Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File: xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier: AOPLr43eFxXYXhphq5WAVlCIZdAvrs5CBIrF+0p8iwA=
Subject key identifier: 72:3A:F9:A9:63:35:1E:B2:18:3C:94:59:52:FF:C2:64:22:60:44:3C
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 0194BD85838CA12057C165023A7C7D3085E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number: 1165
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: BKGB0xu8toNLRNE3TtbV03PJFx0.roa (hash: FdiXQgpM3MPZ1o0fk4HNEhE38JmZapk1+2ih8Lu8DEA=)
2: _v0ZmDwGVXQnxYXB1nXQzsRBcbY.roa (hash: iHppVj2BjRk7dRpgDIJuQgoqhMV/BmqJSp1BycbHcEU=)
3: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: TMJPF8TzCj7y8t1EQXHv848jPGTYQ4yCH0W5H4iRV8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:83:8c:a1:20:57:c1:65:02:3a:7c:7d:30:85:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=723af9a963351eb2183c945952ffc2642260443c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:11:db:62:25:54:b3:91:96:05:df:3e:07:
19:88:5b:a5:74:35:9c:12:3d:d3:a7:a9:45:3c:0e:
27:cc:31:04:d6:ea:a2:85:68:c4:58:3d:5d:c4:b7:
d0:2f:b0:24:96:a6:de:ff:f4:7d:69:af:a1:28:70:
bd:62:15:47:05:a4:97:cf:33:ac:16:85:30:f8:ac:
fb:03:29:1a:99:1c:32:f3:3f:d9:94:f2:9b:1d:c8:
0d:c0:0e:ea:1d:1d:ff:60:f8:cb:75:41:c9:56:f8:
87:b8:0c:92:e1:6a:5c:00:15:eb:b8:0f:69:b2:b1:
57:5e:0e:3e:fd:8d:79:75:fe:49:18:1d:51:15:90:
90:41:7a:03:7e:74:b2:08:db:f0:95:18:df:db:b9:
a5:0f:59:5a:ac:4a:e2:e0:1d:22:75:94:18:65:10:
2f:50:40:60:50:d5:ae:e4:3b:1f:ba:38:5c:7a:38:
56:1e:43:df:83:5d:74:5e:e3:53:e9:b6:4c:94:b2:
96:76:b2:df:8b:e6:6c:57:20:71:4d:bf:92:a1:f9:
66:5c:d9:51:25:6b:be:20:56:a5:09:86:f9:8b:a6:
c9:bb:ae:fb:1c:50:5f:bb:e8:71:35:f7:b4:08:82:
57:7e:c9:de:3e:c3:e6:49:1a:63:81:c6:64:f5:e4:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:F9:A9:63:35:1E:B2:18:3C:94:59:52:FF:C2:64:22:60:44:3C
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:0c:fd:41:07:75:a8:a8:7b:65:8c:71:97:06:f4:eb:f9:47:
14:17:0a:48:55:56:d8:49:b9:0c:39:8b:84:9b:ac:6c:28:a1:
c1:97:38:56:ca:d0:53:7c:1e:e2:b4:b9:35:1c:3e:f4:66:c0:
cb:07:91:d2:40:e8:fe:41:c4:51:2f:50:30:c0:f2:90:db:fc:
7a:3f:18:aa:75:fe:b0:55:44:8c:ef:9e:c9:81:5e:f5:b6:40:
36:41:ee:b2:02:ac:57:c9:d7:f8:cc:3c:96:67:d1:05:ae:bb:
e2:8b:67:14:0e:cd:a5:b1:a9:d1:9f:96:c2:fe:e9:12:9b:d2:
a3:60:26:72:57:5c:16:73:2b:fa:0c:f1:59:2d:55:a2:91:db:
ad:ec:17:08:4c:e4:1b:62:01:b1:6f:36:e9:a7:d6:eb:0c:99:
a4:21:a8:17:77:33:f3:e0:1c:30:30:d8:2f:c6:d9:a3:ab:eb:
1e:34:43:be:4c:03:02:c2:dd:a6:b9:dc:bb:8b:7c:8e:4c:e9:
56:4d:9d:ba:37:30:82:ba:bc:57:03:af:3a:9d:3f:09:11:ae:
ce:3b:8c:ca:4e:30:c0:e3:b4:23:5f:3c:cc:0a:19:91:c0:b7:
94:72:c7:e6:35:57:1f:ef:6d:36:e7:58:70:2f:46:b1:2b:c2:
1f:d5:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:41 2025 by rpki-client