Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: puhOWVAODXhp/kVvHO+CrDCoqIe2yr0mIICD+RyHlpM=
Subject key identifier: 7B:ED:07:79:9F:0B:7C:30:C7:1C:31:2F:6A:02:2C:8C:32:AA:1E:CC
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 0194BD855F1D822123494F259C8188E0D133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 0C89
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: P2NRYwvD64-ChL8WHsL3n2VNc0o.roa (hash: ieevRAfzDccOVGuN3ZGz3jBO2k67pRtiKtsN5CR5hf4=)
2: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: KDKdOMWKq6TLUoTS1od6Ovhe7DvsBDHQkSd1XDJUMIE=)
3: fm5A4Lmh3Dyoqm8phCUbdJ-SJ50.roa (hash: y1l9jzGOcVZ0GENozcALgbMdp6ZfPx8sRn42vZfb0eg=)
4: oPG6ASuM5NwkGi_b3hOvB13bafw.roa (hash: mQs057DhcF+488qb5FDjeo5bPWiz5QTgGuKn7gUFZzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:1d:82:21:23:49:4f:25:9c:81:88:e0:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=7bed07799f0b7c30c71c312f6a022c8c32aa1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:ab:35:f1:13:f4:f6:10:ce:d9:37:0a:1f:
96:7f:b1:95:95:58:47:d8:eb:22:83:47:aa:9a:fa:
ef:4c:b8:b1:9b:ad:f0:68:fc:44:fa:9d:32:35:5b:
54:72:18:21:d2:71:57:fe:31:36:6e:c1:f4:c8:55:
75:72:be:54:57:48:67:ce:e2:77:ab:1a:25:4a:01:
76:5f:c0:fe:1e:40:62:f7:ff:ee:6a:dd:3d:cf:8a:
43:ee:b6:43:3e:21:20:93:e3:78:65:8c:dc:05:b1:
c6:d9:51:e1:1a:68:0e:7e:79:29:e2:0c:7a:f3:eb:
62:e3:fb:17:3b:83:18:a4:c1:23:e6:06:2a:62:58:
3e:e4:41:2b:50:fc:6e:13:ab:dc:e5:09:ba:67:f8:
e3:f2:ce:bc:fa:66:8d:77:58:42:7b:db:b2:55:9c:
bd:13:49:f4:b2:1f:f0:ea:7f:93:8e:73:6c:8f:fd:
b0:0b:32:9b:5c:a0:5b:70:d6:a0:00:02:19:a2:b4:
26:0b:91:91:75:a4:d4:d3:f9:ee:f5:bb:df:bc:d4:
26:30:45:e6:a8:27:57:36:f1:88:81:cf:33:7e:f4:
62:3d:ab:12:a0:18:ed:bc:7b:71:51:57:de:d6:f5:
14:09:be:47:ff:1c:ac:06:0b:22:50:24:57:64:e4:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:07:79:9F:0B:7C:30:C7:1C:31:2F:6A:02:2C:8C:32:AA:1E:CC
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:49:bd:bb:b0:76:dd:c5:f4:7e:07:76:c6:2c:9e:64:fa:
c1:54:c7:17:ba:89:cc:c7:a2:35:0b:58:8a:42:e2:5a:de:ab:
5d:76:54:85:4d:3d:ad:04:bf:e9:03:d1:30:85:c3:04:26:4c:
27:b0:ab:96:e7:a9:f3:53:82:f3:fc:73:26:1b:15:00:87:cf:
01:6c:d7:c3:ce:01:0c:b8:b4:e6:9d:28:3a:07:f0:01:3c:38:
05:6f:ce:2d:81:6d:a5:cb:00:64:21:71:63:9a:f5:9d:08:c4:
0c:fd:e3:41:b2:c1:87:85:5a:4a:d8:d7:10:d3:1a:3b:4f:f9:
3e:f2:4d:7c:8b:a7:d4:67:86:3a:22:98:6e:16:66:53:9a:c9:
76:12:6d:f2:58:22:4d:9a:5f:77:f5:78:00:79:e5:3f:29:d4:
d2:94:9a:b7:e9:67:30:15:49:5b:a8:00:9f:d4:9b:5e:0c:fe:
90:bf:25:cc:03:84:99:9b:31:ab:59:63:d1:ea:f5:6e:8f:e7:
81:ef:bd:84:38:e2:7d:3d:85:a1:0b:27:c5:7c:b8:0c:93:d8:
bd:29:4b:7b:5e:16:8c:4d:ee:dd:e9:39:5c:0b:72:15:af:14:
a8:3c:8c:04:a7:56:b7:4f:61:da:32:e2:ea:3d:de:da:79:cb:
58:53:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:26 2025 by rpki-client