Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: s58fXwfeWD/6zhl/8PRQvyELgVHkX0T+sSgImHlaY/E=
Subject key identifier: 3A:CA:1A:B0:01:E2:69:5D:37:90:2F:AB:1E:B6:15:72:8D:26:B8:15
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 0194BD85B066F453381C4D85E728DA1DF260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 6SCwO2S48Mqpl17CxJjrl18GrEo.roa (hash: +iW+64GQ290TRZ7pzpFa83Xn8R6dcie2oLJMOqdfhwM=)
2: 70-0-C2qfwRFGOmXs7z0P9rO1Dg.roa (hash: UXG2vfv9VFhp8kbUsMPdFVXztsWH0VKzkTqdDHZBLZY=)
3: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: Ds4ci2FsG4fkLOjh+h5mYH6xmjfUfSamm/eN6ezXb5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:66:f4:53:38:1c:4d:85:e7:28:da:1d:f2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=3aca1ab001e2695d37902fab1eb615728d26b815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:19:6d:3c:22:21:ba:59:dc:71:aa:4a:e8:
9a:7c:7e:27:45:cd:6e:d9:be:b6:51:c1:da:b3:ef:
75:98:58:85:1e:ef:3d:43:db:16:1c:85:92:ee:83:
73:7b:06:e8:f8:20:5c:cd:d6:df:98:20:c9:73:16:
f8:20:96:f8:cf:ef:25:02:66:4c:78:96:bc:8d:d0:
97:33:c9:cc:b0:e6:28:4f:61:67:28:88:2f:49:2d:
21:ef:af:46:58:98:37:50:29:d3:a4:23:d8:2d:1d:
ff:c7:5a:f6:5e:e1:e7:50:6a:63:22:20:84:c4:52:
d4:d2:3e:e7:62:13:2a:e2:20:2a:89:8b:8d:a0:d4:
29:10:cd:29:11:7d:a6:c4:14:b8:c0:58:fc:a0:7a:
42:02:89:d9:18:9c:03:f3:dc:51:44:80:e8:fa:da:
f6:60:22:bb:64:db:bd:1e:69:66:7f:11:8f:d9:c7:
1e:54:fb:d7:f3:89:c1:55:4a:83:5f:eb:c0:39:8e:
8a:53:09:48:cc:5d:48:c1:c0:f4:27:15:1c:b6:f4:
44:4d:94:b3:3f:fd:ae:6b:b0:6e:ad:53:74:12:f3:
96:51:fb:4e:34:a0:83:8a:08:71:73:4c:23:5c:19:
4c:df:3b:17:6c:0f:f2:63:ca:73:57:00:82:e5:90:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:1A:B0:01:E2:69:5D:37:90:2F:AB:1E:B6:15:72:8D:26:B8:15
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:52:fb:02:52:71:3f:44:b4:25:81:2d:4d:6d:d1:2d:b1:
67:9f:b2:87:d0:68:b9:5a:49:83:5a:11:68:7c:71:8f:e0:fd:
43:73:a6:6e:55:73:33:98:fe:3c:72:7d:ec:75:58:ee:7b:09:
65:b4:a5:35:70:be:62:2a:50:8e:f0:fe:1d:28:ce:66:47:b6:
9e:54:37:cd:aa:bb:72:33:e4:e0:6d:f6:a2:5d:56:af:66:d9:
50:ca:82:0e:d1:4a:0c:29:63:5d:77:ee:e9:77:9b:4e:dc:36:
e4:4c:ea:d9:dd:2e:12:41:52:9e:ff:1e:b4:22:f5:69:ff:71:
af:10:77:b0:15:18:b1:6b:ab:9d:86:2b:4c:c3:8c:da:7d:48:
36:1a:b7:72:7f:ff:cf:d8:3b:20:f3:72:04:95:79:bf:64:c2:
cb:d5:4f:7b:0a:72:77:14:a9:1f:10:d9:2c:e8:14:84:8e:99:
07:c7:82:9c:de:3b:f7:de:91:f8:d1:be:11:e2:9e:b8:96:24:
2f:a5:b8:ce:d5:be:da:29:70:c6:27:1d:1a:a2:1d:ed:fc:07:
26:cd:2f:09:b5:3d:c4:26:f4:20:6f:0b:7f:7d:1f:6e:76:a6:
e3:65:b5:c4:f9:c1:c0:f0:d6:5f:34:25:9d:e9:27:8c:6f:0c:
fa:63:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:56 2025 by rpki-client