Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
File: xHqPXpSR9hvSgZJTgKlRz39AssY.mft (raw, json)
Hash identifier: o4slu0nG+ifqL+yOBhe0tOoBRJ1o6/pKKDKMA3sUL4o=
Subject key identifier: 32:F1:80:31:4C:DC:6D:48:18:45:23:D5:3B:6A:37:41:EC:30:82:AE
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 019588BA1AD3552E9BD111A1A26BF406CDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
Manifest number: 0D69
Signing time: Wed 12 Mar 2025 05:00:52 +0000
Manifest this update: Wed 12 Mar 2025 05:00:52 +0000
Manifest next update: Thu 13 Mar 2025 05:00:52 +0000
Files and hashes: 1: SGwAA-fR3D3rc4SYK2_MACMqPag.roa (hash: n833x52q5vzdsajpNe+4Svd7tOv/ERmWFk/p4sac9rU=)
2: i14FMCCtmyNi7Q0Q8ZQ9tyY91As.roa (hash: lnF6bsP0n/QwtQ70N0z3Vrq3srYbi1zZZHLkg+ahEbw=)
3: xHqPXpSR9hvSgZJTgKlRz39AssY.crl (hash: 03TGP6mgYQm7eAA9+Jz6frwz9AIzMKL7OVmBgvRlawI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:ba:1a:d3:55:2e:9b:d1:11:a1:a2:6b:f4:06:cd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Mar 12 05:00:52 2025 GMT
Not After : Mar 13 05:00:52 2025 GMT
Subject: CN=32f180314cdc6d48184523d53b6a3741ec3082ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:5c:8c:c9:49:3f:2c:b6:19:39:b7:17:34:
a0:f5:73:3e:12:c1:95:11:7f:52:5d:ff:22:09:c0:
3e:1e:ce:ab:e7:49:7e:9e:96:5e:af:a5:16:a9:13:
fe:1e:87:3e:1e:09:d0:d6:de:f7:cf:46:6d:99:ea:
15:8e:20:32:64:b9:dc:6e:00:88:41:45:33:7b:80:
88:5c:f9:a7:2c:9a:52:22:d5:f1:74:c6:78:62:39:
7f:d4:d9:67:d8:3d:78:d9:c3:96:f1:5a:82:db:23:
b3:58:d3:ca:a3:e4:fb:78:cc:be:c5:92:17:e4:72:
38:2f:2f:6a:ee:74:77:2d:ca:85:44:66:09:2c:da:
16:0a:a7:2e:fa:b0:b8:12:73:6a:68:45:4f:39:53:
2d:ac:ae:74:35:4d:3d:3f:05:63:28:53:e0:b1:08:
c8:64:d9:fd:e1:01:92:02:e1:05:10:16:31:94:41:
ac:d0:e5:07:95:42:42:1b:d0:34:de:3e:2d:2c:02:
f4:aa:2d:1e:71:7b:40:a5:78:3c:33:f7:ef:ab:55:
d3:e9:98:b8:24:42:65:de:e7:c3:db:31:1d:a4:d7:
52:42:97:ff:ab:62:d9:8d:ce:38:0d:c3:93:10:81:
c2:eb:22:5a:97:c1:39:d7:59:6f:a0:16:88:b1:42:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:80:31:4C:DC:6D:48:18:45:23:D5:3B:6A:37:41:EC:30:82:AE
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7f:e9:0d:aa:14:8f:7e:a9:36:ca:4e:b3:95:1d:2e:8e:03:
d0:1c:6c:9c:d1:a3:c7:06:62:8d:c7:06:53:09:66:af:ff:79:
81:95:cc:71:84:8c:89:27:ad:5f:3c:7d:b4:5f:b6:2f:1e:cd:
84:cb:19:57:13:af:ae:4c:bb:f3:0e:40:fc:72:b0:23:52:81:
8f:86:b8:04:84:cc:61:d9:9c:92:50:34:fd:a6:3d:dc:a3:b2:
df:54:eb:aa:81:be:a3:fa:a4:c0:98:0b:37:a5:ce:fd:49:f3:
13:f6:16:31:ee:c5:5b:9c:f1:d6:9d:72:ab:49:4f:35:b2:28:
06:79:1f:a7:c6:f4:b2:bd:9b:9f:26:f5:2a:71:a6:43:a2:60:
7c:01:96:2f:2c:cf:97:11:44:60:5b:22:e3:17:93:6c:5b:35:
92:cb:bd:19:b4:64:df:8f:65:ba:fb:69:d2:ce:78:28:9a:99:
80:f6:d7:3c:a7:ca:b8:9a:df:13:d4:db:2e:5c:fb:b9:fc:a1:
5d:5a:16:e8:8a:32:39:3a:29:a7:10:4d:94:6e:ad:9b:6c:35:
5a:6a:9d:7f:80:dc:3c:b9:80:fc:65:17:b0:61:2b:39:b0:52:
3c:06:a8:33:5f:a0:90:94:5a:da:99:76:66:de:46:fd:be:11:
d1:10:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:01 2025 by rpki-client