Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: 4w1l4TmG9uvqdtinNLn097oMtOSgCdU2IcIlCmUT8i8=
Subject key identifier: 29:BB:E5:E7:7E:B2:16:DF:B7:BA:E0:26:67:66:25:62:22:3B:51:50
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 0194BBCE265C7CEA0E990B103503DABA500A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: RzoB9lcpqsxv6yJfWKicAVIH12y8JKSEa/IJdEl55WQ=)
2: stcblJCloKrq21i-3tGdy209Cks.roa (hash: sV8E479KWjrK8MD/w/N9wPnQZDPeZCzIYkOl03vwH+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:5c:7c:ea:0e:99:0b:10:35:03:da:ba:50:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=29bbe5e77eb216dfb7bae02667662562223b5150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:29:6d:63:a3:b5:79:f5:27:ef:23:ff:29:
e1:36:8c:38:61:43:df:8b:71:7c:26:c7:b6:4e:0c:
c4:38:6b:3a:61:d8:47:48:b4:91:7e:1e:05:bb:b9:
39:16:7c:1b:bd:ab:c9:d5:4b:52:64:f1:a4:6a:a1:
c6:2d:c9:32:cb:5a:a3:e0:40:32:97:0a:62:83:49:
e9:ef:65:ef:e3:7d:71:3b:1f:9b:2d:34:16:80:d0:
4c:0d:a1:5d:b2:18:01:89:1c:79:04:2e:89:ff:62:
1e:66:68:98:3a:23:d7:5a:c0:b8:64:53:3d:6b:3a:
19:1f:51:86:0d:2f:49:16:2e:1c:dc:0c:c3:33:e4:
4f:9b:15:d2:28:6d:11:5b:13:62:f6:c5:eb:4e:eb:
b4:db:fc:77:fa:f9:7c:5d:2d:5c:19:76:17:b3:48:
95:38:5d:d2:9d:62:48:cf:91:41:95:03:8f:49:54:
81:87:c9:37:b7:07:57:16:db:c5:d5:d8:64:d3:3d:
4b:4f:f5:62:0e:b0:7a:ff:c9:f5:74:e1:53:2a:85:
33:a8:55:ba:80:d7:30:ec:70:cd:5b:4a:67:bb:06:
e3:4d:ec:a1:45:67:8f:b3:99:8d:35:83:ec:9d:a6:
4a:dd:23:8a:db:c7:cc:6b:29:d2:1f:eb:a9:15:5d:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:E5:E7:7E:B2:16:DF:B7:BA:E0:26:67:66:25:62:22:3B:51:50
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:b7:25:a6:5d:66:1c:dd:f9:84:9c:cc:f5:6b:6e:04:68:
2b:7d:e5:0b:2a:5a:51:6e:92:0d:d8:6a:c5:d0:81:07:0c:4a:
b2:4d:73:dd:c5:81:e9:c5:d7:82:8b:a4:8e:38:28:5d:3f:d4:
fb:98:81:ce:1b:67:0c:bc:1d:8f:e2:f1:fc:9f:25:8d:19:2f:
c9:ce:d3:83:eb:11:1c:2e:d3:3c:98:04:b4:d1:e2:65:88:b0:
95:5d:68:11:75:de:7c:b2:94:29:8a:1e:83:14:2d:0e:8f:b0:
a3:2d:4b:b3:7b:45:7b:a5:f0:4f:6f:c6:68:cb:77:2d:bd:68:
3a:d0:9a:f4:c2:29:81:6e:fc:15:8d:39:33:b0:fd:5f:e2:06:
04:ba:8f:4d:12:ab:b2:06:09:01:dd:f0:96:35:f0:3b:0d:65:
98:a5:88:9d:10:cf:6f:51:48:d8:a3:80:cf:90:b8:56:72:fe:
d6:a0:da:0f:37:df:96:6e:8c:fe:83:c2:d2:a6:5f:de:14:f8:
c9:1b:c1:9f:91:65:5b:16:47:bd:3c:95:83:4e:8f:eb:a4:bf:
a2:ef:2e:75:5c:09:a6:45:3f:1e:c7:17:5e:11:83:e7:d8:ba:
0c:97:b6:97:07:f6:28:34:a4:db:e6:0e:a2:9e:0d:6c:97:2b:
39:09:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:03 2025 by rpki-client