Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
File: xRCtRomJb7hQznkP3-NE1MAnpa4.mft (raw, json)
Hash identifier: XnUKjRgo5IkBc+2tA2N57WLg2pPJMEh0ANoxoH50/Ds=
Subject key identifier: C1:FF:46:58:F6:A3:1E:D8:8B:DC:DF:07:EC:3C:3C:BD:4B:E4:AE:36
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Certificate issuer: /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial: 01963207C843BEA4AB719FB6C226C67A77FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
Manifest number: 14EC
Signing time: Mon 14 Apr 2025 02:01:32 +0000
Manifest this update: Mon 14 Apr 2025 02:01:32 +0000
Manifest next update: Tue 15 Apr 2025 02:01:32 +0000
Files and hashes: 1: h0xiomEz7xtLYsv88aOYGmA0lnI.roa (hash: BAw5E4Ocz44eNDbC47J9c+7M/I/mZ/R9N04y5bk6RWw=)
2: xRCtRomJb7hQznkP3-NE1MAnpa4.crl (hash: 117QT7N6RGT93qJDyOfQ0THI7WLBWF7XjF4HaQGGg0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:07:c8:43:be:a4:ab:71:9f:b6:c2:26:c6:7a:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Validity
Not Before: Apr 14 02:01:32 2025 GMT
Not After : Apr 15 02:01:32 2025 GMT
Subject: CN=c1ff4658f6a31ed88bdcdf07ec3c3cbd4be4ae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:92:a1:99:49:47:78:29:4e:6c:32:4f:44:
dd:b0:04:48:07:fc:6f:ae:a8:d5:31:5c:82:3d:ce:
25:6a:35:7f:1a:02:16:e3:de:37:a8:a7:8f:3e:f9:
c4:f4:a0:d6:8f:c3:89:c7:f3:ff:c2:92:3d:d7:e4:
73:70:1c:80:6f:c4:f3:a2:5d:c7:13:a9:a7:a0:f2:
31:3c:bf:f3:57:35:13:f5:44:ff:9d:8a:16:d9:a7:
80:54:32:ec:de:b8:51:30:9a:82:0f:e8:65:c1:c4:
61:09:0e:eb:db:f4:f1:51:83:b2:10:21:9f:bf:6e:
b3:ff:5e:8b:bc:10:03:8b:ae:db:03:91:4f:bd:be:
4c:6f:87:0b:9c:dd:05:00:fb:5e:72:da:bc:d2:9b:
2e:bb:14:9a:ca:a2:5d:89:4c:62:1a:a5:5c:4a:c2:
69:3b:ed:c7:64:ec:c4:59:d6:be:ec:8e:c6:d0:9d:
63:39:98:04:9b:ee:6b:0d:38:b2:98:10:c6:5b:8f:
68:5b:5a:be:f6:d9:7b:d6:54:6e:a7:58:db:ee:fe:
b6:9a:4c:f1:d2:c3:96:50:ee:62:5d:7c:40:af:fd:
80:f9:c2:dd:fc:ab:fc:ef:66:1b:72:e3:0b:d1:37:
fa:74:a0:ad:34:31:e2:51:2d:c4:26:18:10:ca:49:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FF:46:58:F6:A3:1E:D8:8B:DC:DF:07:EC:3C:3C:BD:4B:E4:AE:36
X509v3 Authority Key Identifier:
keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:73:d6:b4:9d:67:51:d3:3a:63:41:7b:35:5a:55:5d:15:61:
49:55:e3:da:0a:c1:e7:c0:f8:8e:f0:8b:23:85:74:61:d1:34:
2e:6e:05:5f:93:d3:a9:ca:60:7d:29:29:c7:ef:0a:11:88:f9:
2b:94:d4:a5:ba:7a:e1:83:39:7a:57:4e:72:91:d3:79:63:74:
5c:95:06:a4:72:9d:5d:ef:00:98:7f:4a:d9:69:58:89:8c:64:
e2:54:3d:eb:3d:4a:6c:9a:7e:d6:10:87:a2:d1:8e:71:50:10:
77:ba:e0:16:3b:cf:50:e8:2d:23:9a:76:c6:e2:e1:03:bd:0f:
36:8f:16:b2:03:c3:76:93:82:67:cd:ed:e2:1a:45:e5:19:dd:
bc:d0:da:99:5f:e3:ca:58:2e:f6:51:33:e6:b0:13:23:36:90:
b8:c0:91:42:1e:06:57:89:cf:a1:0f:ac:0d:ee:bb:3d:36:b7:
98:43:03:a3:9c:87:76:73:6d:60:2e:2b:dc:ac:a6:e7:55:72:
a6:47:1c:bd:0f:db:39:9f:4c:96:a5:2b:03:b6:e3:7f:4f:cf:
9d:b4:5c:4f:aa:b6:b3:63:4b:de:7c:ce:4c:02:fc:6c:93:d4:
57:25:ec:16:36:26:72:c9:2d:cc:3f:84:e3:08:37:6e:d1:ae:
54:e0:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:30 2025 by rpki-client