Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: CP86/MqTqdk5aQHZl2T/Wt1wmfXipb7xL2DDcK2pn5g=
Subject key identifier: 28:38:9B:97:91:DB:27:2D:7B:65:84:D7:23:FD:A3:08:76:56:D1:5B
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 0194BD17DE2C9F6B28E7756BD0E7A203B791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: zA71PR0Ibf4ivIM4Nvz4bJRaqjT2F1uaNtymf1c3Wuw=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:2c:9f:6b:28:e7:75:6b:d0:e7:a2:03:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=28389b9791db272d7b6584d723fda3087656d15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:0c:db:81:19:4d:30:19:80:2c:19:08:59:
39:2c:d1:6e:ca:4c:48:f8:e4:76:37:a1:9c:95:c4:
ad:f9:c3:84:e8:e6:fa:2e:61:16:68:00:ac:ee:d8:
fa:9f:47:43:8d:a3:0a:0a:a5:68:31:82:7a:71:b2:
f1:28:c3:0f:77:cb:12:68:62:4a:4e:c0:a7:f9:5e:
77:7f:67:a1:e0:22:cb:3b:b4:52:48:7e:2c:80:15:
f4:54:ac:1d:77:00:53:14:14:cc:4b:a0:b0:00:fd:
f6:62:ae:e5:ec:a3:1b:5d:9e:ea:98:ef:92:81:41:
de:35:c7:91:b8:09:2f:ca:33:ec:6a:0e:8a:ba:78:
72:9c:63:12:4a:10:b4:52:b5:c7:6a:9a:c0:9a:aa:
78:c2:74:7e:3f:cc:36:6e:40:57:e5:15:f5:dd:ce:
73:43:f7:cc:6c:1e:1a:67:c1:18:e2:a8:0f:7d:27:
b5:36:91:0f:92:df:b6:11:fb:ee:2e:77:63:05:6e:
34:24:27:3e:a2:39:06:87:ad:d7:de:e9:c1:14:98:
fe:f6:ae:cb:49:9e:c0:85:65:db:fe:e0:83:dc:39:
84:96:cc:45:81:a6:bd:cf:46:24:3e:53:93:5f:2a:
5b:0b:e4:7d:6c:f1:e8:ae:a3:49:7a:b4:d1:85:3b:
fe:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:9B:97:91:DB:27:2D:7B:65:84:D7:23:FD:A3:08:76:56:D1:5B
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:17:32:b6:bd:16:3c:15:d0:0d:71:f1:0e:42:4c:1d:5a:72:
1e:f4:5a:a7:dc:33:bc:8f:9a:12:dc:32:5d:a2:84:08:f4:b2:
a9:bb:d5:bf:43:6f:bb:46:d7:a7:4e:09:9e:5f:6c:81:47:ae:
5e:fc:30:7e:17:a7:a4:ea:3e:56:74:7f:f3:e7:11:d2:7c:dd:
50:1c:e2:e8:ea:c4:25:9b:ea:dd:50:c4:70:8f:6a:1d:a0:c6:
f3:cf:9b:be:ee:a3:bd:ff:a9:aa:6f:1b:b3:23:27:7a:bd:2c:
e2:4b:a3:18:e0:7f:8d:e0:45:b1:06:27:1c:84:dc:76:bf:66:
8b:bc:30:67:12:ee:f2:5e:7c:33:05:a5:83:55:2e:67:ca:80:
68:5d:45:af:c0:c9:08:e2:44:bb:f5:06:16:f8:75:c9:b0:3a:
3f:33:ca:57:36:1d:47:d1:1a:a7:27:59:4f:5a:9f:43:6d:22:
9c:25:47:42:1e:6e:05:7a:fa:d8:45:22:2e:53:cf:5e:e2:73:
e2:24:6a:88:ab:f8:9c:e8:e6:cb:a5:37:23:32:73:24:38:c2:
49:1b:ec:d7:21:e2:c6:35:fe:b0:8d:aa:67:3f:f9:4e:02:d9:
22:15:03:99:59:08:7f:2d:fd:df:a5:65:51:c8:0e:49:e6:84:
11:56:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:47 2025 by rpki-client