Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: 9rqzfZkmeGZd9Po9Jihq5BGiPsr35qQqgbBXz2Gx/ec=
Subject key identifier: 52:B7:E5:4C:2F:3A:93:A4:D0:18:42:BA:6E:EC:A8:AA:66:C7:58:83
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 0194BC3C6FD5CB6066761439D1D2AA2D667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: AwF9Po4WusYXHbCN28Vi4N0vdXM.roa (hash: BrxeSv8ZT8qhQ9aNAuI1FMulPWTfztWj80JkUewf8Ps=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: oJt9Y/R10yC0/fId5/J9BTsNeb/vd53++bbG3Aj63Go=)
3: jsLjY2Dc2S2O7jwfLML6nOsBS0o.roa (hash: /a3bkiLEbNmaSUeq8MEDshih5vZMuYoOiChrBF9mx2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:d5:cb:60:66:76:14:39:d1:d2:aa:2d:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=52b7e54c2f3a93a4d01842ba6eeca8aa66c75883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:19:96:63:de:21:6a:65:51:7f:10:09:46:
40:b2:f4:36:2d:1d:da:dd:4e:e7:47:b8:9e:ec:da:
bd:8a:4d:71:2f:e6:a4:d1:c0:47:9c:be:ac:3c:be:
b9:da:52:15:28:36:cc:c6:06:4a:73:a1:2d:83:e0:
c2:8d:81:78:d9:df:54:31:5c:c9:35:e2:89:5b:53:
0b:38:2f:5b:e8:94:19:e0:de:5a:cb:49:15:56:66:
4b:97:82:c0:dd:6f:09:d4:92:00:35:00:c0:8e:7e:
59:46:88:0a:02:ca:23:a4:fa:1c:72:81:c4:f5:df:
53:b3:8f:fb:d7:ce:37:1d:c3:7f:1c:0f:ab:00:00:
77:d9:45:ee:49:c1:79:29:d3:03:b3:a4:04:18:32:
f2:a1:bd:ae:29:5f:4f:d0:ef:33:9a:88:c7:0e:04:
b7:46:be:4a:35:5f:f7:65:d9:c5:5d:46:20:cf:71:
00:8b:68:59:06:3b:37:d6:5f:42:74:0d:0c:c0:06:
90:02:8c:02:de:65:88:86:53:f2:c2:58:4f:61:0b:
e6:41:09:89:cd:70:99:c3:42:f5:80:53:c3:46:d2:
cd:23:46:92:1a:ae:2f:b0:dd:d5:3e:f1:e9:ac:77:
31:3f:f1:35:fd:df:91:39:03:ac:04:7a:87:fd:ed:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:E5:4C:2F:3A:93:A4:D0:18:42:BA:6E:EC:A8:AA:66:C7:58:83
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:39:08:af:25:a1:95:4f:b7:7f:44:a0:bd:4a:70:ae:39:61:
53:04:ff:18:1f:e9:23:d6:71:30:25:42:aa:2f:e5:26:e3:07:
5f:64:b9:5c:cb:ae:37:d2:dc:df:0c:3d:b7:43:3a:63:b2:17:
b4:9b:92:fb:44:b1:c6:30:08:90:a7:c1:b0:7f:0b:c5:9a:de:
ba:bc:8c:d6:97:c2:f3:a1:3d:2a:6f:b6:3e:f1:85:93:bc:3c:
90:4d:d5:24:26:ff:11:d9:3a:a7:17:f2:b5:80:f9:43:54:13:
dc:99:3e:c5:e6:cf:45:52:dc:fc:55:08:b9:37:6d:b5:26:2e:
66:88:8a:03:63:72:57:ab:dc:7f:f8:7a:a3:56:ba:92:a8:64:
cd:1a:98:12:b8:88:5f:b8:de:9f:1c:07:91:47:c7:8b:d4:08:
98:fd:da:54:8f:b5:d4:70:f4:e1:52:90:f1:54:e4:84:15:9e:
d2:c4:cd:27:81:a9:11:d0:fd:ba:e7:c1:07:49:8e:7e:db:e4:
f4:68:cd:7b:38:5a:f5:9b:c6:04:5d:be:bd:0a:be:cd:d8:f6:
a8:05:62:a7:57:09:af:9f:5b:9e:3a:11:5d:76:a0:2a:c1:1f:
49:5d:98:5d:6f:e9:52:d0:36:72:f9:e2:33:84:fc:b9:46:2f:
b8:a4:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:50 2025 by rpki-client