Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: miWrmCvKxYmjzK9I6nQSZbk61GssoTorJvWTJbPYm+o=
Subject key identifier: 73:C7:12:88:E8:67:FB:DF:52:A3:DE:EC:EC:54:B2:EB:13:48:0D:53
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 0195E15A34ABED53B234A7AD766074BA5C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 10:02:20 +0000
Manifest this update: Sat 29 Mar 2025 10:02:20 +0000
Manifest next update: Sun 30 Mar 2025 10:02:20 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
3: aHqqL1NN5YtLBNmQYn6ZUukv3fE.roa (hash: LV3wM5zWPJWC7ZTCI+xUuEUT6iOR32mYf+UKwFD/zS0=)
4: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 57Q1cjIcI8gQqkeFQ7YM96o3trkYL2VV1zBI0GrEcdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:34:ab:ed:53:b2:34:a7:ad:76:60:74:ba:5c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Mar 29 10:02:20 2025 GMT
Not After : Mar 30 10:02:20 2025 GMT
Subject: CN=73c71288e867fbdf52a3deecec54b2eb13480d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:41:8c:f6:70:57:cf:78:bf:e4:5e:73:d1:
d7:ca:ae:f0:19:6f:64:c7:e9:6d:b5:81:bd:57:da:
71:8c:45:c3:ff:ad:2a:8b:b2:1b:2f:b8:a4:37:78:
98:23:21:fc:43:a4:67:ed:17:91:7c:8a:b4:7a:cc:
95:5f:57:b8:c5:01:d6:e1:8f:bc:85:27:66:67:b2:
4d:ad:76:64:81:1c:d4:f6:ec:4a:8d:15:3b:c6:fd:
b0:bc:24:b8:93:70:ec:ef:d9:91:5f:57:4a:00:f4:
71:2c:61:a3:78:cd:b5:50:4f:87:51:13:5d:39:e5:
68:3f:9a:28:b8:61:b5:12:b0:d7:23:22:a5:bc:76:
a7:b0:3f:06:39:08:9e:bd:03:c7:d6:60:de:5f:d9:
cd:3c:e0:b9:85:5e:d6:ce:c7:7d:cd:3b:11:0a:75:
e8:0f:18:22:c2:b4:37:7f:0e:2a:77:ca:a6:94:39:
12:80:a4:28:86:33:23:f5:31:fc:cc:80:ee:1b:61:
33:85:e2:b7:81:ac:a5:8e:9e:b7:e0:ea:06:7c:32:
94:bd:32:e1:60:3e:b2:59:db:ad:12:da:d2:12:1f:
5b:65:04:dc:cc:f2:9b:30:50:7d:99:be:38:cb:89:
5f:89:96:d8:f3:12:c8:d3:7e:b4:78:6c:d8:52:3b:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:12:88:E8:67:FB:DF:52:A3:DE:EC:EC:54:B2:EB:13:48:0D:53
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:83:d7:93:85:c0:44:e7:ee:c0:c2:2a:68:86:bc:d0:41:
31:af:26:2e:ac:1d:62:34:03:6f:a5:d4:62:94:bb:ba:f4:27:
ea:65:7e:01:3c:ea:5a:72:e7:ac:85:41:86:9f:09:c0:47:5d:
62:10:d2:01:40:ab:c5:25:89:af:81:95:e8:02:0a:b8:c9:20:
e0:b4:fb:d9:e9:2b:32:07:0b:b4:4c:ab:d5:af:ee:d2:af:70:
da:6a:08:76:02:87:1e:0a:46:17:37:e0:54:06:45:88:11:62:
33:26:27:42:31:ba:81:0c:f6:90:82:3d:9c:f9:59:9f:1d:6b:
cb:79:bc:3d:7f:6e:d5:a8:56:8c:fa:79:57:e3:72:a5:6c:28:
5c:14:43:ac:96:ac:f6:8e:71:75:99:15:a9:f5:04:15:56:4a:
47:f2:5d:0e:00:08:71:ef:a7:e5:79:f3:47:56:b3:d4:56:a4:
a8:8b:95:e0:9d:4b:fe:bb:c5:ce:25:85:e4:94:34:f0:7a:91:
aa:c5:4b:68:6b:4a:4e:0b:53:69:9f:78:88:2f:9d:da:86:40:
b3:e9:f9:5e:d1:91:85:36:b4:05:e6:2e:06:79:33:4a:75:a9:
7e:7b:c5:81:9d:62:6c:2c:a6:50:90:20:e8:21:d2:53:71:00:
20:4b:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:44 2025 by rpki-client