Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: AiwhZ7Ou0S0Z3ln5IIkQ88MeJlaFKxXHDKhmrK6YYls=
Subject key identifier: 3E:58:B8:0E:97:B0:D9:EF:27:83:F5:5E:AE:E5:C1:DD:EC:05:2F:45
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0195E1903AE2E3AECC712B5D4D611A04F897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 01A8
Signing time: Sat 29 Mar 2025 11:01:20 +0000
Manifest this update: Sat 29 Mar 2025 11:01:20 +0000
Manifest next update: Sun 30 Mar 2025 11:01:20 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: sfZoxfBq63kvMbyYIDCy/SB0qnoiA66jBqDzOEL63jc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:3a:e2:e3:ae:cc:71:2b:5d:4d:61:1a:04:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Mar 29 11:01:20 2025 GMT
Not After : Mar 30 11:01:20 2025 GMT
Subject: CN=3e58b80e97b0d9ef2783f55eaee5c1ddec052f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:bb:d6:5e:d1:fa:80:11:e0:4a:e6:e6:fe:
7e:86:76:4e:64:91:89:c0:5e:95:09:8e:75:1a:8f:
9e:51:9b:fa:7e:72:9b:a0:e3:5c:c4:79:09:27:a9:
40:ab:03:cd:56:e6:83:97:6b:5c:b5:e4:e2:5e:bc:
5c:26:b2:d6:aa:f0:8d:1b:12:20:35:e0:dc:34:36:
5f:d7:9b:fa:ef:fd:c7:9e:d1:37:1c:29:af:c8:9f:
45:8c:af:fd:2c:2e:e6:e1:b5:ea:3e:96:66:8b:2b:
6c:e5:b3:a8:62:89:ad:ce:a9:29:61:43:d8:fc:dd:
d2:38:2c:68:6e:32:d0:64:a0:70:f7:ba:51:46:dc:
39:7b:0f:19:5b:b9:33:db:d4:ba:14:d0:7d:89:f2:
e8:cb:ad:7d:07:f6:94:3c:85:ad:0c:75:d1:63:de:
e6:f9:c4:32:6d:e3:3e:30:4e:1c:8f:b3:22:01:dc:
83:fc:d0:2e:6d:90:ef:6f:26:df:06:94:11:5a:9c:
f9:c4:5c:05:a7:03:8a:86:f9:ed:69:27:aa:19:5a:
f8:95:20:89:a0:73:8d:8e:50:6d:79:9b:be:49:88:
6c:44:f8:e6:35:dc:93:aa:00:5f:6a:f6:31:aa:fa:
a8:8a:4e:c9:c1:ba:ea:f6:0f:14:4c:a7:d0:e7:7e:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:B8:0E:97:B0:D9:EF:27:83:F5:5E:AE:E5:C1:DD:EC:05:2F:45
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d2:67:13:f3:4c:7c:e5:c0:c1:83:d1:10:43:4c:5a:86:a8:
cf:d6:22:a9:9e:0a:eb:a6:f1:8b:9c:fe:f8:ea:33:18:76:0d:
e4:75:99:00:a0:27:39:61:cd:f3:cf:12:0f:79:74:35:15:eb:
ed:a6:61:6c:f0:b4:01:7c:7e:8c:3d:d9:e2:67:3e:77:1d:93:
f6:8d:ef:e8:f6:bb:8f:13:2e:0a:4b:42:b0:fb:72:12:dc:c0:
be:0e:ab:6e:8a:bf:61:94:ad:bb:fd:c0:30:19:87:00:b6:81:
74:50:1c:73:ed:4a:c5:4e:85:5c:82:4b:d6:f6:cd:eb:5b:12:
c5:36:b0:a6:8a:b8:21:88:a8:1e:d9:55:69:c6:b1:a8:37:3d:
6a:09:ac:20:37:78:08:c9:d5:cd:f2:3d:14:da:31:ef:3c:98:
fb:e4:8c:18:82:c2:99:07:74:73:bf:cf:27:6a:37:fd:4e:a6:
3e:90:56:f0:9e:74:e3:8f:3d:27:41:79:95:01:76:1c:cc:83:
c4:ef:10:51:68:5d:b2:22:83:0f:13:68:8a:d0:93:34:91:dc:
f3:e5:65:f8:92:62:b5:71:0e:00:cf:48:49:e9:3d:2e:9c:d7:
c6:73:ab:bc:3e:8f:f4:8c:7a:38:40:24:38:c8:b7:d2:97:0c:
4c:3b:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:04:52 2025 by rpki-client