Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
File: xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft (raw, json)
Hash identifier: B/N6Kfk1yBpsuiYvSGU8KTyji/qjimcGBblvN7TzxXI=
Subject key identifier: 05:D8:1E:B5:D1:24:34:C4:DA:93:9F:63:F3:F1:06:07:AE:55:C3:D1
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 0194BCAA41F3A963F2C16F4A7B6BA2A39987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
Manifest number: 0B17
Signing time: Fri 31 Jan 2025 14:01:02 +0000
Manifest this update: Fri 31 Jan 2025 14:01:02 +0000
Manifest next update: Sat 01 Feb 2025 14:01:02 +0000
Files and hashes: 1: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (hash: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=)
2: xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl (hash: Q+76mvls9rzE2RAfxCbJCJgiTbidpTAA0oStcYBk/Vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:41:f3:a9:63:f2:c1:6f:4a:7b:6b:a2:a3:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jan 31 14:01:02 2025 GMT
Not After : Feb 1 14:01:02 2025 GMT
Subject: CN=05d81eb5d12434c4da939f63f3f10607ae55c3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:26:8d:c6:9c:d7:79:9e:43:2e:5b:3e:cb:
34:85:ef:84:5d:d2:42:3a:ff:df:0a:31:58:7c:15:
ac:c6:63:17:a7:19:5a:9a:27:bb:f4:af:a6:d2:53:
eb:ac:3e:88:ce:ae:be:d0:9b:e0:08:bb:fa:83:91:
05:c6:6d:c2:98:1f:0b:9a:fc:1f:cf:21:9d:5c:08:
28:36:d2:2b:c9:27:82:db:8a:64:57:64:4d:e5:6a:
ee:79:4e:06:4b:25:14:e2:42:35:ef:2a:76:55:90:
66:9d:eb:c5:4a:a9:48:36:75:7a:7a:9b:75:59:67:
21:b0:6c:45:c0:f7:2d:23:0e:3f:3e:2d:85:6f:7c:
49:bd:9c:5a:88:41:69:eb:e9:49:58:d8:b8:4b:39:
57:aa:92:ae:ef:a8:09:dc:61:36:5b:ad:32:d9:73:
44:48:65:5b:6c:5a:c4:8f:1d:7e:ec:2f:39:32:58:
45:16:a6:04:a8:85:76:d8:9f:15:f0:8b:ad:72:a9:
ea:1f:e2:ae:56:06:68:bf:9b:6c:c7:26:58:81:7f:
fa:ba:24:2c:1e:1e:79:ec:21:f3:6d:a0:26:a9:32:
de:58:36:b5:c0:40:50:e9:d3:91:89:52:91:79:01:
41:b9:32:74:18:a7:55:21:14:28:06:5b:20:d5:df:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:1E:B5:D1:24:34:C4:DA:93:9F:63:F3:F1:06:07:AE:55:C3:D1
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a5:b0:4a:b0:0a:91:51:3c:0a:e8:36:f5:fa:a8:07:8c:60:
b2:34:a7:e4:27:19:e5:d3:3d:ab:eb:96:cb:ac:89:4b:93:66:
d1:da:de:39:25:80:2c:46:0d:27:cd:d5:65:a3:71:9b:9e:83:
c7:f5:b7:f8:e1:98:4e:c0:1f:b3:d8:d9:41:b4:3a:de:81:32:
1e:91:5d:ed:75:18:b7:3c:f8:0c:f3:7a:fc:bd:1e:9e:dd:15:
18:fd:79:d4:43:88:f8:c7:a1:ae:77:6f:36:8f:1a:ae:3e:84:
60:28:3c:0c:43:a3:ce:e6:aa:bf:d2:87:b9:74:fb:58:77:16:
52:cf:f0:6c:3f:76:13:3a:1d:9e:3a:4f:fa:8e:d0:30:3d:5b:
5d:dc:46:6b:d0:e2:d2:5b:9d:6f:95:11:68:02:15:57:4f:9c:
ee:e7:40:0e:48:6d:78:2e:f5:b5:2c:66:1d:c0:c3:59:c0:ee:
d8:73:5b:35:2d:78:e2:65:8a:dd:94:be:c2:1c:a8:2b:f8:01:
4c:ca:fa:33:c1:e1:93:9e:64:8e:d7:7f:aa:a2:e5:fa:5f:62:
fb:53:12:c2:e3:56:20:f8:2e:48:c2:24:ee:2c:7e:73:23:49:
0f:d1:ba:48:dd:c4:e4:8a:8f:e8:ea:e4:9c:e9:7d:3d:70:aa:
62:3c:bb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:56 2025 by rpki-client