Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: bwXjYUw8DJ4kiGPk3YGqa0J82oC3r9cWk32gWe9AuVw=
Subject key identifier: 1E:2B:6C:A7:15:C6:DB:58:99:E2:63:51:76:A9:50:AB:A5:69:E0:E4
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 0194BC3C6ACDD263C5F6F7BFFF03DFE2BD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0B49
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: dBbVDbRc3o53EUwNuL2kOi5fqxLOgodPf53/Ya8ce2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6a:cd:d2:63:c5:f6:f7:bf:ff:03:df:e2:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=1e2b6ca715c6db5899e2635176a950aba569e0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:34:1c:25:c0:be:e3:15:4e:f9:f6:42:d4:
71:99:08:75:60:2d:9f:06:6a:38:a1:e4:41:56:ef:
cd:be:4f:e6:ab:40:ae:1c:9f:b0:47:00:aa:d6:1a:
be:3d:80:91:78:24:bb:62:8e:93:79:4b:b9:51:50:
c8:28:05:cd:7e:b0:c5:fd:dd:fa:26:c9:b7:e8:e5:
e6:c1:a2:86:eb:18:b1:96:68:f1:e3:6f:2e:52:c4:
71:d2:97:6c:71:7b:45:28:97:d0:f8:de:41:aa:a5:
a7:cb:3b:17:a5:7a:3f:9b:b3:3e:1b:79:41:86:72:
e1:0e:5f:a2:dd:8f:9d:9f:5d:e9:d1:e1:d4:c5:71:
85:89:b0:57:17:90:30:3f:76:34:41:8a:f4:10:8e:
05:a5:b7:aa:fa:be:68:cf:f8:1f:2d:a1:b7:66:4b:
55:06:86:8b:bf:73:f9:da:b2:7a:aa:f9:45:47:d8:
e8:fe:9c:3d:cb:ba:08:20:01:45:5c:b7:d3:35:80:
3b:f5:3e:3e:11:4e:17:59:32:ea:f1:50:5e:93:2a:
e6:28:4e:c9:9e:32:8d:a6:da:c7:33:fd:c6:b1:c7:
36:1a:10:e6:f6:8d:b8:f2:0e:b6:82:a6:54:97:5e:
c8:80:46:0c:b1:b4:e7:b6:14:fd:2f:e2:4a:2a:17:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2B:6C:A7:15:C6:DB:58:99:E2:63:51:76:A9:50:AB:A5:69:E0:E4
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:15:84:f3:61:b3:78:03:aa:f8:63:87:00:5f:f3:b5:2e:
5e:36:e3:6e:c4:a6:10:f8:28:36:c0:20:2a:16:a7:b3:d4:1c:
7f:b1:1f:fb:b6:8f:62:20:28:1a:c0:6e:80:51:3d:8d:0d:ef:
db:9d:0e:b6:34:61:2e:fd:2e:e1:1c:07:88:b1:39:c1:3f:24:
cc:8f:56:73:e5:09:b0:71:29:85:55:e8:17:48:72:a8:dd:ec:
9c:5a:3c:8b:54:df:00:9e:1d:0b:29:a3:17:34:cc:94:1d:02:
df:f5:39:f0:2b:62:e1:82:54:e6:69:2a:63:c7:8f:d2:bd:42:
f8:4d:7d:7b:03:0c:9b:ba:5b:93:60:6d:55:94:ed:5e:59:db:
9f:de:40:8a:36:01:49:1f:e8:6b:d8:97:4c:0d:0b:ac:ea:60:
08:93:d9:46:ad:f0:02:77:85:9f:48:60:fb:b6:71:59:fa:72:
a1:1c:12:e2:38:4b:d4:ed:32:a7:c7:21:3d:5d:19:0d:4d:bf:
5e:be:ff:67:6f:e9:79:54:71:8c:d6:ee:2c:28:8e:36:96:02:
22:45:b0:fe:ca:bd:28:46:97:5a:9f:bf:0f:e7:e0:b4:38:c3:
91:5b:fa:08:cd:23:03:94:92:9a:6c:d5:e1:63:13:e2:d5:4b:
eb:c0:32:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:51:57 2025 by rpki-client