Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: znvP7Un7Mp4NK+N9PF+iyu9Yt71Swam0RdDomUUMsM0=
Subject key identifier: 0A:8C:26:79:CE:50:F3:EC:6D:6C:D4:58:CD:F1:6D:D4:C2:24:3C:D7
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 0194BD17E258D02ABEF2E2CDA7BA9C71B76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: QnzZfwAhjzJXqUzUhWUl6dqWxLq8K3lt+ac5y9YpNts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e2:58:d0:2a:be:f2:e2:cd:a7:ba:9c:71:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=0a8c2679ce50f3ec6d6cd458cdf16dd4c2243cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:be:e9:be:85:f6:d2:03:30:d6:14:bf:2c:
87:8d:ff:43:4c:8f:6d:19:b9:5a:ab:9b:a5:ff:7f:
16:94:ba:29:a2:7d:3c:4b:ca:8b:5d:70:9c:3d:fc:
25:e2:16:94:d6:9e:06:1a:e8:4b:7f:f9:96:72:ab:
9f:a6:97:c4:c3:93:1b:9a:ec:9f:74:cf:7e:ad:36:
68:ec:30:26:53:6f:69:4b:4d:c5:10:20:66:39:2b:
5a:79:70:bf:f4:98:65:e3:0f:04:13:8c:c4:1d:ca:
e5:9e:38:6b:f4:7a:8b:b3:00:4a:f8:dd:21:9b:7a:
ea:b3:7b:c0:ef:6c:1e:99:b8:7d:b3:37:97:69:79:
85:30:e5:14:ee:ac:61:af:99:ad:e9:f9:70:3e:b9:
91:23:23:31:dc:26:08:d9:ae:a7:de:29:64:b8:c1:
77:88:2c:89:cd:3f:20:68:3f:93:bb:e0:02:a4:6a:
e9:f7:23:50:bc:36:fe:44:71:53:a2:c2:2f:65:ad:
85:f5:9d:3e:d8:d2:60:01:29:bd:e3:cc:aa:8f:7a:
09:12:f2:ac:7b:79:a8:5a:5c:d8:53:48:43:29:c4:
bb:bf:11:09:30:f9:dc:6d:05:14:92:a8:4e:fc:70:
21:63:28:77:42:62:22:a1:f3:b7:75:4d:e9:8b:fd:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:26:79:CE:50:F3:EC:6D:6C:D4:58:CD:F1:6D:D4:C2:24:3C:D7
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:93:79:7b:01:3c:ed:90:2b:ff:c3:71:a1:6d:b9:f2:f1:10:
30:f8:7e:51:bc:79:c8:7c:7c:4b:d2:f6:66:6b:2d:0a:0a:2b:
10:5c:6b:6d:7b:6c:0a:c4:0f:f4:41:89:7d:9c:a8:96:49:0d:
2b:58:39:f1:dc:12:ea:05:e2:ca:bc:9a:f5:ee:95:2e:cf:c2:
0a:44:8f:47:9f:e2:95:6a:ca:38:ef:e3:40:cd:58:7b:9c:1a:
bd:af:1f:a8:fa:a2:15:7f:65:51:02:7e:48:eb:10:25:56:0d:
62:ff:5f:ba:b6:ec:43:ef:c3:e0:e6:d0:0b:4f:e6:b0:6c:ff:
8d:10:ca:ec:c0:35:18:0d:12:58:38:82:67:a6:58:86:91:df:
e9:9f:a0:9d:96:ac:be:0d:a2:f9:10:a1:15:2f:88:5b:63:77:
54:44:80:ad:eb:41:c8:19:ca:b8:80:dd:2d:91:f4:13:16:64:
14:d7:d5:c4:fd:86:80:ad:23:12:8f:4b:7d:ee:4c:74:9b:5a:
07:a3:2a:0b:db:c1:61:a7:a0:55:66:63:f7:d3:a7:98:7f:2c:
7e:1b:45:d2:d3:ee:6b:b3:0d:3f:2f:34:ff:eb:84:fc:82:2f:
ba:87:ae:c8:2c:3d:08:58:95:5e:74:9f:16:5a:8b:53:83:2b:
d9:bd:dd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client