Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: NOLv/aQs2pf41R+XXVn0F0XSBZOwDHUkXx+Vi//8wz4=
Subject key identifier: EF:B7:37:2C:72:46:D5:87:92:BB:CB:A7:1D:82:F0:C1:BA:5C:95:41
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 0194BC72BE082C9E8F89C2FC41E8E1B76761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 0D60
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: Df22bbuiSRgiUG8LSrkCGnveTGZYfp5qAlyIZ/y2Ykk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:08:2c:9e:8f:89:c2:fc:41:e8:e1:b7:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=efb7372c7246d58792bbcba71d82f0c1ba5c9541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:e0:21:d8:dd:0e:c2:d1:8e:54:1d:8a:34:
4a:4e:ad:49:4c:cf:42:c8:4d:ad:f9:a6:24:40:cd:
fb:21:36:be:f1:55:ed:21:50:a7:3c:e0:a9:d9:36:
af:26:d1:b2:0d:f2:69:8c:20:16:b9:4f:2c:f1:a3:
d3:2d:cb:bc:1b:78:44:c2:25:2a:59:61:53:6f:ae:
08:0a:e2:2e:b4:98:b7:7a:e8:e7:ec:b8:0e:ca:8b:
9b:de:f0:f5:6f:7b:18:2e:e5:06:eb:a8:2d:cd:a4:
3e:ce:76:b6:12:50:00:8b:5c:02:31:cc:99:1a:c0:
3d:54:67:88:4c:f4:9f:99:dd:4e:fb:54:86:29:bb:
fd:1d:12:68:8c:4e:82:ad:54:58:a6:e3:2f:21:e2:
0a:c3:e6:ff:fb:cc:ab:fe:40:b1:57:5a:9d:a2:e9:
f1:ae:69:e3:2b:7d:05:05:58:f8:b4:02:3d:80:ea:
8c:b3:df:0a:cf:8f:de:94:d4:61:68:d2:03:7b:56:
a9:66:35:c9:d6:64:36:60:bc:87:26:a0:69:4a:2b:
f0:2a:6c:ef:e3:a9:30:cd:a1:97:f3:10:ce:3a:3d:
d5:58:66:20:8e:8b:41:31:9d:ae:a8:da:f1:5d:74:
35:cc:29:13:b6:cb:45:1c:5c:0d:3d:3d:62:22:d2:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:37:2C:72:46:D5:87:92:BB:CB:A7:1D:82:F0:C1:BA:5C:95:41
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:9e:0a:c0:10:ea:d1:1d:78:89:d5:5e:78:2f:be:dd:ff:
b7:2b:36:ed:7d:e6:24:26:9a:8a:ec:5c:b0:8a:eb:b3:3c:b8:
9c:ba:77:81:2e:5a:42:66:4d:f7:3c:34:06:3a:17:20:ee:37:
d5:a0:0e:b2:9a:3f:a0:6e:34:1c:fe:fa:b3:53:6f:46:84:50:
19:7b:6e:f3:5b:60:e2:7a:c4:bd:a0:86:3d:bd:ff:8c:e3:54:
15:cb:a4:d3:5e:f1:1d:a4:95:96:ad:31:1d:47:60:24:8a:82:
ec:03:f7:11:57:ee:36:08:ad:4b:6e:d8:01:31:d5:7a:5e:dd:
b4:52:60:e9:34:eb:f6:7e:a9:18:28:5d:55:d0:02:21:ad:24:
b2:b8:47:1f:17:86:ec:3b:1a:6b:f0:2f:dd:09:1e:42:66:fd:
db:00:0f:05:15:1a:a3:f3:aa:de:fe:3f:6d:12:8e:3f:11:d9:
bd:e3:07:8b:8e:33:22:b0:b0:c5:11:4a:7b:3f:58:41:a2:37:
ef:b9:6e:c6:a5:f5:fd:63:e5:0f:74:f2:ec:cb:f3:8b:c8:d3:
ca:63:89:42:ae:6d:b5:84:11:1f:9d:92:1b:89:e0:cd:84:a0:
5d:4f:25:bb:7a:14:9d:48:db:2b:81:6d:a7:db:6c:69:6b:bd:
a3:a1:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:22 2025 by rpki-client