Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json)
Hash identifier: RuPSZ5lYpSyiv+1gKPc9mIQo/3k4a6UvQTMnnirqQLg=
Subject key identifier: 62:52:1D:00:BA:8B:C4:06:83:BC:07:4C:9C:EF:9A:5C:59:70:BA:00
Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28
Certificate serial: 0194BD854470CF91BAC8F46B28E0AC30AE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=)
2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: 844fz8quR+BvLCG8yKoRzDkIN9vGh7pwhU9rF8ynzSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:44:70:cf:91:ba:c8:f4:6b:28:e0:ac:30:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=62521d00ba8bc40683bc074c9cef9a5c5970ba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:b9:b0:27:39:47:ed:6b:8e:71:50:c5:0b:
13:f3:df:01:19:a9:7a:55:6d:45:a9:d8:91:bd:4e:
3d:4a:09:76:27:66:1a:1b:08:45:3a:ae:a5:17:ac:
3d:7b:03:8a:17:67:11:a6:0d:99:d1:ef:10:a1:cf:
be:34:e7:f2:15:83:8e:d5:7f:69:77:4c:fc:3f:c4:
5d:16:34:e8:04:dd:36:4c:9f:7d:33:3b:b7:2b:ab:
40:32:8f:d8:4e:79:0e:cf:dd:62:52:ef:8b:b2:ba:
41:cb:31:17:08:b3:d3:60:57:05:5a:9d:bd:05:b4:
37:60:92:b5:f4:d4:86:f5:ae:68:ae:87:86:99:b1:
d8:21:77:24:67:ac:c1:35:32:68:ad:73:85:aa:2c:
5f:dd:17:3d:13:7c:d8:cd:69:9d:07:48:db:5b:fb:
c5:8e:bd:41:32:44:5f:f8:c5:82:18:eb:ba:79:7f:
a7:a1:68:24:cb:81:36:9c:98:fd:cd:2a:da:f0:b7:
08:99:ad:b8:ee:e9:5e:09:8c:48:4d:97:d1:d2:a2:
48:0a:f4:03:b6:ab:d1:dd:c5:60:17:fe:6a:71:d4:
da:cc:43:2d:a0:e4:15:4f:5a:8c:86:bc:f8:8d:e1:
ae:db:e7:c5:e3:a9:dc:b2:54:0d:c6:a1:30:55:d2:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:1D:00:BA:8B:C4:06:83:BC:07:4C:9C:EF:9A:5C:59:70:BA:00
X509v3 Authority Key Identifier:
keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6b:ca:10:d9:c9:8b:ca:db:03:d5:52:8a:cf:ef:19:a7:90:
73:25:07:a6:8a:85:1b:a7:0b:de:08:5d:01:5f:c8:75:3b:8a:
72:dc:09:2d:dc:09:12:f0:ab:cf:bb:1f:9a:7d:1e:2d:56:38:
e6:25:83:8f:9a:a5:d6:09:7d:41:fe:7d:69:43:3c:80:3c:0a:
4a:1a:1c:45:20:49:9c:b0:f2:bb:29:03:49:2e:87:e7:ac:83:
36:49:8c:44:1a:ef:91:dd:d9:6e:5a:ed:41:78:40:01:40:22:
50:f6:b5:04:6b:42:4d:e6:06:24:9d:47:2b:c3:c0:4c:82:32:
52:d8:94:69:e8:4e:6e:b9:82:e5:d9:ed:23:8a:54:36:79:fc:
90:b8:f2:93:c8:72:fc:c9:21:bf:65:80:b8:15:39:19:ca:a1:
0a:c8:4d:cb:d3:28:94:68:66:13:7c:0e:62:15:06:c8:dc:f6:
0f:db:39:eb:2e:69:7c:00:db:c4:c1:66:6f:b9:92:6f:f2:50:
e7:61:be:e8:e3:46:c6:14:b0:5d:29:9c:8d:16:d8:fe:58:ea:
1e:f6:f1:72:9e:1d:7a:50:4c:bd:67:60:b1:50:cb:11:d7:57:
21:ff:3a:11:ce:63:02:a4:55:7b:59:13:7d:4f:60:1f:74:17:
e7:de:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:55:56 2025 by rpki-client