
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: ZkKQfzbl2T2ij5X5nkZ4tL0difMQBHKKHWlM/yufJuw=
Subject key identifier: 08:CE:47:BD:0E:D7:1B:0E:25:BF:E4:4F:A6:AC:61:55:81:06:29:B2
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 0194BC3BC38A83074F16D1DDE99B3D6651A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: RGGmn9uuaWO3a/ktKhdhcWXBH5mHsGUTi5KnEH6rt+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:8a:83:07:4f:16:d1:dd:e9:9b:3d:66:51:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=08ce47bd0ed71b0e25bfe44fa6ac6155810629b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:aa:79:2e:3c:5c:24:ac:80:9d:77:42:5f:
4d:c3:6d:7a:12:32:d3:01:cc:3e:67:25:7d:78:cc:
37:62:9d:cd:91:eb:40:ca:9e:c7:69:50:49:a6:9a:
c6:ad:12:f8:b5:2d:c1:30:e1:ae:16:ef:b1:5d:34:
2f:53:3f:65:f4:74:1c:5e:9f:a9:29:54:0e:0a:0a:
0f:96:7b:e3:03:b2:0e:f0:e9:91:4c:71:d5:e2:9c:
15:d7:ff:74:ac:21:86:04:4b:09:11:1d:ac:a8:ba:
55:83:3e:ef:95:25:55:4e:2f:b2:1a:87:e8:75:7f:
71:3b:f8:61:67:dd:9f:b0:f2:29:63:bc:87:10:d5:
89:21:1d:12:71:90:0d:90:71:cf:0e:c7:56:9f:a0:
5b:04:54:9d:ee:f4:74:2b:91:1e:80:94:93:c7:fb:
02:26:55:c4:8c:56:cd:7f:81:d9:5c:00:ed:83:c3:
02:da:c6:c3:d9:8d:6c:19:19:fb:93:e2:f3:e8:13:
1e:a1:58:4b:dd:a2:f0:22:af:c2:4c:e1:07:b2:0f:
3a:c1:47:3d:06:ee:68:f9:fd:78:f0:d4:71:aa:af:
d6:c5:3f:2b:b4:22:61:21:97:2a:b1:4c:15:84:7d:
4a:c3:33:0f:74:a6:1b:10:31:aa:d0:97:83:ac:f0:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CE:47:BD:0E:D7:1B:0E:25:BF:E4:4F:A6:AC:61:55:81:06:29:B2
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:89:e3:ca:ff:93:61:e6:28:ff:7a:1f:c4:12:64:4e:36:
4d:2e:8f:91:c9:a2:05:ff:5e:eb:81:5e:c2:9f:33:9d:4e:22:
04:45:53:70:ce:09:3f:e0:b4:23:9a:9a:fc:ab:8b:2a:c2:32:
15:e7:9b:56:2d:03:4f:75:ad:cf:35:82:c5:45:cf:b9:45:bf:
c1:8c:6e:61:f4:f6:1b:58:7f:0a:c8:d2:4c:68:91:43:13:a4:
4b:64:77:4e:cb:b4:a9:c5:87:b9:ef:cc:c9:54:4a:4c:b1:88:
d5:ef:97:4a:6f:cf:49:96:c0:40:55:1a:2f:a7:53:bd:88:ad:
51:72:43:e1:87:0f:72:2e:ce:d4:64:d8:5a:80:6e:d5:16:0b:
71:b1:fe:9b:06:10:bb:aa:6c:1d:e4:30:3b:85:30:dc:ff:9c:
2b:a1:e3:45:40:41:d0:85:e8:da:53:e9:8b:8c:51:33:f5:13:
e3:ff:5c:a0:25:6e:2e:a1:db:c4:20:7a:d0:25:34:e7:5f:6e:
90:59:ae:9c:de:98:5a:15:5c:49:21:2e:4d:cc:f4:a5:58:67:
39:46:f7:a9:2f:ed:a9:f7:8b:7f:20:08:84:73:d9:70:9c:b2:
2d:f6:dd:36:23:87:3e:9a:f9:1f:95:c0:9e:b3:db:aa:45:59:
9c:d6:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:02 2025 by rpki-client