Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: GwqbnfEU3VzF3aUfXb+7l2zbclMpKHMJfkJoRGu87oc=
Subject key identifier: E4:BC:48:FA:C7:38:A6:9C:DD:F5:AB:68:F3:63:2C:E5:34:E3:C6:3C
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 0194BBCE5B10E1CF2400DEE96CAAEFB63C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 1366
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: 7SGl6Rreb9soMLB0OmC8Mh3zrCjWu7lAdvrLxj2xi2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5b:10:e1:cf:24:00:de:e9:6c:aa:ef:b6:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=e4bc48fac738a69cddf5ab68f3632ce534e3c63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:65:80:1f:eb:78:39:af:2a:52:9b:a6:cf:
a8:c1:0e:81:e6:e6:82:6c:3b:f4:6e:45:ae:61:44:
e2:c9:a4:50:6e:51:f8:47:06:f2:e8:d4:a7:8e:74:
0d:16:a5:a5:bf:56:6c:04:d9:6e:56:92:cb:68:2f:
92:d8:56:d2:77:10:00:0d:72:20:4f:e3:83:4d:cc:
f5:81:17:11:c6:4e:81:07:97:2e:1c:7d:6b:ec:ca:
7e:82:38:aa:44:59:82:15:2e:4d:c5:35:29:66:96:
f6:5a:ab:5a:a5:c4:a2:14:96:33:63:a2:5a:c4:cc:
23:37:a4:cb:2c:29:5c:a0:90:5c:bc:25:4c:d8:69:
dc:65:c6:a4:d5:c6:70:ed:e9:94:34:f3:c7:0c:54:
6c:55:4d:c6:e6:eb:12:aa:04:59:66:ca:2a:d6:3a:
a7:27:70:80:2d:33:fb:00:d1:e7:0e:3b:5c:df:64:
b1:c7:c8:0f:0f:ad:57:3f:8e:d7:b4:1e:74:0f:80:
a2:8f:6e:bc:a4:5d:eb:a5:82:99:67:63:e6:0c:7f:
7e:45:86:0a:6d:51:df:1a:4d:e6:03:a1:56:35:4c:
6c:d3:62:b6:31:e5:9c:96:69:47:fd:9a:81:df:63:
ae:27:52:10:bc:99:2a:ef:54:8e:16:a7:5d:5c:54:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:48:FA:C7:38:A6:9C:DD:F5:AB:68:F3:63:2C:E5:34:E3:C6:3C
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:70:ff:31:91:31:35:a6:ec:ed:ca:ed:55:64:5a:c5:bc:47:
38:dd:37:e7:0c:41:11:da:27:5f:82:e0:45:7f:4c:c0:48:6b:
df:6f:09:a2:12:42:89:15:d2:99:ed:a0:16:28:f1:a1:22:70:
7c:73:a7:fc:e2:d7:fe:6e:37:c5:32:b5:a9:5a:23:06:8e:aa:
37:ff:ae:1e:e2:79:97:7c:d8:07:b3:a0:cc:11:5b:72:49:f8:
42:f9:fd:fb:45:f1:6c:29:4b:73:99:ce:e3:eb:78:cf:3c:fb:
95:66:f0:f3:d6:0a:4d:dc:e9:c8:a5:54:a7:ad:99:f0:74:3f:
f8:2e:b0:20:0b:b3:bc:0c:00:aa:e8:9d:99:89:6e:22:65:1f:
db:f5:78:e1:39:e5:3f:cb:dd:79:39:0c:1a:34:b7:79:1a:c1:
ba:53:7d:27:d5:a3:82:2b:5b:2e:34:13:e3:3e:2c:f3:40:b2:
bc:32:c7:f0:6f:b7:0e:58:8c:78:3d:b0:5d:96:bc:4a:57:bc:
a3:94:70:ee:bb:af:15:0c:32:f2:c5:ef:48:bb:9f:e4:80:6b:
29:40:a5:15:62:8c:95:a7:80:15:77:b9:6f:d0:85:b1:61:c4:
f0:b4:70:ff:c9:48:a2:2e:7c:43:25:26:f0:98:11:7f:f4:19:
a2:17:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:41 2025 by rpki-client