Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: XKOdmlvJiWnUw73YjdEaPbPUq64li9sUvV52GubBvKU=
Subject key identifier: DA:5D:DD:99:77:99:80:69:A2:EC:03:B6:BC:CB:4E:CA:A0:BC:8C:4F
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 0194BD17720BFF76E0F10C0324015E7F52FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: rg/TjSG8UeHUjlpKw+cTKLV/t9UkVBsW3WTBdQf0ZU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:0b:ff:76:e0:f1:0c:03:24:01:5e:7f:52:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=da5ddd9977998069a2ec03b6bccb4ecaa0bc8c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:47:da:be:7f:81:cc:11:0f:75:3d:81:e7:
a0:be:66:9b:92:ba:fd:a0:0b:f2:a7:d1:1e:33:7a:
9b:a6:5b:6f:2f:99:a8:87:4a:eb:53:e7:ff:01:c1:
59:98:63:fc:05:d9:d3:43:89:8f:45:3e:99:e4:66:
13:ce:74:bb:15:22:23:f2:46:61:f8:16:26:06:cb:
87:6f:58:39:00:7a:fc:ad:4f:94:a7:7c:1d:9c:d3:
4e:f6:9c:8e:aa:b0:dd:fa:13:e1:54:7b:9b:0d:50:
fe:1a:10:4b:3c:67:0d:8d:03:18:d2:41:20:34:95:
19:6c:71:d3:4e:cc:0c:51:58:e1:db:71:bc:d8:52:
b4:9c:5b:c5:0e:60:a5:d6:29:3a:13:af:81:fe:af:
22:c7:c1:e2:d9:db:35:1c:0f:3a:e2:3c:a9:c6:61:
71:71:ab:75:f3:3f:25:20:60:67:82:51:8a:d2:64:
42:f0:12:04:cb:e2:62:58:47:43:2b:e2:d4:b9:67:
54:aa:46:26:03:b3:1d:31:69:43:b9:d2:9e:ca:24:
45:2c:33:48:dd:7b:2c:44:5a:ac:3c:f7:d2:81:af:
ea:3b:c0:19:46:54:9b:2a:7d:c0:bc:30:0f:00:0a:
11:75:2e:3f:a7:ae:85:8f:78:7f:d8:26:9d:49:59:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:DD:99:77:99:80:69:A2:EC:03:B6:BC:CB:4E:CA:A0:BC:8C:4F
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:72:62:99:54:d0:60:35:4d:b2:91:e0:e4:ed:dc:00:77:
ee:d5:44:af:44:82:42:cb:f2:2f:9d:38:9d:da:98:52:f6:63:
3c:ae:19:53:36:fd:f9:0f:37:7c:1f:ad:ec:53:05:95:7c:d3:
bb:cf:9d:a7:b1:22:fa:22:5d:b5:81:8e:d4:df:dc:16:10:d8:
eb:0d:42:42:5f:65:e9:6d:64:c2:da:31:e7:76:22:c1:89:46:
7f:91:a4:4c:5e:04:a2:c1:2c:9e:00:64:a9:27:81:4f:1b:7e:
42:08:8d:e7:b9:f3:b8:5d:5c:04:e3:22:83:98:a5:33:b3:23:
b3:ae:7b:f4:3e:82:20:ce:f5:5c:9d:11:3d:31:30:aa:64:60:
44:48:96:2b:57:ba:68:6d:1c:bf:84:b2:07:c5:22:e8:51:88:
a9:69:00:c7:2d:27:a0:fa:35:50:04:a1:58:32:9c:dd:f2:e5:
f8:41:e7:29:d7:0c:38:ef:fd:87:e3:76:c1:4b:23:23:11:bf:
06:9f:92:6b:36:c0:e1:ac:68:2c:f0:3f:79:22:8a:86:62:dc:
5b:10:52:ea:7a:a7:72:50:a0:16:b4:5c:b0:7b:ff:7d:2b:21:
ec:58:9d:4d:87:d0:55:c6:5b:07:25:50:81:fd:79:0b:5e:06:
c8:8c:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:38 2025 by rpki-client