Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft
File: XTTdv33KsQy_aCKXkh61gS2QUHE.mft (raw, json)
Hash identifier: nrBTXm22NfbTeaNkSfN5J1amYISq9nL5LnpdcGZ8A4Q=
Subject key identifier: 72:75:9D:4C:3F:F8:C8:45:CC:E3:C3:B4:B9:E2:CB:80:73:99:F8:7D
Authority key identifier: 5D:34:DD:BF:7D:CA:B1:0C:BF:68:22:97:92:1E:B5:81:2D:90:50:71
Certificate issuer: /CN=5d34ddbf7dcab10cbf682297921eb5812d905071
Certificate serial: 0194BD858B343D0C033E11D3574E62ADA9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTTdv33KsQy_aCKXkh61gS2QUHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft
Manifest number: 0329
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: S6aYdrXE8VeCcP5w8D7hhhcOGoc.roa (hash: csN/l/mC6C7LyFwDFQUEKU3wX0HgZWqjImlEztzBO3Q=)
2: XTTdv33KsQy_aCKXkh61gS2QUHE.crl (hash: cBq7ZAK26GsE+q14iXmZ9821coiMjjmEf4Dm4ZF7VYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:34:3d:0c:03:3e:11:d3:57:4e:62:ad:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d34ddbf7dcab10cbf682297921eb5812d905071
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=72759d4c3ff8c845cce3c3b4b9e2cb807399f87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:6b:ec:8f:c8:eb:23:d8:db:aa:2d:7c:9e:
5d:d5:01:da:6b:d8:9e:fd:0e:d6:ec:75:b8:dd:cd:
b0:87:d6:93:8a:f7:5e:5c:aa:8a:e3:3d:c2:8c:db:
09:72:9d:b1:bd:67:cb:04:74:29:8a:ba:cc:30:5e:
d5:01:5c:b0:13:18:1a:06:f5:48:07:96:54:31:dc:
ef:cf:d4:ae:ef:f2:ba:15:98:2f:c2:06:a4:5f:a1:
15:ff:bc:2f:cf:f1:ae:88:e9:de:c8:65:a8:80:38:
4f:34:cf:a7:e6:10:91:2d:2d:69:75:de:38:b9:e9:
e5:3e:a4:cb:91:11:51:1b:8d:e6:41:57:d9:95:2f:
c6:3d:bf:a4:61:e1:32:92:bf:1e:d7:4b:98:37:cd:
e0:f2:18:95:e9:03:42:66:cb:13:31:57:05:89:37:
0c:eb:68:af:01:60:38:db:c2:db:1d:1c:8c:ce:eb:
7b:a3:fc:fe:d7:ea:99:ac:51:db:9d:13:67:97:b2:
0c:79:da:ea:fe:b4:19:c6:7f:2b:28:d4:82:ef:6a:
c1:38:e9:e5:42:f5:bb:d9:5e:56:c0:53:9f:d1:40:
49:bc:a3:ab:94:29:3b:9b:25:b7:a5:2b:98:8e:0d:
ef:96:f9:28:82:82:5f:ff:3d:fd:d1:9f:dc:4f:21:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:9D:4C:3F:F8:C8:45:CC:E3:C3:B4:B9:E2:CB:80:73:99:F8:7D
X509v3 Authority Key Identifier:
keyid:5D:34:DD:BF:7D:CA:B1:0C:BF:68:22:97:92:1E:B5:81:2D:90:50:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTTdv33KsQy_aCKXkh61gS2QUHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1970d-9f7e-4c4a-8b04-5cee6d5f1a12/1/XTTdv33KsQy_aCKXkh61gS2QUHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:60:19:84:53:68:0c:39:a2:cd:c6:32:b4:8b:08:d0:64:
e5:74:cb:6b:61:ee:dd:82:9a:b4:7a:8d:36:93:36:28:ba:66:
56:4b:b1:fa:6d:bc:91:18:cd:05:63:5d:47:89:d9:b6:12:c9:
02:9b:59:63:14:da:07:1b:57:0f:3b:e2:2c:60:67:df:91:c2:
2d:54:67:82:d4:de:c9:13:26:cb:60:e3:a5:06:c6:57:65:3e:
31:3d:2b:70:a2:44:71:c4:21:b9:ac:d7:94:a7:88:53:b2:15:
1e:a3:a7:a9:c4:be:6f:c8:57:13:9d:39:3d:e6:65:19:78:21:
42:7d:64:32:97:34:99:eb:cd:6d:e8:bc:2a:bc:ad:66:d7:1f:
80:04:03:4a:6d:9c:56:70:b0:fb:cf:2b:0d:5f:b7:a6:96:9f:
1d:d0:85:3f:9f:06:1b:af:a9:75:c0:6f:1c:2c:ae:6b:41:49:
fa:fc:d5:ff:36:c9:7c:c3:82:c8:39:95:c1:d6:19:8e:ce:71:
df:2f:9e:21:07:96:2a:4f:c7:03:ed:ce:69:9e:09:cb:3f:6e:
88:26:85:cb:c8:0f:6d:39:9f:85:8b:e0:db:57:ee:c3:89:07:
3d:5e:53:a7:11:7a:fa:f1:c9:39:b7:ce:bf:cb:bb:94:21:92:
36:a2:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:14 2025 by rpki-client