Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: 0V1wHiHQUuD52oaRdZ2fu6+1TINBYH+r4HHccvMjrm8=
Subject key identifier: F4:4D:20:78:A9:79:C0:E2:DB:B5:F1:16:FB:0F:E3:57:4B:8A:C0:05
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 0194BD4E45B45890DA78B7D58D2DFD63896B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0A35
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: +Kz+0l4Ar6Hq+9B9CFA3vzAqc34cbVMEh+qfvAmH4lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:45:b4:58:90:da:78:b7:d5:8d:2d:fd:63:89:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=f44d2078a979c0e2dbb5f116fb0fe3574b8ac005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:f8:61:5a:f9:b4:72:91:12:81:03:a2:92:
b9:49:cd:d8:b0:1a:c8:d8:5d:c3:d2:4e:ae:d6:80:
84:9b:f5:70:d8:df:42:76:08:21:0d:b3:cd:3a:44:
34:a1:ef:1c:db:f4:cf:13:2e:b7:d5:fe:37:99:6f:
4d:e4:2a:e1:f1:80:38:c5:eb:2d:fb:2f:7d:f0:cf:
6c:c8:6d:e0:8f:da:e5:78:f4:30:95:49:90:f2:da:
6f:68:5b:5b:a7:7d:82:55:4f:b5:0d:9d:46:0d:93:
ee:56:93:84:9d:7b:da:0e:87:7b:14:c1:7f:1c:80:
a0:a1:ee:cd:60:9e:d0:81:42:79:02:c6:eb:69:b6:
e3:8d:81:f5:94:20:12:30:23:98:6d:16:33:78:70:
7d:df:ea:54:10:9f:4a:9d:b8:57:2d:7b:d6:34:e0:
cd:2a:89:b7:ec:12:23:a7:41:f0:5f:e6:df:a5:ba:
59:6e:13:e3:53:e3:11:d6:4b:1a:ad:7a:e9:f6:05:
9c:00:67:02:91:1f:63:ba:6d:a6:b5:61:1b:d7:3a:
36:63:a8:dd:31:db:18:8d:26:c9:0b:4d:cb:96:d4:
e1:ee:c2:74:cd:ba:9f:01:55:92:83:f7:b6:44:56:
59:61:5e:0f:32:41:92:59:d0:de:d6:85:bd:1d:ad:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4D:20:78:A9:79:C0:E2:DB:B5:F1:16:FB:0F:E3:57:4B:8A:C0:05
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:a9:77:5e:46:00:82:ad:db:08:fc:28:a0:dc:35:16:f8:
20:4b:7d:f9:61:f7:63:df:2a:9e:fc:ec:5a:75:9f:d5:94:5e:
4d:ac:3f:b2:ca:e1:b8:1f:31:50:3d:c6:86:d2:a6:56:1e:75:
f9:c8:25:e4:95:09:02:b5:18:d9:e4:32:c4:4f:fb:b9:04:3d:
93:d5:9f:ce:c5:6e:38:2b:86:31:17:ca:cd:41:5e:bc:94:99:
a7:45:42:c9:f4:ae:68:5f:fe:03:3e:08:c2:f9:d7:7a:be:14:
96:a4:4e:2a:a2:67:b9:ee:ef:81:b4:23:df:08:8d:7a:50:70:
83:c8:70:86:48:28:b0:9e:da:62:31:6d:3c:66:54:10:f5:05:
c3:75:8f:c5:b0:0b:3a:d3:ed:58:7a:28:bb:05:96:71:75:92:
f0:36:c9:82:67:eb:5e:9a:04:59:a4:3a:a3:4e:c8:db:43:1b:
ef:0b:a3:15:98:69:b2:ba:85:bb:d2:fb:9a:b7:fb:26:fa:d5:
0a:29:7d:bc:f5:49:1f:df:28:8f:4c:7f:88:75:1c:fe:77:4b:
5d:d7:ab:e1:c9:0e:3d:8f:33:6f:7b:48:e3:47:93:a7:34:3f:
86:68:6f:54:d4:71:30:15:bc:49:ee:22:25:d8:76:28:3a:27:
8f:cf:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:23 2025 by rpki-client