Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: fmS80a1V76gehcZ5ZBbP7ZVC02QF1YF+A02zYg6q6/g=
Subject key identifier: F6:68:51:DE:84:23:BA:74:26:80:D4:5E:D4:1A:9C:98:13:3E:08:CE
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 0194BC3C51D4D3CB0D315566E37275832C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 7C
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: nVh/ntb00TeWpGMcaPf6ZnZTjvWKHqDGB900OD3v/ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:51:d4:d3:cb:0d:31:55:66:e3:72:75:83:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=f66851de8423ba742680d45ed41a9c98133e08ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:14:c1:ae:62:3b:b3:53:21:1d:ed:6a:34:
ec:3a:a8:25:ec:72:5e:bd:4c:92:0c:44:e5:86:07:
bc:9f:97:bd:ee:36:31:4a:d9:52:7d:23:e8:68:ab:
47:d3:e8:ce:81:0e:b6:0b:75:7f:5c:d7:0a:f5:c3:
39:8e:e3:6e:d3:71:1a:70:6d:d9:02:6e:55:a8:a5:
c1:e4:a8:3e:1c:7f:f0:2f:8b:05:98:c8:f1:ef:d4:
0c:1d:f5:c2:c0:4d:ed:f7:d7:c8:79:60:38:91:e2:
d3:71:c5:fc:77:aa:20:e4:69:8f:22:08:90:0a:c8:
0e:30:f1:ae:a8:a0:f4:f8:ce:47:13:1e:83:d0:10:
68:28:ec:0a:69:e6:0a:26:d3:86:d8:c3:2f:74:8b:
fb:b3:63:c6:df:a3:de:f9:97:e2:a0:00:80:5f:8d:
22:8b:ff:1c:ab:bd:ee:a8:71:1a:b7:70:b8:63:2a:
13:66:73:e6:c9:31:da:82:ce:bd:cb:5a:84:4e:09:
95:c0:28:4d:be:92:84:37:a4:22:96:66:5d:4f:31:
61:3b:a7:b4:ea:c7:af:6b:3c:ea:16:8b:34:f0:16:
96:82:54:17:33:5d:fc:a1:de:4e:f0:1b:12:a2:2f:
6b:f2:83:16:38:e6:96:b3:ca:15:2b:38:72:f4:04:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:51:DE:84:23:BA:74:26:80:D4:5E:D4:1A:9C:98:13:3E:08:CE
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:6e:69:32:2d:da:0e:bf:98:b7:2d:3e:d9:eb:f8:3f:29:
5a:5d:54:48:76:1c:c1:8a:b0:3c:55:c0:2b:18:a4:23:60:39:
a2:04:a1:0d:80:06:6a:ff:65:29:98:b2:4b:10:65:d2:d0:7d:
7d:27:e2:70:e8:bf:07:3a:ba:b6:ea:e5:e7:7f:be:11:c7:fe:
cf:bb:be:a3:bb:be:a8:32:14:e8:bd:9e:55:82:3e:97:d8:f5:
df:e9:78:88:b6:a2:e9:46:26:c4:16:53:6d:81:97:20:a3:7c:
3a:6c:c2:70:77:60:f8:cf:0d:5d:ca:e5:6a:56:bc:f4:04:fc:
bf:6a:9e:83:38:ca:c4:82:1c:a0:3d:f3:ec:6e:ea:76:fb:91:
01:0b:c6:df:4b:be:ab:f6:8e:91:70:21:26:d1:4a:75:69:77:
ba:18:6d:d1:67:21:e5:93:c4:74:1d:63:e7:1a:c1:9d:b8:f3:
fd:60:2a:34:09:66:c5:6d:f0:37:96:c9:c4:f7:78:0b:0a:f8:
f2:43:31:1f:fe:17:fa:08:b9:87:30:2a:1f:8b:d1:df:0b:4e:
61:d3:b7:f6:c7:b4:5d:25:50:fc:38:c8:49:1d:0f:17:f4:bc:
53:5f:f4:22:f1:fd:a0:73:91:c5:55:f4:84:43:88:f5:54:f4:
f5:8b:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:37:03 2025 by rpki-client