Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: NfyyWSOzSSPy2iWWFNG8P8XZy3c7qUUjxtPA9hYXpNA=
Subject key identifier: 28:44:72:B2:8C:13:A1:92:7D:44:14:E9:F3:C9:46:BF:5A:58:B5:99
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0194BD8559C09CCF7A8D3F057CE85C88D21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: IEzfA7a0Mgcqhgk2MFhj7udXGfuh2ITlXqyjYNmekUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:59:c0:9c:cf:7a:8d:3f:05:7c:e8:5c:88:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=284472b28c13a1927d4414e9f3c946bf5a58b599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:05:00:c2:29:08:92:fe:8e:5c:4a:24:e1:
d1:39:6f:61:2f:15:47:63:18:f4:5f:a0:77:e1:a2:
1d:1f:8e:71:18:8c:0a:61:42:79:9b:78:69:d2:c3:
9d:54:e9:a0:6e:9d:8b:18:02:8a:59:37:24:1b:b8:
9f:d1:fd:63:dd:78:61:9b:e8:58:c7:97:3d:e9:29:
74:31:28:bd:c7:8c:f5:0a:94:62:56:10:8a:af:16:
1b:3c:91:ab:50:5e:37:29:1d:35:74:2a:e8:c9:d1:
ad:71:17:39:0b:b2:95:13:5b:4e:85:82:44:f8:70:
8f:9a:2b:1b:b8:82:4b:e4:71:c2:e5:79:08:e7:4c:
29:d1:ac:66:c5:30:94:98:e1:76:d6:d9:bf:10:ae:
8a:8a:07:18:cf:3d:c0:19:08:a8:44:c4:27:5c:36:
ed:f5:ee:b3:8d:04:4c:24:72:b7:b0:7e:5e:f8:65:
f8:35:87:21:20:7b:7e:30:9c:13:1c:34:f9:6d:55:
75:c1:2e:b1:8b:d6:f5:3b:c6:7f:fe:4b:df:26:d5:
35:b3:71:d9:65:61:86:2d:a4:89:eb:16:5c:3e:04:
01:14:ff:91:e5:60:75:c5:97:6d:59:53:a2:76:e9:
cc:27:bf:c8:f7:18:dd:a7:f3:42:34:ef:14:5a:1c:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:72:B2:8C:13:A1:92:7D:44:14:E9:F3:C9:46:BF:5A:58:B5:99
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ca:a6:06:00:49:ed:a3:b6:b5:69:4b:4c:7a:da:7b:86:05:
85:75:f0:21:3e:b8:94:82:68:3f:5d:80:b4:89:69:37:ec:fa:
fa:b6:22:f2:39:9f:24:f4:0f:f0:7e:e0:e7:58:65:0f:8e:c2:
3c:5e:61:45:03:3b:6a:36:2f:d6:bb:f6:6c:b5:d9:8f:e9:8e:
60:cd:8e:1a:f8:c5:85:5b:a1:e6:73:d0:e1:a8:a4:b3:08:0d:
62:c3:42:da:37:0b:94:88:d1:ef:6e:a1:e6:3f:ee:a2:f8:20:
08:e7:7e:c2:2a:c6:8b:dc:27:02:aa:45:3c:6d:51:bb:f9:fe:
46:79:54:80:4f:2e:84:db:56:92:4d:30:ad:a7:64:8d:e5:c4:
5a:46:ec:c3:38:de:f7:fa:bc:e8:5b:99:f9:5c:43:ff:cf:66:
88:b7:ed:3a:2c:11:a5:1f:be:74:46:ce:f1:b9:be:05:3e:18:
7b:85:c6:00:db:b4:25:92:33:a8:34:59:fb:6e:59:aa:4b:78:
87:ad:55:81:ae:d8:ae:7c:44:e2:a4:18:c0:12:b5:3e:9a:83:
72:63:e3:eb:06:86:33:81:8e:d4:f5:74:a0:3f:3e:d1:1a:d7:
59:ba:98:6c:b3:e8:f9:6d:92:d6:0d:5e:e4:e8:cc:c0:f5:65:
9f:09:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:48 2025 by rpki-client