Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.mft
File: xa4GRib1zrfuoN-P0BwQ3Ur4LX0.mft (raw, json)
Hash identifier: 1ZJTrxUUF5HPiNXtZq8991MXS1L7JItFkXGvomtju3I=
Subject key identifier: AF:8A:5E:6C:06:2D:A8:18:08:37:0B:DE:0A:24:91:78:76:2C:D0:0B
Authority key identifier: C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
Certificate issuer: /CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Certificate serial: 0194A0FB5E85162DDE8AEC7AC93F5EA7920D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.mft
Manifest number: 0419
Signing time: Sun 26 Jan 2025 05:00:15 +0000
Manifest this update: Sun 26 Jan 2025 05:00:15 +0000
Manifest next update: Mon 27 Jan 2025 05:00:15 +0000
Files and hashes: 1: 5up8UwZ-z-Kcx8cRkCjHGJqDu1o.roa (hash: bCEtVgEuveaBWt1nLuo3r95Qz0ce/skvbhAlNfdedyU=)
2: xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl (hash: xQDkERpApKFpV5cJkx0RWnflNHTstbzdxsBX7Y3hq2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a0:fb:5e:85:16:2d:de:8a:ec:7a:c9:3f:5e:a7:92:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Validity
Not Before: Jan 26 05:00:15 2025 GMT
Not After : Jan 27 05:00:15 2025 GMT
Subject: CN=af8a5e6c062da81808370bde0a249178762cd00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:4e:d9:b5:05:8b:29:e7:65:ef:71:dd:f6:
26:a9:f7:8c:98:5d:fc:3c:ec:5d:b2:b3:cc:0a:97:
a0:80:fb:89:70:93:ac:92:2f:6d:4b:4b:83:1f:e5:
84:c8:c6:c5:a9:a6:2d:3e:8d:59:90:81:47:25:98:
76:92:8c:e0:5f:78:39:ab:5b:9d:86:74:04:64:dd:
4f:9a:b5:d2:a5:b2:75:29:61:2c:29:75:de:ce:cc:
f5:18:2f:55:ab:19:fb:69:ac:d0:2d:96:26:14:18:
22:bf:df:68:95:39:cb:c6:62:d4:67:b4:45:19:27:
40:49:e5:74:e8:d1:81:1f:3d:5f:11:eb:0a:d2:c0:
ef:39:30:39:5f:86:f3:0b:20:26:06:10:6f:08:79:
1e:6f:d7:c2:17:25:d7:3a:de:67:0a:7b:81:47:69:
21:91:15:d0:f9:b5:65:cf:a0:3e:98:e6:de:c0:56:
73:55:37:49:2f:87:03:3a:19:a5:55:2e:ba:2c:ec:
1a:24:19:88:7d:74:19:c1:a1:d7:eb:d3:a0:3d:29:
1b:ba:2c:41:68:44:57:17:f4:73:24:ec:1a:5a:6e:
bc:a4:84:8b:0f:f5:a9:d4:1d:93:92:1f:7e:cc:32:
0c:51:0b:58:36:9f:5e:2b:80:4f:c7:34:e1:0a:d2:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:5E:6C:06:2D:A8:18:08:37:0B:DE:0A:24:91:78:76:2C:D0:0B
X509v3 Authority Key Identifier:
keyid:C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f4:bd:c1:eb:02:65:13:f4:37:8c:bd:c1:30:9a:e1:73:5b:
3c:63:a3:85:07:36:03:63:32:28:34:00:05:43:be:45:2a:22:
2b:a1:29:ed:1c:d7:b2:51:86:03:2a:99:47:97:0f:67:7c:be:
e8:91:e1:94:12:92:29:af:49:65:c6:2d:27:ac:d3:01:3e:6d:
b8:2c:81:ba:e4:da:46:25:2b:39:7a:6a:af:a1:d8:5a:6e:2f:
9f:3a:e2:b7:16:78:18:7d:de:20:65:87:82:e2:cc:cf:5d:85:
c6:49:95:db:9c:73:10:1e:12:fe:09:f9:94:48:83:a6:79:01:
d4:02:ed:44:71:6d:00:a7:6d:70:24:5a:35:c4:68:43:0b:66:
b5:11:6f:3a:5d:25:5b:3e:0b:61:f6:4f:da:2c:51:d1:19:69:
59:5f:ed:ef:0f:f0:6a:a6:c4:c3:98:d5:c7:b6:08:ca:e0:89:
e7:0c:79:cc:4b:69:8b:6e:71:53:01:4c:15:a6:f2:73:d7:90:
f9:2b:e1:9f:fb:5f:54:eb:c7:da:be:d6:03:33:c2:dc:b4:e5:
c9:31:25:7f:9a:57:0e:a0:f3:99:89:29:e7:ba:b3:63:35:c2:
aa:49:fc:a4:a8:92:91:f6:0a:59:bf:5c:d2:45:fe:bb:1c:82:
db:b3:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:15 2025 by rpki-client