Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier: CxOqlw0oeDGqyMWNBu2ZfZ+6SeuajbsauelkR21opa8=
Subject key identifier: 0E:CE:50:B6:43:53:3C:4B:4F:F4:16:4F:ED:62:16:95:B8:81:83:F6
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 0194BCAA0F155827079F92EBCC1D38A400B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: GfXo99hoJiHFgjjaqu9Tw0r0Rng.roa (hash: QjTPdfvgZy3hi6p3/RNzYG6389kP11Wk/w4ZvD1hKU0=)
2: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: 5NxDkN878lR0Ntr0PKaLovZCI8tMGRbajBT6dumiWis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:15:58:27:07:9f:92:eb:cc:1d:38:a4:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=0ece50b643533c4b4ff4164fed621695b88183f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:05:7a:11:17:2f:1c:1c:d1:01:a8:8b:e4:
98:c1:19:8d:e1:32:b4:3d:42:a3:71:f4:3d:30:c5:
6b:2c:63:ff:50:bc:e8:5d:5c:0b:a9:53:2e:3c:0c:
76:b6:99:b3:01:64:33:58:29:b4:1f:08:d7:09:f1:
e9:f5:21:02:df:bc:bd:18:76:04:01:38:03:00:3e:
db:2f:f8:77:6d:5e:88:d9:38:bb:50:98:05:7d:5c:
6c:a5:31:1c:34:44:fa:5f:9b:e7:5d:79:70:4e:4f:
ae:f7:26:93:63:4b:42:76:b6:f7:b3:ab:47:12:bd:
33:97:41:01:3b:2c:83:85:6e:6f:2c:16:4c:89:1d:
bb:a2:7b:07:24:ef:8e:f2:30:e9:6e:93:19:87:d0:
53:23:40:fa:3a:f5:43:90:ef:e7:d3:f7:51:5b:7e:
b8:d8:1c:31:b3:20:21:3a:d2:ff:38:52:99:e3:34:
72:bf:09:1b:0b:f0:42:50:03:e3:bb:0d:1b:77:89:
c3:28:4e:b2:ca:d5:f2:8c:0a:3f:c7:c7:e8:75:a4:
a2:bd:c9:b9:e4:18:e9:4c:89:4a:4f:af:41:5e:d7:
99:aa:3f:60:8c:0d:09:f5:cf:c4:de:24:bf:68:96:
0f:bc:60:63:f7:f0:5d:42:bf:c9:6f:bf:ef:91:05:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:50:B6:43:53:3C:4B:4F:F4:16:4F:ED:62:16:95:B8:81:83:F6
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:03:c3:c2:19:f1:af:49:d4:54:48:fe:fb:84:04:e3:4e:9c:
0b:78:16:2e:58:d0:88:5c:20:fe:68:99:33:fa:fb:76:9a:fb:
1a:12:c4:fb:f3:8a:20:bf:22:ed:b5:89:e5:c7:a0:cb:f0:5e:
83:50:20:11:70:20:97:78:a4:4e:84:58:9c:b1:9a:9b:5b:e4:
0a:18:88:dd:b5:af:a0:88:7f:81:11:da:11:94:5b:db:40:bd:
1a:2e:9d:04:24:34:63:a8:1b:cc:5d:8d:9b:a2:1c:cf:f8:87:
e7:7f:20:c2:ad:c0:d5:b3:7b:8d:3f:8c:d9:53:18:3e:a2:ea:
ba:52:23:05:79:76:71:cb:0f:30:5b:f3:87:a4:5a:41:04:58:
18:c0:ea:82:f4:73:1e:9b:64:a2:a6:78:bd:9b:29:af:90:48:
c4:17:3a:b8:11:43:a6:4d:73:1a:37:4e:bf:3c:d3:1f:79:d9:
4e:bf:7d:90:cb:77:52:65:4b:ff:07:1e:a0:e1:aa:65:08:7f:
5b:90:af:d6:b6:8f:1c:6d:8a:ea:5f:5d:f3:07:fe:44:9b:2d:
da:e0:66:03:8f:9d:a7:a8:f9:77:a8:76:79:eb:c8:56:99:cd:
50:26:9b:44:12:14:43:37:b2:c5:98:d5:56:9b:6a:1f:88:29:
23:cf:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:12:35 2025 by rpki-client