Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier: tK/9OdfxZLKfFMSCEBoGcr5OBIe9eDLkVxALoxp7BwM=
Subject key identifier: 81:CC:FC:8F:A4:9B:7C:3E:07:DA:A5:9F:7D:08:3F:EE:71:57:72:12
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 0194BC72F17FD8AC4122725ADB11A9C6A6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: 9bKY/1Tdh1+UWhBvYaio78hA1M/zPFPTeWdduW9sxZ4=)
2: nP0sRhZHCL86Iv0j3SDGQv7wJ1s.roa (hash: 1vLkNr3Sn/sdaJf6eykh/ZGw0jccrm4CGLqN9g8GoFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:7f:d8:ac:41:22:72:5a:db:11:a9:c6:a6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=81ccfc8fa49b7c3e07daa59f7d083fee71577212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:a9:42:f3:86:f6:af:2c:00:9e:45:62:48:
64:18:b5:83:01:87:bf:de:22:9f:7f:21:c3:20:35:
60:5e:1f:c2:ea:d3:ef:87:ca:f6:b7:0b:c8:ad:ec:
3a:7b:4f:41:42:27:d9:c4:d8:f3:7e:7d:76:97:b3:
ad:4a:cd:c2:de:94:3a:fe:10:42:55:b4:68:af:45:
e1:80:c3:fb:10:8b:44:3b:e1:39:cc:34:1d:9b:1d:
c3:a5:55:89:55:0c:53:e5:5f:33:83:e1:24:86:66:
58:73:25:3f:f6:8e:94:dc:43:02:4a:95:87:c0:c0:
c7:34:01:a7:73:7f:61:50:27:c4:c4:2f:f3:76:3a:
9f:c9:e7:9e:a2:71:d1:bf:85:1f:25:91:44:0b:ae:
75:9c:d6:a1:b3:7b:fa:78:73:cd:99:89:03:ac:fc:
01:23:be:d7:9f:11:fc:6a:59:a7:a7:59:56:8f:14:
ce:cb:1a:b8:0d:a1:f1:8a:bb:d1:c8:4a:15:6d:f7:
80:29:cc:ca:a4:86:c2:cd:ec:aa:5b:6c:c6:f3:d8:
48:7f:14:5f:ad:29:6e:c7:96:1e:d2:6f:0d:c0:c8:
bd:6c:d0:ba:9c:4f:27:5d:fb:25:b9:16:13:fb:ce:
48:9a:0c:11:a7:3d:67:29:84:17:ff:b9:97:7d:4b:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CC:FC:8F:A4:9B:7C:3E:07:DA:A5:9F:7D:08:3F:EE:71:57:72:12
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:b7:7d:38:09:d5:73:35:fe:3a:10:80:a2:d1:86:64:0c:
51:dd:04:43:7d:be:fb:43:18:e7:04:21:0a:80:e0:13:f5:09:
88:34:c1:44:71:52:aa:6f:a5:86:74:00:64:82:12:d9:ef:b1:
30:38:9c:50:f7:3a:da:bf:40:3d:53:58:e0:c9:5f:a1:76:cc:
32:f8:a2:7d:87:79:25:ec:b5:a7:be:60:c7:d0:3f:5b:d5:02:
c0:d7:c2:93:39:58:c2:da:09:98:1f:94:52:a3:aa:36:7e:c0:
9f:5e:25:de:21:e3:44:9f:1d:81:9d:d3:6d:20:f9:d3:b0:d5:
f8:f1:cf:2a:34:1d:ce:7b:2f:2e:f0:b8:4b:d7:3a:eb:dc:3d:
f0:6c:39:9f:bd:69:6d:e2:11:ba:da:1a:1c:38:05:81:71:a1:
5f:c6:68:ba:ea:3e:5c:d2:50:68:3b:95:0d:6e:3f:a2:44:17:
87:c3:67:07:2c:4a:ab:94:0b:39:83:5e:01:d8:12:0e:d8:89:
78:7d:8b:7d:72:5a:ac:5c:df:d3:4d:e7:53:32:c4:fa:c8:64:
45:9a:c5:54:a3:5f:cb:a9:ad:8d:9d:e6:97:2b:06:0b:07:e7:
54:c9:bf:43:28:4d:33:ea:a7:a9:25:58:bc:76:47:92:8f:be:
18:cd:5e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:45 2025 by rpki-client