Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: nhGAivQguWIpfMf5CGLeN+HsrHW8xe8/7FKbpINq2QE=
Subject key identifier: 54:97:C8:F8:E8:2A:43:38:F4:7C:11:8B:2D:AB:44:98:22:38:D8:62
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0194BC04A9E7BDE4D95CBA4F9A9BAD5E9347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 0FCF
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: TM88EiHd2W0CGMEMGnITTUOaGRIKdg1glGGRVvWJQlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a9:e7:bd:e4:d9:5c:ba:4f:9a:9b:ad:5e:93:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=5497c8f8e82a4338f47c118b2dab44982238d862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:f0:8e:ba:a4:8d:3d:18:24:83:ae:34:7b:
48:8f:3a:04:00:74:aa:9c:b2:77:7a:87:f1:24:a1:
f3:2e:4c:da:e0:19:03:44:a6:4e:2a:bc:1b:e7:84:
5c:f5:f6:98:01:40:75:3e:30:ec:78:01:f5:51:f4:
12:0d:81:97:0d:d7:c4:61:d7:89:b6:cb:59:25:61:
3d:26:65:00:14:1b:31:b7:b9:3b:67:a8:09:06:77:
9e:70:f8:b1:40:05:b5:91:a3:18:03:5e:fb:af:d2:
2e:c1:54:29:9d:6b:19:71:9a:57:75:7d:35:80:45:
7d:4c:0a:30:dd:81:68:0d:11:9e:34:d0:5d:a7:d6:
7e:7a:4f:3a:80:94:c3:e8:69:00:2a:7a:60:8f:70:
5c:ac:ef:55:a6:4f:5f:0f:13:f0:0a:78:a0:94:f5:
9a:8c:d7:a5:14:f7:e7:a8:1d:72:2f:93:4e:b4:42:
87:58:5b:05:c3:ee:50:87:c0:ae:77:a8:62:fc:f7:
05:e5:7f:20:70:65:d4:cd:f2:f9:1f:bc:bc:d3:6e:
4e:84:2e:05:f4:e0:00:8a:cf:37:54:ff:e4:ec:86:
92:3c:2e:19:8f:12:6c:db:a0:46:fe:73:1c:d3:d0:
1b:bd:49:1d:db:c1:87:e1:5a:7a:7d:7e:8c:64:06:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:97:C8:F8:E8:2A:43:38:F4:7C:11:8B:2D:AB:44:98:22:38:D8:62
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:17:c1:3e:8f:ca:73:c1:96:3d:6f:77:87:c8:8c:11:6d:92:
9e:c0:f9:3c:97:6d:4a:11:b7:85:63:45:9b:54:85:27:d1:dc:
a2:b7:7b:91:17:f3:89:d4:1e:10:ec:ad:64:99:2b:10:4a:68:
e1:63:62:87:58:aa:2b:02:65:33:c6:6f:e6:de:12:48:1e:26:
b8:58:ba:29:a4:9f:5b:70:f3:ea:01:bc:db:bd:db:0f:5c:e3:
74:7a:fe:52:cc:45:d8:c0:70:66:c5:e0:94:17:8c:4a:87:f6:
25:c2:59:f1:f5:75:57:2e:ba:e8:26:6e:9a:d2:bf:01:d0:e0:
60:b0:70:bf:bb:5d:25:02:32:56:1f:40:0e:a5:69:6e:8f:26:
fd:5f:0a:7d:e5:b6:16:6a:ea:4e:c9:27:99:30:e1:66:33:ff:
69:0c:8c:18:fb:b3:ea:c1:ea:4c:af:7f:30:e1:c9:07:0a:84:
80:df:36:e5:4f:ac:4e:c1:67:77:7c:8d:90:0d:97:26:35:e1:
bc:de:a2:57:ed:76:67:1c:d3:b3:9c:20:8c:7f:ef:a6:8b:bd:
58:bc:35:78:93:b7:a8:d0:d9:31:2b:70:cf:81:dd:16:1d:dd:
ab:6f:4a:8c:85:9d:5d:b6:f6:76:01:b8:23:23:31:06:aa:6c:
5e:db:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:49 2025 by rpki-client