Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: +Gi4kdfkaPJ0tlEc0dTn8mREuk7Fgz+9J9tkvs5NibA=
Subject key identifier: CA:FD:28:1C:DF:E6:82:DC:6E:E7:0C:5F:37:08:2A:E0:C6:62:B7:76
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 0194BD4EB084EE199BBF7A97404672E04CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: uESaUkVpzeStFzLvnaDQoceGTYJjxWW3ZevDRNB/BLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b0:84:ee:19:9b:bf:7a:97:40:46:72:e0:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=cafd281cdfe682dc6ee70c5f37082ae0c662b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:d5:a5:fb:13:65:a2:d0:3f:28:ac:1e:8b:
f3:63:5f:b2:70:44:33:83:89:89:94:c1:5d:7e:51:
50:3b:9e:cd:5d:56:28:3f:e2:fe:48:97:bb:89:73:
b5:0b:74:6c:49:ef:05:cb:ef:09:53:33:a2:77:d0:
d8:93:3f:83:94:73:ed:2d:1b:90:55:4b:16:b1:34:
54:06:37:82:be:10:1b:8b:3d:37:68:80:4a:89:da:
e6:8e:51:91:92:c0:f3:ad:b3:f2:88:e4:20:98:5e:
7f:7f:c2:7b:49:47:ed:ba:4a:d6:37:ea:85:f7:a2:
f8:00:e8:f9:93:1b:e4:eb:22:76:48:60:9e:8f:26:
ac:0b:71:a8:f1:b7:bd:24:e0:32:b3:1b:97:ee:f1:
3e:0f:e9:fb:44:2c:d9:fa:42:28:78:7a:12:e1:41:
37:11:d2:b5:b0:8e:67:71:b9:e3:55:50:e3:bf:c7:
19:95:91:5e:2f:32:ad:c0:ad:1c:4a:c3:71:cb:ec:
c4:f0:26:02:95:d3:be:ed:7f:f1:77:c5:78:d0:2f:
64:c8:31:32:92:f9:a0:8f:16:36:03:08:96:0e:16:
3d:59:3e:56:58:3e:97:c6:52:b1:4d:18:01:e8:0a:
74:96:79:09:26:f3:7d:56:6e:8a:8e:ef:e5:f7:d4:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:28:1C:DF:E6:82:DC:6E:E7:0C:5F:37:08:2A:E0:C6:62:B7:76
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:2d:a3:e5:56:02:8a:d4:76:ac:52:88:88:79:75:7c:9d:
b7:22:52:90:6f:89:87:b6:b4:0f:48:6f:e5:5b:df:6a:d6:be:
9d:30:d7:b5:f8:7e:cc:85:78:59:3a:61:22:9a:a3:5b:fc:b1:
48:86:aa:b9:b3:44:70:17:5c:02:1a:67:c6:75:50:ef:a0:7d:
89:e7:6f:f5:df:94:5c:18:a1:32:02:b9:f0:5c:d8:e0:08:ef:
40:db:53:ea:6c:d4:39:69:22:5a:bf:50:52:96:42:51:3a:34:
bb:f5:47:df:bf:22:be:34:95:10:5e:f2:55:5c:8f:d0:f4:51:
91:bc:20:0b:38:78:53:f0:c7:55:d7:9d:2e:8f:7b:75:59:54:
90:45:fc:7f:9c:42:44:73:3d:ea:54:fd:6f:95:e3:ad:3e:d1:
40:25:a5:a0:13:b7:cf:47:72:aa:a8:98:c0:36:ef:e2:a0:46:
91:80:a2:b2:cd:84:08:7b:68:24:0f:87:ce:4e:ba:ff:4a:9c:
b7:28:3d:65:1a:40:9d:a1:d5:96:b1:68:b4:8e:22:8a:db:e5:
7c:87:2a:7b:d5:ab:02:e2:fa:8d:f4:bb:d6:bf:c9:23:28:1a:
6e:a9:fa:a0:2a:07:60:34:36:f1:6c:db:89:f2:47:21:6b:6a:
e3:e0:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:25 2025 by rpki-client