Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
File: x0heKfEYwBvobBnmaPrPpIXecYw.mft (raw, json)
Hash identifier: a/ys47AhL4c+D86ix9CpiTSSTcKH8ACCLyhZGemos+4=
Subject key identifier: 40:0B:A4:C5:B5:87:FC:0D:F6:40:2D:0B:61:02:01:95:B0:5F:FF:2D
Authority key identifier: C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
Certificate issuer: /CN=c7485e29f118c01be86c19e668facfa485de718c
Certificate serial: 0194BCE0DAEF0E8287BE0F2A2153FEBEC27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
Manifest number: 0B50
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: t18UoHeAEcZ6Yu4NKG2nAheiZEs.roa (hash: RypsXYxji2dJaH2ZVLBlo3yRoSbmcerkP3rshZoohgo=)
2: x0heKfEYwBvobBnmaPrPpIXecYw.crl (hash: +LI1f8gV+D6frySd7CpNvCp/jVARSUyG4g3Z7dieJcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:ef:0e:82:87:be:0f:2a:21:53:fe:be:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7485e29f118c01be86c19e668facfa485de718c
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=400ba4c5b587fc0df6402d0b61020195b05fff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:89:e4:fe:b1:4f:05:3e:00:14:b4:33:9a:
20:4a:c1:bb:f0:03:5e:31:03:dc:20:33:3d:48:6b:
b8:3c:92:14:a3:da:32:c3:b9:be:91:84:0b:33:f5:
b6:27:01:28:b4:e2:0d:d6:14:20:01:91:9b:d7:60:
20:f2:8f:76:05:e5:ff:0f:08:9d:f7:52:ac:67:6b:
2b:c9:c7:60:c0:24:6e:ec:c7:50:c5:9d:80:cf:da:
d2:0b:95:0e:6a:90:2f:e1:be:c1:00:87:41:2a:ac:
c7:04:47:a3:db:8e:35:a7:4e:5b:44:d6:3f:53:55:
9f:8a:3b:a5:5a:05:1d:f1:69:6c:b4:e5:b8:12:f3:
8b:1d:6d:0f:f4:49:25:35:4a:ae:17:f3:d4:a3:66:
90:14:67:4a:b3:e1:d5:56:c5:d4:bc:e7:0c:a0:27:
c6:f2:46:c3:df:f8:fe:6b:27:49:65:9e:03:bf:10:
bf:b7:be:91:8a:12:0c:9d:b8:1b:ca:fc:b0:fe:23:
5c:20:56:ae:8d:41:c4:6f:05:c7:f0:dd:1b:fa:61:
7c:4b:ff:54:c6:3f:b8:89:01:8b:8b:b8:5a:53:f3:
e6:47:ee:d0:4e:68:1b:35:95:6a:e0:b5:82:36:6b:
02:e9:9e:07:f8:31:8d:ce:80:02:ac:d5:ee:ff:87:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:A4:C5:B5:87:FC:0D:F6:40:2D:0B:61:02:01:95:B0:5F:FF:2D
X509v3 Authority Key Identifier:
keyid:C7:48:5E:29:F1:18:C0:1B:E8:6C:19:E6:68:FA:CF:A4:85:DE:71:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0heKfEYwBvobBnmaPrPpIXecYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/539171-574b-4451-b6d4-57f9bc6a5c30/1/x0heKfEYwBvobBnmaPrPpIXecYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0a:54:52:ce:67:71:c2:dd:64:f2:51:1f:35:60:19:46:07:
49:e7:c4:99:0b:6a:66:a3:bf:35:d3:fc:5c:d8:5b:ae:09:66:
ab:9b:23:41:e1:c3:13:62:a9:cc:57:94:3d:e2:b0:dc:ae:2a:
e3:42:64:3a:80:cc:26:9b:78:b1:c4:1c:de:12:dc:0c:10:ac:
d6:01:06:39:82:f4:0c:f2:6a:c8:6c:c9:36:1b:e8:f9:85:02:
19:b5:75:a5:9f:6f:70:74:85:ae:e0:82:94:53:17:21:fe:a6:
6d:e4:ff:15:61:54:0f:9c:90:d6:f3:93:38:7f:b9:c0:72:7d:
dd:dd:3f:3d:d6:32:e1:7a:15:18:76:64:d4:5e:dd:ca:e7:e9:
bd:37:b8:93:e5:e0:b8:16:b0:1f:06:13:34:48:5c:0a:da:c8:
20:1e:8c:be:d9:8e:2b:46:3f:05:df:a5:31:0f:26:c6:6a:78:
70:51:73:e3:06:fb:a3:ac:29:98:73:e2:f4:4e:10:3a:51:14:
ef:ae:66:de:a9:59:d3:3e:ec:a4:f9:62:41:13:1a:42:8e:61:
54:3a:be:50:61:39:b4:73:70:35:e7:29:1a:eb:c1:cf:59:c5:
94:e2:1b:51:33:d0:54:a1:ad:14:09:03:fa:d4:90:b3:7e:2a:
66:66:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:24 2025 by rpki-client