Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: /0JbHEnYpEoyJ7aUbCm7sCd1v4otZNNiOkVVF14WLqs=
Subject key identifier: 10:E2:61:F0:10:76:1B:62:21:37:9F:E4:B1:7F:8A:B7:78:82:D4:87
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 0194BC3CC667756F9892EE12FE818375D261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:26 +0000
Manifest this update: Fri 31 Jan 2025 12:01:26 +0000
Manifest next update: Sat 01 Feb 2025 12:01:26 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: KUUrtyUEpPYYiZ0xtm2GUDzOlMOX718plZxZud3wr/Y=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c6:67:75:6f:98:92:ee:12:fe:81:83:75:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Jan 31 12:01:26 2025 GMT
Not After : Feb 1 12:01:26 2025 GMT
Subject: CN=10e261f010761b6221379fe4b17f8ab77882d487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:ea:09:b6:89:24:66:2c:bf:c0:88:25:05:
cc:d4:03:ad:c7:ae:2b:6b:88:e4:e5:63:52:13:8e:
d5:a2:09:8a:9a:ab:cc:22:30:76:6d:8d:e9:7c:6f:
1a:0a:35:05:b7:31:b9:7e:31:20:15:1f:b7:0e:e2:
6c:43:80:c8:8c:03:32:4b:db:33:7d:27:f4:9f:34:
e2:c7:46:22:f3:02:97:29:c0:33:07:f0:7e:cf:a1:
fa:bd:f7:51:0c:41:2c:f1:81:79:21:e8:56:5c:4b:
9b:f3:f9:03:03:a2:43:a4:14:6c:fd:df:a8:33:50:
79:4d:a7:20:e3:81:ad:09:12:82:8a:67:ef:4f:4f:
cd:80:91:75:ec:a2:93:bf:bf:60:08:b8:23:e4:d9:
7f:b4:04:a0:16:d1:71:a7:d0:cf:43:21:6f:f6:31:
2c:38:a0:f9:94:09:d1:9f:35:9a:67:03:f5:10:ab:
db:76:ac:fb:1e:4e:b8:da:d8:a3:1e:f6:e7:0b:07:
0c:93:47:05:2a:07:ed:32:4b:e3:ed:08:f1:37:29:
3d:5c:50:99:79:82:1b:ce:c1:48:0e:33:1d:48:4a:
fb:8e:98:33:8b:02:48:da:d8:e8:2d:ac:20:a3:90:
9e:a5:74:13:e7:af:7c:66:24:61:26:cc:75:44:c9:
73:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E2:61:F0:10:76:1B:62:21:37:9F:E4:B1:7F:8A:B7:78:82:D4:87
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:ac:51:bb:6e:59:43:f8:02:92:83:8a:77:77:bd:97:cd:
62:e3:fa:c7:fa:13:ac:01:0e:a9:71:2a:2b:40:bd:68:9d:7d:
0a:d6:21:7f:6f:85:73:f7:db:c5:01:12:aa:79:12:19:8f:a7:
e8:8c:ca:a4:5a:73:6c:5c:85:f3:e2:94:17:b5:bf:de:e6:4b:
1c:fc:7c:16:10:1a:57:af:28:96:10:70:de:3e:e2:c0:f8:16:
d3:43:b9:67:f2:24:49:61:16:20:8f:cc:74:df:4e:eb:58:ae:
40:3f:d5:88:b4:25:b1:13:ea:9a:6f:7f:66:58:31:c5:79:68:
e1:29:0f:6a:0e:2b:cb:8e:f7:78:4d:e4:83:81:9e:e0:c8:ea:
8c:31:ec:85:31:26:38:f8:81:ed:d9:d5:32:ae:cb:06:2c:e9:
cb:34:35:d6:29:28:e6:cd:63:b5:65:be:1d:b0:51:bf:da:7e:
7c:6b:87:c8:22:06:d8:ac:ad:6b:2f:18:91:20:8f:bf:9c:d7:
91:a4:c0:99:4d:50:6c:e4:bc:fe:3e:f2:53:6b:c8:8a:a4:4c:
d4:e5:2d:18:6f:c6:07:5f:40:a6:54:0d:b9:dc:68:15:8b:d9:
80:73:84:ee:ee:53:0f:2b:b1:8f:17:f4:c8:ff:f4:51:27:b6:
d0:f6:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:55 2025 by rpki-client