Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: W0GjSkERpvxRwpSlGd7rS0MPsCb8rlXec8lVzozqT68=
Subject key identifier: A6:4E:49:A7:05:1F:B6:D1:12:8F:6D:14:46:4D:76:14:5A:36:7F:77
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 0194BC051D14DE75709438A306B998D35193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 0377
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: kt5LMfgPQFu+PpbeLdH3z5yRhnqarpGfknN/HjVsliY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:14:de:75:70:94:38:a3:06:b9:98:d3:51:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=a64e49a7051fb6d1128f6d14464d76145a367f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:ab:ad:90:9f:d9:06:a7:89:0c:51:c1:ec:
c9:bc:3e:7a:59:cd:31:b5:90:97:7f:32:f0:4e:4b:
9b:b7:7e:b8:f2:81:ac:40:ed:cd:69:21:b3:5e:78:
a4:33:c7:f0:e8:db:6b:eb:70:66:80:e8:37:c8:b3:
16:69:20:b7:82:88:80:74:5f:65:f3:f9:48:16:47:
e4:05:e5:30:1c:6d:1c:4d:8e:87:72:15:a8:e6:cd:
b0:0d:df:c1:88:9e:ec:a2:0b:89:de:e5:4c:35:61:
ea:08:c0:29:87:d6:b0:99:b9:80:f4:3d:42:b3:48:
be:95:ff:84:2e:f2:10:b7:3d:e3:7f:7b:75:6b:0c:
86:a1:14:d6:46:65:5d:80:66:76:6c:8a:d2:7e:1a:
84:de:fa:f9:13:12:85:f5:eb:91:9c:b5:6a:d8:cb:
b8:62:7a:8b:61:4f:5e:e1:f1:e3:8a:bd:47:ac:e6:
de:8c:c9:8b:5e:fb:5d:fd:73:e4:9b:2e:6c:1d:43:
f8:f1:6f:86:fe:50:ca:c8:65:8b:a8:56:f2:e5:0c:
74:84:25:a0:ce:d0:7d:fe:62:1d:b6:1e:2b:ea:7a:
d5:d1:41:69:e1:2d:aa:9f:ac:57:21:4c:6b:23:ac:
01:d2:28:e5:96:cf:33:8d:d5:ae:4b:77:40:2d:16:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:49:A7:05:1F:B6:D1:12:8F:6D:14:46:4D:76:14:5A:36:7F:77
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:76:fc:a6:3c:d6:1e:99:32:d9:06:4e:bf:12:75:bb:e1:3b:
ec:11:6a:7b:67:30:a0:a9:c1:ca:a9:8d:3c:21:c5:f8:d4:84:
10:94:5d:83:28:24:dc:68:44:12:bf:49:d8:55:43:4a:4d:1e:
13:33:7a:be:51:7d:7a:c1:89:84:2e:29:b3:f5:db:e0:4b:f1:
98:78:9b:27:a2:f4:cc:92:0c:67:87:0a:cd:f8:1c:a7:4f:9e:
d3:0a:6d:48:fe:f2:84:f6:d0:51:7b:9c:aa:c8:25:33:c4:13:
b8:73:ba:1b:be:71:48:4b:dd:6c:38:00:45:ab:c0:f3:41:a5:
9c:31:9f:b8:cc:36:31:b9:af:90:5f:8c:35:44:16:21:73:20:
47:7d:8f:23:77:d4:05:2c:58:b6:65:e2:aa:d7:d1:1a:7e:df:
8f:bc:a4:47:0b:d2:f6:64:db:ce:08:f8:3e:57:07:46:27:04:
58:cc:35:a5:43:06:f6:3e:2a:81:51:b3:63:b1:4f:e0:15:3f:
dc:87:4b:6a:c4:ff:f1:63:ab:3f:d0:7c:05:b7:f5:60:ba:10:
e6:91:bd:11:ed:0a:20:19:f0:10:d9:9b:6b:6e:7a:7f:1b:88:
ce:f4:60:f7:39:b6:28:fe:00:4c:5e:53:66:fb:21:2a:24:45:
73:ef:8a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:38:41 2025 by rpki-client