Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: 1ReTCypXSaKFCb74TiwpYpEBUtXrifeJcn/7Mhy8SCI=
Subject key identifier: 12:22:29:75:DF:27:1D:20:A0:23:DC:EC:D9:AD:1D:EC:8B:81:C9:25
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 0194BBCEBB553298A668C5801188A80B0EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 0F
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: 1pA9j0yY1H+CcIy1i99j596WL8c7sFn0L1OUkLdCB/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bb:55:32:98:a6:68:c5:80:11:88:a8:0b:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=12222975df271d20a023dcecd9ad1dec8b81c925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:31:93:99:cd:3f:8c:91:97:df:89:6f:12:
c2:38:bb:c6:1a:43:69:ef:79:68:e1:ad:df:8b:e1:
7c:4c:a1:ab:1d:2d:b2:d2:d9:44:38:4b:4f:e9:bb:
61:2b:06:04:0e:00:6b:db:34:a3:c1:e5:32:1c:ec:
17:fe:31:0a:10:a2:6f:84:27:3f:7f:06:d5:2e:37:
10:ba:5c:0c:21:23:2e:2e:5c:57:81:c1:23:d1:26:
c0:47:9c:b6:7d:de:d5:7e:ef:2f:18:eb:fd:84:ac:
66:06:f5:71:af:7c:8f:ce:98:8b:fc:34:af:ec:01:
f1:28:1d:94:22:5d:f6:d8:89:70:25:90:72:5d:e4:
9c:23:44:d6:bc:41:a0:9b:c2:8e:7b:62:88:b8:ab:
58:2b:13:a4:2e:4c:c9:e3:f0:1e:1c:3f:b4:7a:05:
51:60:f9:18:a3:ca:e4:49:40:66:c8:c4:3a:83:99:
ca:1d:3d:c9:4d:02:77:c3:9a:cc:76:3e:7d:6a:62:
0b:98:85:76:b7:84:ca:55:32:5d:70:27:b3:8c:8f:
1e:55:a2:70:55:28:15:2d:11:d1:db:62:0d:56:89:
7d:44:29:af:3f:df:4c:ef:6a:13:d0:e9:0e:31:36:
32:28:da:bd:3c:aa:e9:08:f8:6d:95:e6:70:6b:ce:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:29:75:DF:27:1D:20:A0:23:DC:EC:D9:AD:1D:EC:8B:81:C9:25
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3e:44:1f:e0:ee:21:fe:76:ca:bf:6f:e8:f8:b9:56:f0:26:
b8:60:90:b1:34:0f:fa:fb:6a:7c:09:8a:10:9b:e1:ac:87:86:
c1:9f:85:fe:b8:56:6f:c0:68:8d:96:cf:bb:b0:5f:38:e4:d9:
11:60:d4:5c:a7:1f:b6:77:b1:f5:36:32:ca:d2:58:99:57:18:
34:18:1d:56:d6:ed:05:3b:e7:89:56:ff:01:d5:bd:e7:c4:6b:
69:a3:77:4f:4d:37:17:a5:b6:0a:0e:93:29:2c:3d:c6:44:01:
9b:5b:bd:32:97:ae:07:43:a6:f8:81:3b:b1:8f:01:79:43:c4:
81:48:74:27:6b:6c:0a:e9:f0:87:1a:4c:2d:44:03:4c:bd:c4:
bf:93:ae:02:de:86:36:bb:00:cf:db:37:0e:15:bc:ea:fe:40:
22:76:59:e1:f6:63:2f:26:70:91:9a:6c:45:bd:47:58:20:c3:
63:ab:4e:53:3d:71:de:83:c0:ba:62:82:8c:f7:fa:e8:a4:86:
d7:7f:cf:0e:be:a5:de:30:e4:46:56:31:5a:4a:95:fc:8f:fa:
a4:c1:7c:8a:ef:ec:4a:f2:d4:7d:50:88:7f:1f:a1:1b:a7:ad:
20:50:e7:05:b6:cd:7b:37:37:85:71:7d:18:c1:66:7c:4e:e0:
12:90:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:19 2025 by rpki-client