Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: ri1KrK4wT4jFpXxNoUUc4T0DBFYHBAP8js7PTWIIcag=
Subject key identifier: 2D:3C:BB:1C:14:CA:15:27:B5:61:F7:65:EE:B5:E0:CE:9A:A9:DC:B0
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 0194BCA9F0FBEF9BAD713A4757A1358F25DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 03F5
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: ymr4HbzHo82f3R+74dkanDA3D8t6nLiWFhU+W8oUbGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:fb:ef:9b:ad:71:3a:47:57:a1:35:8f:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=2d3cbb1c14ca1527b561f765eeb5e0ce9aa9dcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:3d:55:44:76:db:bb:8d:e4:d5:20:85:eb:
37:30:49:4c:6a:83:fd:03:11:de:aa:a3:f6:df:28:
8d:6d:74:2b:6d:95:df:0e:29:e4:13:88:d4:10:9e:
9b:c3:4e:3a:47:4a:a7:f7:6a:df:76:2c:de:f7:bc:
82:2e:e3:b0:97:bb:b4:2d:d0:32:e7:eb:06:cf:16:
9a:06:15:5f:2a:cb:b9:6a:4d:9d:7c:64:e2:e2:28:
b3:3d:04:f1:e5:45:50:f9:cd:3a:27:f1:ad:c7:e9:
31:c4:62:26:77:6c:67:4a:5e:bb:99:a2:fe:d1:ce:
fe:4f:7e:76:ca:4f:89:9b:30:c9:c2:6a:34:4d:48:
a3:f4:f5:8a:63:94:ae:4b:96:5b:aa:3c:33:66:f3:
4a:9c:51:cb:17:6c:e9:40:56:d6:b9:f3:e4:bb:b4:
ab:3a:65:59:ba:de:16:8d:04:13:ee:c8:d9:3c:13:
40:8b:13:01:e1:38:e6:9a:fa:e7:71:70:f1:37:10:
cf:1c:e0:e8:89:71:42:16:85:23:54:e0:2a:33:ad:
32:71:ab:b0:68:31:5d:83:3f:27:bd:0f:ea:4a:6b:
4a:88:4c:bc:a1:dc:f6:56:a2:b4:58:54:27:6a:21:
c0:db:db:9e:db:5a:03:ea:6a:47:81:9c:f4:2c:e6:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:BB:1C:14:CA:15:27:B5:61:F7:65:EE:B5:E0:CE:9A:A9:DC:B0
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:93:a7:a3:12:98:ad:da:fc:e4:56:1a:43:aa:1a:1b:1b:52:
ae:ee:9d:bc:36:eb:74:18:65:12:a9:2c:ba:08:4f:53:57:e7:
b0:24:88:5d:71:8b:b4:0c:a7:79:b0:73:6a:61:fa:69:cd:0b:
eb:d8:d3:b3:74:51:98:47:7c:1a:4b:5b:f0:ff:d1:53:1f:b5:
20:db:f4:0b:35:49:07:61:57:8c:07:63:a4:49:96:86:7c:fd:
d8:0f:82:83:f1:c4:eb:5a:f0:52:a3:9d:5e:11:4f:27:48:7e:
17:81:cc:3b:f1:89:56:9f:b7:14:52:8c:48:57:a5:19:95:22:
bb:4d:83:6f:6b:a2:b1:98:3d:3f:44:fa:23:c5:9c:6e:cd:9d:
4a:d3:9c:fb:e7:f9:59:c9:06:b4:7a:2f:0d:ca:77:ba:83:09:
f2:b7:70:ed:3b:35:04:51:79:1d:64:b8:bb:c6:fe:b3:b0:68:
2b:d5:5d:26:b0:39:85:10:58:9e:8f:43:e2:68:8c:f5:d4:22:
6f:38:3d:49:7a:97:90:35:e7:ed:9b:74:3d:b0:b7:41:68:c5:
0a:17:dc:62:b9:9b:e3:a5:95:06:bb:7d:cc:dd:d8:c3:1f:41:
b8:55:07:4b:a2:0b:bc:5a:0c:0e:0e:c9:36:5b:96:15:e2:13:
ab:09:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:13 2025 by rpki-client