Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json)
Hash identifier: Xc9QahBVhAoeqjsNyKaXkIW9nKRjBXmc0edNLnlRnKw=
Subject key identifier: 84:77:4D:B2:2C:B2:EA:C6:80:21:45:CE:60:BE:21:F8:EB:6D:FC:D6
Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Certificate serial: 0195E0B4AC6346C77C4064D5C90140497AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
Manifest number: 142E
Signing time: Sat 29 Mar 2025 07:01:31 +0000
Manifest this update: Sat 29 Mar 2025 07:01:31 +0000
Manifest next update: Sun 30 Mar 2025 07:01:31 +0000
Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=)
2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: QQ2iF+QG5ScmwkCucLXChuaQtdj36T01huutiyA0BZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:ac:63:46:c7:7c:40:64:d5:c9:01:40:49:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d
Validity
Not Before: Mar 29 07:01:31 2025 GMT
Not After : Mar 30 07:01:31 2025 GMT
Subject: CN=84774db22cb2eac6802145ce60be21f8eb6dfcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:50:b1:e4:cd:13:d2:49:92:78:2c:02:67:
90:d6:cf:c9:b1:2c:45:4a:d2:8d:92:67:73:30:c3:
c0:39:fd:a6:5b:bc:9d:ac:17:a0:13:fe:a1:df:2a:
d0:14:db:90:8d:22:43:3f:f5:a6:f8:05:56:39:87:
cf:f5:43:05:49:f3:2f:8c:a7:f9:7d:62:af:09:b4:
29:4f:d3:98:8f:2b:7f:f0:cc:66:05:25:ad:b2:4e:
fd:04:ce:bc:ca:b5:f5:53:2b:1b:ca:e6:1b:ff:01:
97:cd:f5:6e:9e:8d:ca:bc:93:46:68:00:df:28:a5:
a6:90:4d:20:0c:42:b7:ad:8b:0d:51:7a:cc:b5:94:
dc:12:bb:3e:28:c4:d9:4e:f4:a1:18:2d:5b:98:60:
01:fb:5d:23:4e:5e:b4:de:f6:cb:db:62:4b:f8:5b:
72:cf:78:a1:9e:37:2f:a8:84:86:32:16:68:c2:1c:
5e:59:0f:6e:b6:50:78:4c:e6:90:a0:66:17:94:47:
d0:f3:33:50:c4:f9:81:98:9f:d1:07:52:1d:7c:81:
a8:99:49:97:b1:63:d2:e3:83:da:84:8e:59:fa:19:
30:b8:bf:e2:d7:b1:bd:12:a4:b4:91:eb:eb:63:cf:
b1:da:61:76:8f:e1:7e:e9:d9:3c:3a:5b:ca:ac:3e:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:77:4D:B2:2C:B2:EA:C6:80:21:45:CE:60:BE:21:F8:EB:6D:FC:D6
X509v3 Authority Key Identifier:
keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:53:d5:f3:ca:a7:ea:9c:59:46:f3:14:8a:1d:82:24:0e:5c:
ea:b1:3b:aa:6e:49:95:3b:0f:6f:94:7a:13:00:6b:70:4a:ff:
5b:4f:c5:1e:1c:c1:81:90:56:85:d9:42:b9:37:44:ef:e5:eb:
8e:8d:fd:36:df:58:4e:12:a2:b4:18:ec:57:bc:7a:d1:df:f3:
f6:e5:95:b2:09:c2:b8:62:e6:35:06:26:d1:27:4d:3b:3d:d8:
95:4b:7e:6a:01:3a:a8:d3:8a:80:6f:c5:2c:fb:da:76:f9:89:
a0:35:da:16:5d:c8:8b:e7:ff:65:c2:22:28:06:a2:1f:c6:5c:
71:9d:02:2a:0c:22:b6:e2:be:e4:e6:97:f4:fc:de:6f:0f:5d:
8e:48:4b:76:b4:99:0c:e2:1c:99:1b:1f:74:cb:b5:df:b4:e4:
cd:fe:75:03:2a:97:b6:c3:97:26:f6:8e:35:fa:94:ab:1a:ce:
c6:80:ef:79:57:2b:49:6d:de:1d:46:7b:a5:93:d7:3f:fa:de:
f3:e1:e6:82:31:97:ba:c6:eb:f3:42:58:b7:39:40:f3:21:24:
e2:f4:e3:df:06:ae:d8:f3:dc:af:15:6d:ec:ad:6a:53:bd:08:
9b:ea:b0:75:33:4c:ba:ae:ad:da:c9:b5:1f:11:08:13:38:55:
77:ea:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:48 2025 by rpki-client