Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: AtIschjAbBFZWEshtCu4fYiImSueUpv5rkzI4rXW+tQ=
Subject key identifier: 7D:6C:A0:ED:E9:59:5F:C3:2C:D7:9F:18:12:B7:80:BB:6A:3C:BE:52
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 0194BD852452E6274E5FD72A40092252B172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: TYwZFqNPf6Qsrw0GmPrjKEpe21A.roa (hash: CZIXGgcAUIozY1tQFUYLHdOZbi+azarBS/OuaFJStXY=)
2: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: /HB+1dLtxeGELI1bgw9TDzMfzXlOMeEfR0HRZEqROFI=)
3: b3OynJO2dQ-hJEqWlg7d4lwS2vQ.roa (hash: 2dy6h6k+j3ORshtIaAQ5KnKNXYXUa2URxchCR/WmKmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:52:e6:27:4e:5f:d7:2a:40:09:22:52:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=7d6ca0ede9595fc32cd79f1812b780bb6a3cbe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:52:94:90:79:39:e5:f0:87:0a:ea:7d:68:
aa:2c:4a:03:9f:72:d0:ee:78:c1:d7:2d:d4:db:e4:
ae:09:f1:0d:35:a1:5d:4e:48:18:bb:5f:be:75:8c:
d8:22:6b:25:df:44:f2:7b:ac:9e:15:63:a0:89:21:
25:a6:20:3f:71:50:dc:35:ab:45:37:21:ba:13:91:
0f:0a:f3:5d:af:6d:3d:28:dc:f3:6a:e8:89:5d:e2:
ac:26:71:b8:89:17:e3:74:ac:4a:62:d7:bd:fd:08:
39:e7:c2:02:f3:ba:9b:df:52:94:18:13:67:19:ef:
cf:3c:67:61:0a:57:bb:7a:54:7d:bd:0e:e8:4c:e0:
b0:99:cc:fd:68:a1:c9:4d:84:2c:13:18:35:c1:83:
e0:6d:f6:10:14:6a:6d:29:1c:0c:dc:e1:13:06:c5:
b4:fa:91:d3:ac:d9:f6:d4:3f:2a:80:ce:4f:99:a7:
25:36:d4:c8:52:ea:e9:72:4a:eb:de:23:0f:bf:b9:
e7:22:34:3f:a0:8c:82:45:0c:2d:80:b6:07:dc:25:
2a:30:6f:47:9f:5a:8a:11:a2:8d:a6:be:e4:30:8f:
9b:9b:24:6d:2f:32:a3:7c:d6:79:b9:53:4e:ca:e3:
fc:2e:bc:95:d8:db:95:84:71:d8:56:3a:4c:ae:71:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:A0:ED:E9:59:5F:C3:2C:D7:9F:18:12:B7:80:BB:6A:3C:BE:52
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:de:bb:67:75:14:76:8b:85:05:d2:c7:be:b4:52:f9:1e:1b:
a2:06:1a:79:fe:6c:9a:e4:39:b7:d1:3e:2e:7e:63:0d:84:71:
ff:91:33:31:cd:e5:79:ab:1a:34:b3:d7:53:f4:e5:4f:39:88:
bf:fd:1b:04:a1:7d:88:1d:ed:81:bd:61:c3:dc:e5:3b:74:80:
f0:1c:3f:30:de:fd:53:80:6b:d4:8d:4d:1c:91:65:31:c9:5a:
15:08:1e:4b:6a:7b:fe:73:5c:5b:bb:bb:f3:8b:32:3c:b8:8b:
3a:12:16:36:88:d4:28:0f:30:d4:d7:40:c0:40:e5:e8:de:6d:
ff:6b:ff:eb:60:5e:36:6b:32:2b:3d:0c:27:fe:65:f2:fc:b3:
0d:3b:ff:98:7d:77:0f:3e:08:6d:72:0e:b8:d7:d1:21:6c:b8:
41:0b:60:0c:dd:8c:e2:9e:c4:be:b3:ca:78:7c:41:c4:c6:8d:
d2:f9:e2:58:87:5f:6e:fe:1c:7f:49:7f:e5:4f:7e:60:a2:8c:
c7:87:5f:54:9b:19:68:94:87:2a:fd:27:f9:e5:f7:13:d3:ab:
31:67:04:fb:89:42:e7:0d:45:f0:4c:ec:15:83:9a:6f:36:c7:
5d:01:10:d5:24:25:bb:fd:e0:f6:c9:34:8f:21:31:84:a3:ac:
ae:8d:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:10:57 2025 by rpki-client