:cd:53:c5:9f:02:bb:
7c:4a:57:5b:f3:63:72:42:7d:cd:9d:c7:1f:30:61:
fe:f4:e1:5b:90:1c:4c:7d:f7:3e:06:50:b5:6d:90:
03:cd:c0:1a:cc:23:46:99:8c:e1:ec:9c:9c:93:a5:
dc:92:7c:bf:6e:95:ec:00:bc:a1:fc:67:ef:29:b2:
df:b0:3c:91:36:e6:ea:90:50:ea:86:24:cc:fc:6e:
0e:54:0a:70:87:20:7a:67:f8:aa:73:7d:bc:c8:bc:
c1:cd:d0:d7:18:83:b3:bb:0b:29:41:ab:0a:be:7a:
84:60:b0:cf:49:1c:bd:fd:89:65:f2:fc:47:01:67:
e1:68:53:23:50:bc:c0:11:01:19:a7:e7:2e:6a:9f:
ac:0d:f1:d4:6a:93:f5:08:0d:65:3a:3f:16:4a:1b:
fd:3e:8b:a2:b2:21:28:70:fc:39:90:90:88:9e:92:
0a:04:42:4a:8a:32:5d:f7:ac:c3:82:b2:c8:15:61:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:E1:8D:83:0E:91:C7:D6:CF:87:16:5F:74:28:8D:07:34:D4:99
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:5e:ac:d9:c3:9f:f1:b4:25:20:52:35:1b:b7:87:22:01:
4a:df:15:88:4a:84:5b:b4:ea:1e:43:63:a4:f0:72:86:54:ba:
08:a3:ce:8c:24:a0:62:f7:44:db:7e:c3:04:68:dc:dd:4d:5f:
e4:c8:27:a1:fd:31:42:65:9c:68:2d:6a:64:b2:67:d0:34:4f:
d1:ce:d3:4f:f7:75:c4:2d:ab:45:ce:ab:b0:98:59:20:c9:a1:
d6:58:af:13:4b:00:e1:80:07:49:ec:11:1b:8a:e6:ed:26:fe:
79:e6:ab:64:fc:35:b4:d1:33:82:90:7d:7d:ce:ae:a6:35:95:
05:e3:d5:ef:f4:0b:35:ad:a2:23:d2:61:d4:a6:89:dc:cb:ec:
92:32:23:9c:29:71:5a:c1:80:b2:18:d2:1c:84:d7:f7:64:6d:
56:d8:00:a7:ed:0b:1f:00:7e:15:2d:c3:2c:90:73:4c:e0:24:
3e:34:74:00:7d:1f:54:7e:29:89:3b:00:30:13:07:ce:e3:30:
a1:12:21:0c:9c:06:f9:83:c4:51:37:1a:77:48:30:9f:29:31:
55:0a:45:78:51:23:71:4a:57:f3:a1:09:e5:f0:0f:75:91:d8:
46:81:65:cb:34:ac:10:bc:bd:f1:4c:07:21:16:b4:71:04:ef:
d8:a3:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:08 2025 by rpki-client