Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
File: XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft (raw, json)
Hash identifier: 5xKjw7aK9NPTYgO9wvP1J2ns/SfFBkXldiWyKurGF8w=
Subject key identifier: 80:BF:99:2D:B8:FC:6E:C2:EE:2D:76:CB:E0:3C:B8:4D:C6:9A:2A:AA
Authority key identifier: 5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
Certificate issuer: /CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Certificate serial: 0196E757E3CC60D2C9FAFB558CD3CEF06A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
Manifest number: 128A
Signing time: Mon 19 May 2025 07:00:18 +0000
Manifest this update: Mon 19 May 2025 07:00:18 +0000
Manifest next update: Tue 20 May 2025 07:00:18 +0000
Files and hashes: 1: 0vSFPoYxfJgGVZze9FXoh2RkpVA.roa (hash: ZmZ0S6349yqHsdfm9IChX49SmL/P7lxaKuGOii7tvuA=)
2: 9JM6FQ3JNcJAsurX_9l52alhS78.roa (hash: a7KiUg0rkGYES5Jq40C4im6HS+LxQ3+rKB9CYqBxCgY=)
3: XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl (hash: cMiet4j3N71JY8f8eFgCcC0NNcZk/8IgBMy0iyuE7IE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:57:e3:cc:60:d2:c9:fa:fb:55:8c:d3:ce:f0:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1aa6a92931bfc7e14007c47c949cd5ee3e980f
Validity
Not Before: May 19 07:00:18 2025 GMT
Not After : May 20 07:00:18 2025 GMT
Subject: CN=80bf992db8fc6ec2ee2d76cbe03cb84dc69a2aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:f2:25:80:0a:aa:a1:14:d3:7b:25:d9:21:
09:25:93:71:b7:0e:e8:a5:87:59:fc:6b:1e:61:ce:
4e:ae:5f:10:b9:31:0f:86:af:cd:d1:f2:bb:b6:08:
f0:7a:f4:3d:38:00:c1:ef:0d:42:60:e0:3d:e8:a6:
6d:4b:67:c3:e0:81:05:15:02:bc:fd:44:33:26:a1:
89:55:b6:b7:aa:24:a7:3b:82:4e:a1:30:8e:76:7a:
1f:86:2d:7b:36:e4:49:00:68:60:b6:bd:ba:21:6d:
b9:57:14:b7:62:c1:a0:45:94:6f:ef:e8:70:2e:20:
32:7a:9a:aa:26:d2:71:68:ac:21:c0:44:02:67:71:
c9:08:ed:a6:cb:e6:03:b6:87:c1:5a:39:b5:d9:3d:
f6:a1:da:1f:bb:e4:56:ac:e0:a8:9d:57:90:cf:d1:
2f:d3:2d:e0:a1:d8:2a:5a:7a:f0:7d:52:14:e3:37:
89:24:e0:43:09:1e:b9:c4:6e:4f:86:3c:79:8c:f7:
12:31:da:7b:1f:d6:5b:31:fd:b7:59:50:55:8a:f1:
e7:ca:38:ac:81:df:af:e6:fb:d3:c9:b3:bd:62:24:
e3:f3:c1:bc:b8:4e:a0:59:05:21:0c:16:3c:55:6b:
1b:3d:9f:5c:dc:57:76:8e:18:f8:82:d3:db:1e:aa:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BF:99:2D:B8:FC:6E:C2:EE:2D:76:CB:E0:3C:B8:4D:C6:9A:2A:AA
X509v3 Authority Key Identifier:
keyid:5F:1A:A6:A9:29:31:BF:C7:E1:40:07:C4:7C:94:9C:D5:EE:3E:98:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxqmqSkxv8fhQAfEfJSc1e4-mA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a0c3db-6545-45a8-a845-bb7ec3c8cde8/1/XxqmqSkxv8fhQAfEfJSc1e4-mA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5b:bd:aa:96:79:de:19:60:c6:6c:d5:f0:1f:b1:e0:76:b4:
0e:2f:71:cc:7d:ed:ec:24:4f:de:2a:93:6a:3d:0f:fc:c2:c3:
18:c8:05:fb:ea:61:eb:88:fe:96:7e:1e:b2:f1:e2:f6:2e:1d:
3f:ee:ab:a7:f0:c3:ce:7a:d4:81:84:e6:50:43:17:21:f6:68:
d2:89:8f:dc:b4:aa:79:c3:ff:34:10:d4:c3:e3:7c:3b:78:6f:
d3:e8:bd:fa:4c:f2:7b:af:8e:95:cb:1c:62:53:84:ef:b6:fc:
a0:97:cf:8e:3b:04:a9:79:9b:df:39:85:60:31:2a:11:18:52:
a4:52:f1:97:ca:c9:3d:b7:ca:81:1b:be:78:4f:fe:16:bc:5b:
33:e7:ad:92:e8:db:97:fc:dc:9c:6e:13:4a:67:3a:56:43:b2:
81:e5:ae:3f:f4:af:a5:7e:56:52:19:7f:89:cb:81:35:51:36:
e7:0a:dc:20:dc:14:a0:a3:35:06:a8:f2:69:b3:25:bf:2d:18:
19:2c:af:5b:6d:db:0e:40:61:21:87:2a:02:61:09:f8:56:ed:
bd:be:0d:3f:ce:e7:03:60:b4:f1:87:cf:db:17:c2:80:c0:1e:
89:d0:ed:1e:7d:72:c8:58:30:a9:c7:ee:48:7f:2f:ee:19:cd:
3f:7d:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:38:13 2025 by rpki-client