Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: WKUG4w0SlBEZp1XzVfOZz+CBNs1l1Kt69dyjMNQWxZc=
Subject key identifier: 41:F8:CA:D7:27:24:B9:E3:16:87:34:E1:BD:E1:51:A7:E7:8E:F7:0E
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 0194BC72924DDF184F7541B5429983F14608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 0BF7
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: SKLs3SUJ6QhNbVJrjYVyYf81aEc.roa (hash: R9s9J4TIgAF+/QEDyhuyAA67g5wViBKHguVZOslEIHs=)
2: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 55qH3vzCkgR7W7wlgIOqIJ7YKUbONWrWERR9lE+1iLU=)
3: rAM6r2SFYvSQGaseydRgOte_bds.roa (hash: RYGmm+YYhr7YTk+o6zMn3og3hxzFO1fF/P5WPNoHQX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:4d:df:18:4f:75:41:b5:42:99:83:f1:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=41f8cad72724b9e3168734e1bde151a7e78ef70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:e2:d5:58:d2:c1:c6:c2:d8:f8:3f:fb:c6:
a9:a0:65:86:3a:58:4f:28:5b:ca:b3:6a:54:1f:c4:
ae:ab:33:c2:1c:25:d7:75:be:31:fd:60:c4:d9:a2:
fc:1c:f1:24:38:f4:a4:bf:0e:fc:1e:f1:79:56:3a:
22:b0:60:04:d2:6a:c3:0e:ba:e4:40:9d:52:53:5b:
a7:f2:68:bc:66:f9:43:47:ed:a5:f7:be:5c:aa:c8:
cd:c6:8c:93:ff:bb:80:a2:ca:7c:fe:80:5e:9b:42:
74:ce:b5:87:57:40:86:53:ae:f7:4d:a8:cb:0a:6f:
cb:34:13:14:01:14:72:68:92:ba:ea:37:a5:da:db:
1e:05:96:8a:35:a0:fc:61:d9:05:3a:34:e5:a3:6f:
1f:ec:57:32:43:5c:ec:e6:83:da:fc:7a:cb:17:66:
16:c7:02:d9:7e:77:9c:70:8c:bd:d4:a8:3a:f4:9c:
f2:6a:5e:73:03:a4:f2:f7:12:c9:d1:2f:ee:63:64:
da:77:c4:e3:25:6f:22:de:ee:ba:c0:20:4e:48:1c:
d7:88:8f:2c:e7:2c:c1:b3:0d:d7:02:f4:33:b9:a5:
ea:0e:37:e0:dc:a0:77:61:d3:81:c3:34:ba:a0:b7:
cb:81:b2:85:87:21:64:2f:10:29:58:c7:19:e6:96:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:CA:D7:27:24:B9:E3:16:87:34:E1:BD:E1:51:A7:E7:8E:F7:0E
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:94:9b:4f:ef:93:5b:30:c0:07:fa:7b:36:55:3c:59:8a:71:
d8:b9:af:2d:13:96:78:74:a3:47:a6:da:85:42:7e:7d:3b:0e:
d9:2c:d1:34:b2:f0:7a:60:ed:d1:4f:e9:34:cd:ef:dc:80:64:
98:cd:e0:70:e3:5c:b4:17:27:e6:d0:38:c6:16:a9:0b:d0:fb:
df:bf:d1:c4:49:0c:9c:4f:ad:84:08:27:d5:bf:67:aa:59:4e:
ac:41:e2:4f:1d:fd:79:23:dd:7f:3c:ef:1b:34:1d:c2:42:9c:
8b:9c:21:67:9b:37:b7:45:25:9a:d8:5e:10:5e:fa:24:13:2b:
04:aa:8f:e5:00:40:77:56:26:45:5f:cf:33:55:91:ed:1a:66:
18:3b:f8:a9:d3:64:65:e5:d4:3a:56:97:aa:52:17:2a:3c:1a:
76:65:e1:8c:cd:08:05:bc:55:48:c8:15:c9:4a:80:6e:63:9f:
0e:33:89:57:b8:49:77:62:28:cc:86:01:a1:5f:a0:34:5b:f8:
fe:24:ce:42:af:d0:bf:19:b1:d7:22:81:d0:04:94:f7:ed:f5:
f9:37:50:9b:7d:63:ec:99:c0:4d:ee:b7:a1:32:d2:b4:23:33:
96:61:19:5b:a2:d8:a3:7b:6d:2d:f2:51:9b:f0:7f:6e:96:bb:
5a:a8:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:18 2025 by rpki-client