Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
File: XmaBWkYx0OeXwfNm5HvxURXJpPs.mft (raw, json)
Hash identifier: OU81tiFlH4eJq2Kj6DVzvbcR88UTOBZm4w/uY8bkYCI=
Subject key identifier: F5:2A:BD:92:26:60:59:D0:73:08:1E:56:99:57:EB:B9:EB:D2:D9:2C
Authority key identifier: 5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
Certificate issuer: /CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Certificate serial: 0195895F8FACF935984EDBEC8A1C1EC294B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
Manifest number: 03EE
Signing time: Wed 12 Mar 2025 08:01:36 +0000
Manifest this update: Wed 12 Mar 2025 08:01:36 +0000
Manifest next update: Thu 13 Mar 2025 08:01:36 +0000
Files and hashes: 1: RcsdF1twYJezgr8yrtMpdKX_i-I.roa (hash: eUwQ3KjdQolC1TEdBZkoGCLFeL0MsnJZDlHFt9oWWQw=)
2: XmaBWkYx0OeXwfNm5HvxURXJpPs.crl (hash: /q/Try4Iy1FPE65z4rIWfS50Kmb4qH63rXu69+2yE4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:5f:8f:ac:f9:35:98:4e:db:ec:8a:1c:1e:c2:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Validity
Not Before: Mar 12 08:01:36 2025 GMT
Not After : Mar 13 08:01:36 2025 GMT
Subject: CN=f52abd92266059d073081e569957ebb9ebd2d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:94:74:4c:33:32:64:44:72:fc:6f:bb:19:
38:b6:db:9f:be:9f:d4:6d:40:0e:e4:94:49:e0:77:
2f:7b:73:c2:63:df:fb:10:ca:b7:77:b0:31:5d:cc:
32:6d:21:5c:99:fc:f0:e5:71:b7:99:61:7b:d4:16:
f2:60:0b:73:e4:62:6e:53:04:2a:88:6b:0c:a0:ce:
cc:78:96:0c:63:19:37:07:06:c3:9c:f2:65:b1:1a:
dc:0d:e8:b0:ec:f6:9e:47:3c:08:56:7a:a0:01:8d:
7d:5b:d1:dc:75:d1:40:0a:09:ab:b5:d9:38:bb:61:
a9:21:9d:40:69:22:71:35:72:61:1b:b4:66:b2:ed:
2e:60:f9:5b:7f:ce:46:03:64:13:33:e5:e3:6b:f2:
0e:2b:0c:a8:24:92:41:96:9d:fd:9a:5b:4d:3b:e3:
47:72:27:96:73:b8:60:bd:33:68:ec:16:5b:19:b7:
48:1a:50:d5:4d:b8:71:4d:f3:0a:34:5e:ed:cd:ad:
5e:59:5d:4c:ae:c3:67:e0:8a:0c:2b:0b:52:9d:b4:
87:87:ef:13:36:be:ab:9c:a8:1e:4f:f5:e0:2e:ae:
45:6e:1e:0e:19:60:c4:5b:54:57:33:73:16:4a:f8:
8a:11:af:29:98:5a:75:13:7e:27:0d:1b:d0:22:70:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:BD:92:26:60:59:D0:73:08:1E:56:99:57:EB:B9:EB:D2:D9:2C
X509v3 Authority Key Identifier:
keyid:5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:93:1f:79:12:dc:54:54:8a:b8:8f:04:9b:a1:ea:39:47:47:
40:5f:3f:6d:c1:d7:3c:34:5e:f0:2a:f1:87:02:42:b3:ec:e4:
7d:4d:9e:25:d3:51:05:dc:a7:26:c2:a4:2d:a2:1a:b3:3d:92:
48:e1:c2:c8:fb:a0:39:a7:4c:33:ce:6a:52:03:c2:48:66:65:
b3:a6:57:0c:df:02:b1:f1:63:26:04:7f:32:49:26:92:fc:8a:
d3:a7:8e:5a:b8:08:79:ef:3b:a7:2f:15:fd:c4:d1:1d:3a:a4:
fb:24:fc:61:2a:a2:ac:90:ef:05:85:bc:ea:91:f2:2c:55:81:
e2:8d:ef:4e:36:49:e6:36:a9:d6:68:24:79:75:c9:69:3c:46:
9d:24:2a:56:e7:d6:82:26:92:95:eb:e9:22:cd:13:e7:de:7e:
03:6c:df:5b:82:9f:dd:48:ba:04:cb:b9:16:bc:e7:3f:28:88:
4c:45:1d:98:a5:5b:27:94:4c:e5:31:8e:cd:6b:ef:56:f0:86:
55:f2:3e:4d:55:62:52:51:d7:8f:cb:bd:8e:b1:fd:ea:eb:04:
ca:b7:2d:c9:96:41:c7:47:7d:f0:2d:ec:2a:62:10:dd:21:93:
44:b4:ff:1a:a8:ac:5a:73:c2:3d:82:5b:90:be:b4:7f:dd:ab:
8e:68:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 04:47:35 2025 by rpki-client